Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
File:                     AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft (raw, json)
Hash identifier:          EifcBZUtWypvqUHxYWpU40589z4xIkiZMORAGEGSNXA=
Subject key identifier:   02:AD:3D:7D:E3:EB:C6:F0:AC:81:5B:0D:8F:4A:6E:4E:21:E6:5F:25
Authority key identifier: 00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
Certificate issuer:       /CN=A915E131/serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
Manifest number:          A6
Signing time:             Wed 23 Sep 2026 06:56:38 +0000
Manifest this update:     Wed 23 Sep 2026 06:56:38 +0000
Manifest next update:     Wed 30 Sep 2026 06:56:38 +0000
Files and hashes:         1: AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl (hash: 4hhSXOjsBufFSz79XdPy/oJc4xzqjmVVB8pKgYCpKcs=)
                          2: 7CCDD124BEC811F09972220FC4F9AE02.roa (hash: FDPr6Mk6fUWr/ORbhz5vJ0nJDICVIvgeGSKkDMqOU8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
        Validity
            Not Before: Sep 23 06:56:38 2026 GMT
            Not After : Sep 30 06:56:38 2026 GMT
        Subject: CN=6ab37826-f2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:09:4b:07:15:2f:6c:1b:ef:6d:b6:e4:22:
                    87:3c:59:fd:68:0f:2e:e6:eb:8e:57:b0:81:ae:eb:
                    07:7a:ea:fb:0f:6f:35:a3:db:ae:d5:95:20:5b:a4:
                    65:10:28:d8:7c:97:8b:1a:a8:80:25:26:93:f8:9e:
                    fe:e5:7d:89:61:11:c0:1a:6b:ac:ad:31:9f:41:16:
                    84:72:37:a8:37:2f:12:60:b5:35:62:4f:ab:21:da:
                    20:a0:39:1d:e2:85:9d:3e:8e:9f:22:58:77:36:de:
                    2f:84:e3:90:79:b3:ff:ae:66:d4:12:51:ee:f3:d5:
                    53:6d:ea:f4:a1:0d:ca:37:3a:f0:84:51:4e:82:81:
                    20:59:71:c9:1f:b6:95:71:8d:3b:60:eb:9c:ee:13:
                    7c:7e:60:d7:b2:55:0d:7d:d5:ea:2e:f5:ee:e0:11:
                    72:db:28:e8:7b:1e:43:e7:e0:73:bc:b2:04:c7:02:
                    9b:9c:a0:aa:af:30:4f:11:ca:fc:cd:2c:d6:04:05:
                    42:80:b2:74:86:a3:a5:c2:6e:fd:60:30:08:a8:dd:
                    84:32:0a:2e:45:2b:37:f4:9c:a7:12:5f:fc:30:d0:
                    3b:d2:fd:7f:c3:60:98:08:3e:45:30:8b:38:f1:28:
                    29:41:a9:ad:01:34:8a:09:62:ea:ac:64:bb:24:5d:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AD:3D:7D:E3:EB:C6:F0:AC:81:5B:0D:8F:4A:6E:4E:21:E6:5F:25
            X509v3 Authority Key Identifier:
                keyid:00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5d:57:ae:ce:df:c4:e3:d0:83:61:eb:03:d1:1c:d9:a7:98:
         de:89:b5:69:5f:b6:67:90:68:65:d1:cb:98:e2:5b:ea:38:8b:
         16:63:23:6a:c5:0d:59:07:c0:ea:10:74:cd:4a:15:c7:f7:da:
         4e:16:25:9e:b0:b5:6f:67:50:f2:fd:e3:71:df:7f:78:d5:99:
         35:70:7e:69:6b:db:cf:33:5a:b8:eb:3e:bd:1d:4d:04:26:15:
         22:e8:45:f6:9c:fc:22:69:c4:3b:67:5a:0b:01:34:95:94:a7:
         71:41:c3:a0:f9:36:84:25:a7:ec:25:b8:5a:2a:89:00:7d:9f:
         5f:a0:19:2f:7a:a3:24:7d:55:87:73:a1:6c:eb:08:b6:79:f0:
         bd:07:e1:43:e4:7f:c0:bb:8d:d2:29:0b:d9:2a:ba:cb:6f:c5:
         72:a2:c3:93:49:77:ef:7a:3c:b3:41:bf:28:6c:a6:0d:11:71:
         aa:55:d2:74:d6:17:79:8c:ff:f1:56:eb:f9:f2:9d:8e:94:57:
         13:5c:60:94:13:f2:59:6b:d1:e1:40:4a:de:a5:22:ce:ed:b9:
         2d:31:44:f5:cd:b0:fe:83:c1:f9:f5:51:17:6f:fd:49:25:e4:
         0f:53:c7:d2:7d:6d:d0:78:97:07:3e:04:02:4d:3f:f0:2c:81:
         91:79:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:01:38 2026 by rpki-client