Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
File:                     4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft (raw, json)
Hash identifier:          3onYn165YUA/1eK0TMtOuXgy+NxPZ8QzI7Xe8X2BYAo=
Subject key identifier:   6C:D3:95:04:33:8C:70:0A:7C:C9:B4:32:5D:A8:E4:DB:8F:63:27:B4
Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
Certificate issuer:       /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Certificate serial:       22FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
Manifest number:          22EC
Signing time:             Sun 20 Sep 2026 15:48:10 +0000
Manifest this update:     Sun 20 Sep 2026 15:48:09 +0000
Manifest next update:     Sun 27 Sep 2026 15:48:09 +0000
Files and hashes:         1: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl (hash: r7ZBmLoIk2MgR3DX5RoPhP0nR5SVXL/FYGJ+qr6H0aI=)
                          2: CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (hash: VKFgeV6Rmc+Rc92uXlIsfsO0P5v537kl0ZBvVM5G0V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8959 (0x22ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E005, serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
        Validity
            Not Before: Sep 20 15:48:09 2026 GMT
            Not After : Sep 27 15:48:09 2026 GMT
        Subject: CN=6ab00039-62a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:d9:4f:0b:24:22:e8:56:43:95:3d:eb:33:
                    d7:3a:b8:86:0f:44:28:45:ff:53:6d:e1:55:24:b3:
                    d3:be:ce:f8:58:07:53:22:be:f8:7d:54:b1:38:8e:
                    38:04:44:5a:08:e6:c0:ae:6e:78:7d:4f:e4:ed:02:
                    11:d8:3d:07:1e:77:24:78:72:9a:57:79:16:02:a2:
                    3b:ed:bf:a7:39:53:1c:4c:39:94:4e:84:9f:8b:48:
                    7c:40:9a:e0:81:c1:c6:c2:bf:41:72:3f:9a:f4:94:
                    3d:56:a0:a0:f4:52:6c:27:c8:5b:f4:db:c5:9d:cf:
                    7a:cd:4c:54:ad:39:ca:03:32:a6:a2:95:9f:79:12:
                    98:56:31:35:40:c0:56:3d:88:f1:41:e2:3e:ef:79:
                    43:25:1a:42:fd:2f:73:01:04:79:f5:28:9d:ec:c5:
                    49:52:aa:f1:f5:e5:09:cc:85:dd:e8:c9:18:84:c0:
                    34:e7:a8:8b:4b:43:b7:10:55:d4:df:fe:0b:99:1e:
                    ca:c8:e4:2a:c6:5c:dc:c8:ab:b4:95:b5:92:ed:ad:
                    90:e1:c1:af:13:b8:1e:dd:7f:f6:1c:ad:a3:9d:bc:
                    c0:11:b5:df:63:f1:fb:1a:7d:e6:29:13:30:7f:fb:
                    25:ce:86:04:1a:08:b6:82:1d:f4:74:64:6c:bb:3a:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D3:95:04:33:8C:70:0A:7C:C9:B4:32:5D:A8:E4:DB:8F:63:27:B4
            X509v3 Authority Key Identifier:
                keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:3a:f7:1d:cb:ed:15:dd:f0:96:9e:6f:fb:25:6e:dd:37:
         c7:aa:ef:49:80:6d:ad:16:f3:06:87:5a:a9:74:e2:ee:98:f3:
         b2:4a:e9:f8:b9:43:9b:05:99:00:ed:e5:2e:a4:52:cb:94:ea:
         b6:6b:09:e9:3f:01:1c:5f:56:82:7e:f8:a8:2c:46:0d:1b:7d:
         21:d3:68:2b:39:78:31:50:9b:da:31:4e:6c:46:1d:d1:93:e6:
         a1:80:93:f5:d5:a9:70:fb:86:ce:d6:04:de:ac:63:c7:5e:cd:
         d6:31:6e:af:4a:17:d0:04:e3:fd:77:39:15:7f:7d:ce:d8:f7:
         7d:67:bd:35:dd:0f:c2:f4:5a:13:ae:a5:1e:28:67:12:10:18:
         66:84:c7:dc:45:12:24:15:c9:5b:a0:de:b6:61:dc:96:27:e6:
         5a:6e:b6:7b:75:76:19:18:8b:53:d8:bc:7c:02:79:40:d4:f6:
         f6:aa:d2:ac:c1:a4:de:05:91:96:d3:3c:41:bf:ef:cc:8b:32:
         e5:28:5d:e1:87:c3:e6:3a:61:4a:6f:82:74:4c:ca:61:f5:89:
         53:d8:f3:17:06:f4:5a:08:b3:0b:77:bd:72:9a:b9:df:f4:32:
         47:95:b2:ed:11:ca:dd:a0:84:a0:97:ae:c0:0c:06:6e:7e:5d:
         90:48:90:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:38:59 2026 by rpki-client