Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
File:                     ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json)
Hash identifier:          3n0EteAjWP4TBnuWhee8DrA8R13r5qHO9oi6KTMGbYg=
Subject key identifier:   B2:F2:A1:35:66:E5:87:62:A6:D8:C6:12:6E:AC:5C:82:EB:6B:B8:1F
Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
Certificate issuer:       /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Certificate serial:       0EA5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
Manifest number:          0E99
Signing time:             Sat 26 Sep 2026 17:46:35 +0000
Manifest this update:     Sat 26 Sep 2026 17:46:35 +0000
Manifest next update:     Sat 03 Oct 2026 17:46:35 +0000
Files and hashes:         1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: NmF5cUmvbbTEnB9fn1EyHVGCfA83m9Ubck3WuhHmEIk=)
                          2: BB691FBE889111F09BDDFE1FC4F9AE02.roa (hash: eA01hDerlrZowxNAiA4bbPZSsFtyuCho9eQcDFNsXoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl
                          rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3749 (0xea5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
        Validity
            Not Before: Sep 26 17:46:35 2026 GMT
            Not After : Oct  3 17:46:35 2026 GMT
        Subject: CN=6ab804fb-72e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:28:d3:61:16:d0:61:bc:33:2a:84:0c:98:
                    d3:03:e4:f4:eb:fc:59:a9:34:f9:02:af:d8:36:db:
                    f3:d7:0d:05:63:9b:51:4e:40:8d:57:d9:05:dd:6d:
                    c2:8d:fd:16:dd:03:d4:db:63:4f:91:7d:53:52:54:
                    cb:1e:44:db:d9:27:4a:18:11:b3:b4:11:4b:e8:f1:
                    38:ff:c0:4e:c8:8d:1c:e5:11:47:bd:73:83:62:27:
                    0d:b0:1f:49:5b:f3:65:65:75:4b:46:da:ad:3e:56:
                    bc:33:42:39:90:20:9c:73:d7:ee:cd:0c:2d:81:58:
                    86:a8:64:ef:c6:9c:91:d0:cf:81:25:ec:27:6a:76:
                    74:a7:a9:6b:11:64:07:f8:bf:01:fc:39:26:08:e4:
                    eb:1b:41:c8:f8:08:e1:cd:5a:7d:92:db:80:41:ee:
                    50:e3:5c:8a:1e:7a:ab:57:fe:27:ae:aa:1b:a2:6d:
                    64:19:e4:d9:04:77:46:07:1e:56:28:4b:3d:43:c2:
                    b4:d9:7f:4b:0b:15:00:b9:b9:68:7a:4c:34:b0:3e:
                    26:ca:f5:77:f1:dc:31:1a:48:52:6d:c7:e1:30:fb:
                    7b:8f:57:e9:5f:01:0b:a4:15:0d:37:4b:99:4e:31:
                    35:ee:2b:78:f1:75:d4:ac:87:04:01:20:fe:6d:e2:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F2:A1:35:66:E5:87:62:A6:D8:C6:12:6E:AC:5C:82:EB:6B:B8:1F
            X509v3 Authority Key Identifier:
                keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:86:fb:75:78:dd:b1:9a:d8:68:e2:81:5e:bc:b8:8f:2d:96:
         08:13:c8:30:40:4d:9c:ed:d7:9a:b2:af:1d:0a:ab:8d:fb:cc:
         90:66:b6:95:6d:2b:b3:d6:e1:35:00:1a:bd:3f:2e:5d:4a:86:
         d1:22:89:96:18:63:76:23:91:aa:50:88:eb:e5:36:b9:f3:c0:
         07:d7:36:e2:86:a9:33:90:ca:bc:df:c4:93:1d:88:30:78:2a:
         cd:5b:ef:7e:7f:b8:1d:e3:4e:58:1f:9f:3c:9f:61:38:0b:68:
         cc:b1:f5:de:6e:97:3c:bb:3d:22:3e:06:d5:c0:b4:cc:16:09:
         de:ad:0e:c9:4c:14:91:62:76:22:1c:78:ca:51:f6:60:e1:23:
         27:20:7b:30:88:f3:f6:27:6e:33:02:60:e6:e2:0c:28:53:f5:
         20:0a:21:db:b0:ea:6e:8b:e5:f0:81:d8:94:a4:02:a5:9a:c1:
         10:a8:af:9a:01:4f:3b:03:d4:4e:03:a1:ca:2f:64:be:89:18:
         f4:83:d7:66:f3:87:2e:9d:26:01:f4:f0:5f:90:b7:dc:7c:b5:
         24:c4:a6:84:4d:57:82:42:f1:36:57:04:af:8c:56:7a:90:97:
         cb:bd:63:83:e4:ef:0c:2e:ac:3c:95:cc:5c:3a:96:c9:98:d9:
         bc:fc:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:47:41 2026 by rpki-client