Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File:                     fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier:          txFZ3przoSyv6CicO0S6WSlG2qt3MPFrHJSkMj+4EzI=
Subject key identifier:   CF:A8:77:28:8E:E5:B2:06:BD:26:17:12:46:A0:BC:B5:47:56:C3:F9
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       0479
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number:          0460
Signing time:             Mon 21 Sep 2026 00:01:00 +0000
Manifest this update:     Mon 21 Sep 2026 00:01:00 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:00 +0000
Files and hashes:         1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: rDLPOgJLNJuyA8xC5z/26JK8KcteTwRAndflnCm4Gf4=)
                          2: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: Tj4ow2/jq+mUP/LMLTPrpgT8A3SwEW2gBwmbNDd2jrU=)
                          3: 791CD4FEFAE511F0B461E4A0696F56BC.roa (hash: 7W5oQwxnfaz/Da+/adv0pSip5O41XdqYh1qWJQtoYxU=)
                          4: 1762C314878E11F199DA80955211F970.roa (hash: IzQBeC4PmDoF+drcIWyzoD8TumN/IGGjux0nGstfa/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Sep 21 00:01:00 2026 GMT
            Not After : Sep 28 00:01:00 2026 GMT
        Subject: CN=6ab073bc-5f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:28:c3:3b:89:91:19:b7:c2:94:1f:c7:d1:
                    fb:71:a5:95:64:82:c9:78:c5:b0:18:80:7c:82:7a:
                    37:db:03:9b:57:e5:55:6d:d7:35:e4:7f:db:51:3c:
                    35:49:17:00:61:66:c0:d9:14:60:d9:f6:72:5a:a3:
                    d9:7a:91:74:a0:79:64:87:c8:7a:3c:e8:16:8b:35:
                    08:bd:65:ab:62:b4:ad:c8:ff:7e:ad:35:5d:c8:c0:
                    42:69:18:f0:77:96:f7:84:99:28:36:06:61:17:a6:
                    4e:ad:9d:5e:0a:de:b0:ba:b0:7f:29:29:c1:42:df:
                    2b:b2:fd:53:bd:06:8e:ce:b9:15:49:53:18:7b:83:
                    21:0a:09:cf:81:0f:b5:35:46:98:27:cd:67:4f:8f:
                    d6:94:4b:c8:00:79:82:5e:ee:a8:17:a9:21:98:11:
                    d3:4b:26:5b:a0:c7:2a:22:91:ad:7a:07:e7:63:01:
                    a6:93:58:ec:4a:6b:32:30:49:78:f6:06:82:ba:0d:
                    39:b7:48:8a:31:3e:3c:0b:60:58:9e:f3:a4:ec:d1:
                    4d:bf:fc:e5:26:f4:9f:1f:d3:c9:f8:7c:9b:78:4c:
                    b5:8a:4a:61:a0:3b:e4:f6:3c:7c:d8:f9:ca:9e:7a:
                    05:03:99:63:71:e4:db:ba:48:69:1d:71:34:ae:00:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A8:77:28:8E:E5:B2:06:BD:26:17:12:46:A0:BC:B5:47:56:C3:F9
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1c:85:e3:9f:70:ee:17:1c:b6:6c:29:69:a2:36:10:bf:9d:
         0d:17:91:9c:61:f9:15:a5:0a:6f:0d:7f:ed:86:98:2b:6f:66:
         1a:51:28:ce:24:36:b8:47:ff:74:e6:04:5a:b4:54:02:6c:b7:
         d3:00:45:5f:ec:95:d4:1b:39:80:db:78:84:7a:6d:15:d7:a5:
         96:26:4d:58:96:09:d4:b2:a5:89:49:68:a4:06:0f:24:83:9a:
         1d:08:e6:6d:1b:b7:86:3a:e4:74:0e:a2:22:f2:3b:81:25:06:
         dc:9e:59:50:5d:1a:16:88:d7:e3:bd:62:27:0b:03:fd:55:9f:
         57:c2:77:47:2d:97:3c:7f:62:98:91:e5:d7:ff:cd:82:56:43:
         7c:93:e3:cb:b9:00:b6:7d:33:99:86:7d:44:0d:60:80:23:96:
         fc:f0:e1:1c:f2:36:13:fb:b5:3d:94:8f:20:bb:7e:2e:bd:b6:
         94:e7:a5:38:7f:a8:55:11:21:d9:77:5a:71:89:6a:6b:aa:25:
         51:02:a5:48:0f:10:df:3b:47:6c:31:0c:3a:26:33:42:59:59:
         bf:df:73:9e:2a:cd:68:6d:67:c9:c0:eb:23:db:2a:a5:b5:da:
         45:aa:84:d4:50:c2:d8:58:c6:f9:d5:5b:b2:5e:70:32:47:f5:
         91:aa:13:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:04 2026 by rpki-client