Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
File:                     r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json)
Hash identifier:          DvcNFF4qyiB7gIdHBC/WSjSMUh+M2CiLfNZgsHo8qRc=
Subject key identifier:   19:71:18:D3:1A:D3:29:9D:D0:91:C3:92:45:C5:D8:7B:AD:D4:06:B6
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Certificate issuer:       /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial:       1FBE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
Manifest number:          1F4D
Signing time:             Thu 08 Oct 2026 16:03:44 +0000
Manifest this update:     Thu 08 Oct 2026 16:03:43 +0000
Manifest next update:     Thu 15 Oct 2026 16:03:43 +0000
Files and hashes:         1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: xaqhMKHoqJymbdcxbiNpM+MYBLFF5PVty4tAb4nhyX4=)
                          2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: yrw/Wliea2v/nhT95C1H6CHn+Y9xHNL1DsyB2AthFt4=)
                          3: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 8+HVn+1aDWLHtIQalu+KT6alxAIGWOxLQB3VgePG+TU=)
                          4: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: orzccmiNSicAop/OpjFFJ2tGr1eSdfKFi4jU7YLYc30=)
                          5: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: R0F5zzc+BpzP1/ZU/NVRkNdsAgNiR161974QmuBaZJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
                          rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8126 (0x1fbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
        Validity
            Not Before: Oct  8 16:03:43 2026 GMT
            Not After : Oct 15 16:03:43 2026 GMT
        Subject: CN=6ac7bee0-125b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:ca:b1:32:3e:d1:fd:15:e5:18:a4:1f:17:
                    dc:bd:2a:03:10:3a:6e:b4:89:22:a8:29:88:99:b2:
                    4b:d6:6f:08:5d:b0:bf:1a:43:bf:c7:c1:27:19:28:
                    0b:49:63:86:e1:19:4a:92:04:01:cf:9a:b2:93:04:
                    67:d6:d1:99:c1:d5:34:11:86:9f:4c:11:ab:ab:06:
                    9d:fa:d5:62:3e:d0:74:b7:fe:1a:a9:5c:8d:f0:c8:
                    90:f8:f4:de:1b:73:0d:d1:09:ea:a0:56:01:40:8d:
                    1d:e1:85:96:fc:82:ac:41:08:65:94:2b:1c:52:bf:
                    ea:64:13:73:54:e1:2d:8f:f5:db:94:c7:1c:f0:07:
                    e5:09:1c:09:c0:3d:dd:dc:d0:c9:a0:7b:0a:0b:31:
                    bd:2d:7e:e3:80:60:23:63:d6:ae:5a:79:e8:46:04:
                    fb:58:ce:ec:fe:32:3b:91:08:97:db:42:9f:21:28:
                    a0:ac:86:7e:d9:92:45:34:16:ef:05:02:42:c4:e4:
                    25:6d:00:74:19:55:28:f2:05:19:57:6b:31:ff:8b:
                    58:c5:56:13:ef:60:1d:0d:ac:dd:82:06:85:6d:43:
                    b7:dd:b6:8f:08:4f:16:5d:73:9d:b7:76:b7:8d:55:
                    e1:48:91:a2:7a:2f:84:8a:df:da:a7:f5:24:42:09:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:71:18:D3:1A:D3:29:9D:D0:91:C3:92:45:C5:D8:7B:AD:D4:06:B6
            X509v3 Authority Key Identifier:
                keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8b:3f:71:97:62:a8:5a:a5:bd:9c:37:fe:91:c8:ae:14:fe:
         27:24:93:c3:10:f5:80:c4:31:72:5a:c8:ef:63:b8:d5:dd:b5:
         49:80:8f:d4:03:a4:4b:27:41:fb:d3:8f:14:dc:48:cf:aa:e4:
         9d:24:0f:8e:53:a9:95:b3:b5:fb:e8:84:da:63:bf:7a:44:72:
         8e:66:3e:9f:63:d3:47:d2:6b:2d:f7:47:3c:7a:af:57:c8:dd:
         38:24:86:99:0a:52:4c:51:e8:be:aa:69:90:e4:f6:17:7b:5c:
         cf:a8:49:c7:10:b1:c5:24:15:ad:4a:6c:46:6d:da:df:da:53:
         e9:b5:ce:25:d1:7f:c2:b7:e1:82:4c:a2:2b:f7:f8:e3:37:55:
         98:60:89:9c:00:16:1a:23:8d:e4:41:b9:62:f4:a2:88:ad:ac:
         8b:b0:98:db:66:aa:b0:5f:cb:da:54:7c:ae:3c:eb:08:d4:a3:
         d6:54:01:71:04:fb:a1:72:47:be:70:f1:a1:22:d9:90:f0:81:
         10:70:84:99:e6:a9:86:4d:77:1d:f7:38:dd:77:ed:89:31:60:
         a0:f3:f1:04:7d:76:29:48:26:f5:27:f7:5b:46:fe:9c:3b:82:
         ee:6b:27:21:6a:b4:97:9e:f7:86:b0:92:41:59:fa:db:c4:0a:
         eb:f0:0e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:03:16 2026 by rpki-client