Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
File:                     f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json)
Hash identifier:          X557tA42RLHNeTn3asE9mh3xwdV/qKgkQDKTF529KzE=
Subject key identifier:   3C:2A:EB:D0:73:F5:FE:3D:00:AB:E1:94:3F:ED:39:C8:10:49:BE:81
Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7
Certificate issuer:       /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
Certificate serial:       11C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
Manifest number:          11B0
Signing time:             Thu 08 Oct 2026 17:15:03 +0000
Manifest this update:     Thu 08 Oct 2026 17:15:03 +0000
Manifest next update:     Thu 15 Oct 2026 17:15:03 +0000
Files and hashes:         1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: 4sH2bbx7eiJBOuNuaj1myY0lddk9jki09dxW06BDeYQ=)
                          2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: 3Xi7wtEGd4JYA4AAv2yv0nPxB/PtZ4h9SU2C5rJNJXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl
                          rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4548 (0x11c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
        Validity
            Not Before: Oct  8 17:15:03 2026 GMT
            Not After : Oct 15 17:15:03 2026 GMT
        Subject: CN=6ac7cf97-5bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:64:17:9f:3b:3c:06:33:0e:22:7f:c0:64:
                    51:24:ed:92:1c:52:4e:6e:5e:de:c8:08:97:38:dd:
                    e5:5f:bd:da:ce:b1:39:6a:c4:d9:0c:ae:aa:b7:67:
                    c7:f2:66:f8:9d:36:75:91:5c:2d:fe:b1:9c:3e:4d:
                    87:bd:ba:57:1d:2e:11:0c:c2:a7:89:b1:8b:ee:0d:
                    5a:74:81:8f:3a:5a:2e:e5:50:a9:1a:87:41:c0:33:
                    f3:6a:cf:d9:a7:61:e5:81:7c:d7:58:a4:70:85:5d:
                    a6:fd:16:45:d8:dd:8d:50:12:a1:e4:5f:2f:2f:95:
                    47:35:94:45:36:59:bd:c5:b1:9b:a2:ee:24:1d:7c:
                    a9:ee:0a:ca:18:6f:48:88:d4:54:73:25:f7:91:a7:
                    5f:ae:b0:13:4c:1a:33:06:14:52:ad:2d:d7:0e:f6:
                    fd:e4:24:ee:15:67:a7:c2:99:c0:e2:c4:c3:a2:73:
                    9f:f1:70:b2:5f:37:96:ec:4f:15:76:9b:c6:ee:33:
                    56:bd:fa:24:d8:9b:63:00:f2:97:5c:a6:16:bf:a5:
                    5e:a8:de:81:30:80:f6:87:67:3c:73:14:f5:e6:9d:
                    66:13:97:99:c3:36:51:42:ec:da:7b:89:9c:96:56:
                    df:ab:a7:2e:27:4e:a0:37:a7:95:65:33:1e:0b:44:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:EB:D0:73:F5:FE:3D:00:AB:E1:94:3F:ED:39:C8:10:49:BE:81
            X509v3 Authority Key Identifier:
                keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:77:44:99:28:cb:ef:e0:26:9f:07:56:d8:ca:a9:66:ff:29:
         e6:8c:eb:3b:f2:36:97:16:87:99:8c:8a:44:84:12:6c:42:91:
         74:b1:a3:61:0c:a8:d1:2b:ce:90:5a:76:eb:4f:89:d4:ec:de:
         95:09:84:10:60:00:cb:6b:20:70:a1:2f:9d:cc:58:30:3c:72:
         76:3e:3d:01:c6:b4:d4:11:fb:cd:f6:15:11:43:3a:4b:6d:cb:
         cb:80:a0:3a:66:ea:b2:83:5e:8c:fa:a0:7b:d9:08:f3:4d:1f:
         3e:42:ae:06:4f:73:09:c0:e2:fd:e9:ef:57:ce:d1:4c:97:b3:
         46:75:b0:51:f0:af:1c:82:04:2e:6e:bb:89:0b:4e:e8:31:ab:
         75:3d:f8:f6:06:33:57:de:d7:3c:33:01:1d:a2:21:02:d5:45:
         e5:e1:b1:25:e3:37:8a:5a:08:53:b1:23:97:11:7c:97:24:b5:
         97:f9:cf:ba:96:88:83:0d:ed:b7:90:2f:e6:17:e1:76:b5:90:
         6d:40:7e:f5:10:87:a8:26:16:d2:66:12:1c:ba:ae:79:f5:c0:
         d4:0f:53:ea:92:5a:13:ee:4e:e2:2f:c9:dc:85:38:9f:a0:c5:
         11:bb:08:73:e3:e9:78:83:1d:d7:e2:ca:2b:c9:57:05:d4:81:
         c9:61:67:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:23:07 2026 by rpki-client