Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File:                     4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier:          URoynR+bFiv6l6YbPQsxjQ372Y/gQ0jcBQDoV3c/G40=
Subject key identifier:   54:00:AC:F1:04:85:38:07:0F:6B:B8:90:5A:DE:7B:E8:40:E3:36:B6
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer:       /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial:       0E89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number:          0E76
Signing time:             Sat 10 Oct 2026 17:46:34 +0000
Manifest this update:     Sat 10 Oct 2026 17:46:34 +0000
Manifest next update:     Sat 17 Oct 2026 17:46:34 +0000
Files and hashes:         1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: jLMhKD7Zo8NXZmMB90vW6HeNc/GFIWilM0W6h5eJi/E=)
                          2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: HnvsHqcmUKW7ahLgN9nvtNlg8GIV2Dhcq2/uEZrWjX4=)
                          3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: bhmnlpYZPEuWaSc0+L7rL2QZ7zRKqGCV4y6eL/DlqEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
                          rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 17:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3721 (0xe89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
        Validity
            Not Before: Oct 10 17:46:34 2026 GMT
            Not After : Oct 17 17:46:34 2026 GMT
        Subject: CN=6aca79fa-a3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:0f:cc:f3:51:89:34:48:bc:4f:13:78:f1:
                    55:5c:db:de:b6:12:f9:7f:73:f2:3f:f9:c8:e0:b5:
                    ad:ca:c9:e4:f2:1c:fa:bf:32:7c:82:5a:51:86:4f:
                    5d:2d:51:94:25:99:e7:9e:06:e4:10:2b:2e:bb:b5:
                    1e:37:76:47:19:67:3d:d0:9a:02:19:b1:e6:a2:8b:
                    cf:23:3f:ab:a4:eb:5d:2e:92:43:59:f9:ba:65:4a:
                    43:2d:fc:74:01:a1:62:19:63:95:48:9f:d8:68:fd:
                    58:a2:48:ec:0c:a1:01:92:35:c9:43:c9:04:33:2b:
                    2a:09:c4:94:ce:e9:48:e3:72:a1:1e:ac:89:08:ed:
                    11:63:32:7f:08:c0:17:ab:1a:82:b7:07:fc:f7:91:
                    08:7a:f3:f2:f1:9b:c1:19:5b:d5:69:ca:84:7a:74:
                    54:9b:79:2f:53:f0:1c:f0:b7:12:08:84:da:12:0b:
                    56:e4:46:e8:5a:45:f1:7b:39:9c:51:1a:2b:9e:f7:
                    ee:ab:27:22:41:86:f0:bc:07:26:be:57:19:f0:7a:
                    01:9c:b4:7d:0e:8b:b6:da:ad:53:20:f0:0d:d9:19:
                    10:9e:90:bf:38:73:f5:61:7f:71:59:c2:e9:da:a4:
                    c4:90:c4:30:c9:39:3f:44:21:bf:ee:be:a9:2d:0c:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:00:AC:F1:04:85:38:07:0F:6B:B8:90:5A:DE:7B:E8:40:E3:36:B6
            X509v3 Authority Key Identifier:
                keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ec:e9:af:ae:69:fd:53:cc:1e:60:86:1b:ba:87:22:7f:ee:
         91:12:49:b4:12:f6:2f:58:cf:2b:4c:27:a3:d3:31:c6:c0:65:
         f1:e9:21:77:e2:cf:73:ac:5d:44:86:e3:1c:e6:c9:a3:9e:71:
         6b:a2:b9:ba:d0:55:50:fc:8f:dc:62:d6:c8:8f:0e:52:0a:59:
         ee:19:e4:69:e2:67:6f:f9:b8:a7:2c:a4:8c:e0:d3:2e:ab:7a:
         ea:2d:e8:8b:76:26:47:7c:7a:4a:f1:dc:a7:ae:23:b4:81:86:
         a0:74:ee:df:fa:ae:8d:72:b3:61:67:52:60:38:bd:e8:97:82:
         74:9d:16:a0:7d:36:06:0c:96:87:f1:ce:5e:0a:3a:26:31:79:
         10:28:71:23:36:c2:52:c7:32:a2:11:5c:59:d2:33:58:40:50:
         b9:78:a7:1d:92:20:3b:96:b3:3e:75:ef:a4:3a:33:98:28:87:
         d3:72:f0:04:cd:78:b1:f9:b9:eb:80:27:5a:7e:fa:be:53:02:
         09:7b:45:09:2c:3c:2d:ed:24:50:7b:d0:01:de:a6:be:93:f1:
         4e:74:ef:3f:ce:a1:81:da:65:95:b3:7a:a8:dc:6c:a5:1a:c6:
         ed:0f:3c:01:e5:10:00:2a:86:6d:f3:3d:22:b2:63:d2:5e:aa:
         8d:40:12:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:25:42 2026 by rpki-client