Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File:                     aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier:          yvkwcPc/7xmZinbgknnDLmltT13PkhK8R45vlsufpbI=
Subject key identifier:   EC:B0:35:71:0F:46:F2:13:AA:EA:59:0E:70:A0:04:83:49:C3:35:2F
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer:       /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial:       35B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number:          358C
Signing time:             Fri 18 Sep 2026 15:15:09 +0000
Manifest this update:     Fri 18 Sep 2026 15:15:09 +0000
Manifest next update:     Fri 25 Sep 2026 15:15:09 +0000
Files and hashes:         1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: AJu7yM/b+oqElJNyaF/OjhDjlvC2LVzhDxl+v0tXnJI=)
                          2: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: RQy3CULDGNVnkWRkKUELBca0bv/+qjtto2dvJUv9MVk=)
                          3: Gbm9aJwn4Grd0bUlvCyB3YP5o-E.asa (hash: GfzS/0sFUcU3nk0Xd84HKIBNrFFblmJGFMfuUp5nQmE=)
                          4: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: FGtCl+rkKsPwQBZaBP2SI6ZyzxIcUGM879HPiMEoLJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
                          rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13746 (0x35b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
        Validity
            Not Before: Sep 18 15:15:09 2026 GMT
            Not After : Sep 25 15:15:09 2026 GMT
        Subject: CN=6aad557d-ce78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:44:80:e5:6a:61:b9:63:7b:83:36:ce:18:
                    e8:e6:ea:b2:3b:86:35:cb:a0:a2:d4:95:33:12:3a:
                    91:96:38:c2:5b:c6:ae:70:4f:97:9f:16:ef:f5:65:
                    ae:80:2d:f5:2d:32:d7:0d:6d:56:18:8e:51:1a:41:
                    f4:50:ed:d4:e3:a0:5f:74:86:68:0b:fd:f5:5c:8a:
                    36:25:e8:d6:15:a3:5d:07:5f:57:c8:62:eb:19:97:
                    36:75:dc:65:b1:13:9b:f7:25:f8:68:8b:48:92:0e:
                    bc:37:cb:90:a4:89:eb:eb:a1:b6:4a:4f:86:5f:a4:
                    a0:10:3e:0f:ca:2b:82:25:af:55:b4:40:34:c5:b1:
                    b9:cc:1f:db:4e:c7:e9:df:46:da:3f:35:f8:2b:28:
                    9c:cd:f3:6a:4a:76:56:1b:1d:d1:fe:3a:d6:80:51:
                    ad:04:43:8e:e9:f8:33:92:f8:13:f2:78:59:3a:6e:
                    c2:ec:b1:7e:4a:99:5d:a6:10:e5:10:bd:30:79:e0:
                    5e:5d:08:e0:b3:ad:1c:7e:ac:c2:99:a4:64:7b:e4:
                    01:58:40:01:99:68:ba:6a:53:8d:cb:0f:91:a2:dd:
                    3c:b8:7a:94:ca:08:4d:66:10:0c:95:c2:0c:42:d9:
                    40:30:98:d9:e9:a7:34:75:25:aa:1d:9a:c8:fa:f9:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B0:35:71:0F:46:F2:13:AA:EA:59:0E:70:A0:04:83:49:C3:35:2F
            X509v3 Authority Key Identifier:
                keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f9:fe:fb:e2:00:86:df:2b:f9:2d:05:a8:53:ce:67:07:7c:
         3d:60:c6:f8:4f:0f:b9:9c:0e:ff:ba:7c:bf:83:53:4e:fc:35:
         1b:ed:90:06:e5:77:74:05:dd:ad:19:02:db:22:f3:b8:ba:32:
         f9:66:f6:1a:d9:e9:d6:c7:83:26:da:bd:14:74:75:b8:d1:e8:
         72:46:5b:5d:99:23:9c:2e:f1:8c:32:b8:a7:1e:d8:cf:a1:35:
         f8:e9:ca:ff:23:61:36:a3:81:97:a7:98:16:fc:66:a0:8a:77:
         21:c5:37:f1:46:d5:9e:f0:d7:36:d5:f0:88:50:ce:ed:ee:11:
         e1:c8:d0:ab:41:65:5d:d2:ca:01:b9:8e:dc:dd:5d:53:46:d5:
         58:b9:01:dd:42:74:45:71:21:f6:eb:d9:32:fc:d5:42:32:c7:
         ad:c4:eb:19:1e:42:45:04:2f:11:06:c2:84:3d:cf:5b:d6:41:
         8f:cb:1a:43:f8:f8:0e:b2:61:f3:cb:d1:90:9b:f1:10:b3:a4:
         92:48:6a:d7:9b:28:db:ca:5e:4b:88:cd:55:96:fb:76:61:a7:
         b3:bd:61:24:64:2c:42:df:1d:4c:02:c8:dd:9b:f8:d5:6f:93:
         e5:3f:eb:27:8d:63:96:81:43:ff:13:6c:16:20:07:d3:87:f0:
         b4:eb:27:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:53:14 2026 by rpki-client