Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
File:                     s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json)
Hash identifier:          OJvXW5nAPowqQHjzeMhx7G4qm30YHpNhr1jG1yu55zc=
Subject key identifier:   53:CD:D9:B7:11:02:43:1E:C3:39:9D:6F:D7:2F:ED:D2:A1:18:3E:4A
Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
Certificate issuer:       /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
Manifest number:          CE
Signing time:             Sat 03 Oct 2026 07:28:26 +0000
Manifest this update:     Sat 03 Oct 2026 07:28:25 +0000
Manifest next update:     Sat 10 Oct 2026 07:28:25 +0000
Files and hashes:         1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: GYx3K+I1RfMswAzerNUhgE66aDh7CMSz7huo0yM7jm8=)
                          2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: kk5sjyLutQjUsbYJim6fXXwfLma+mT+CCDWR+53e7jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl
                          rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
        Validity
            Not Before: Oct  3 07:28:25 2026 GMT
            Not After : Oct 10 07:28:25 2026 GMT
        Subject: CN=6ac0ae9a-f3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:ca:15:50:8f:5b:3e:d3:65:b6:ec:23:90:
                    d6:41:45:a0:41:64:46:5b:17:b3:b5:ed:f8:2c:46:
                    fd:14:d2:48:f7:28:e7:69:1c:06:b8:bb:1d:29:c7:
                    82:ba:25:04:5b:34:15:0e:68:ed:48:3a:36:07:f3:
                    97:e4:d8:97:66:ce:14:a2:7c:6e:16:d0:55:5b:34:
                    66:e9:c6:01:28:a5:d7:fa:7b:bd:7b:1a:95:b5:d8:
                    5e:24:66:b7:fa:0b:33:57:93:87:01:16:dd:f8:c9:
                    17:b9:2c:b5:1d:eb:0e:5c:63:8f:4d:13:a7:19:2e:
                    9e:77:b1:8e:ff:23:00:e6:09:e1:5f:f8:01:30:91:
                    3c:2c:1a:a5:7e:59:9c:dc:fb:ae:2f:f7:a2:3e:0e:
                    ed:8b:8e:bf:18:11:01:69:dc:55:ed:15:8c:e6:32:
                    02:5e:0d:19:f4:d2:14:b1:18:10:d7:6f:a8:e6:90:
                    15:45:10:34:bb:fe:45:00:dd:c6:10:fa:6e:8f:73:
                    05:c9:9a:92:9a:3d:6c:e3:3b:84:2d:3b:b1:d5:9d:
                    a8:f4:24:4e:fa:72:fc:7d:61:52:7e:5f:cf:f7:69:
                    b1:af:e7:d6:d2:d1:a0:df:d0:90:b2:7a:1e:30:30:
                    33:ae:7e:66:bf:19:a0:4c:39:c8:34:5a:9f:d4:6d:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CD:D9:B7:11:02:43:1E:C3:39:9D:6F:D7:2F:ED:D2:A1:18:3E:4A
            X509v3 Authority Key Identifier:
                keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:d9:84:67:9a:1e:2f:db:53:02:dd:1f:05:21:75:b3:f9:
         8a:88:c9:50:7a:42:c2:2b:08:a4:55:46:de:de:08:04:67:0b:
         d3:e1:3b:7b:bd:f7:7c:67:af:fd:a2:98:98:5d:4f:e8:73:72:
         82:10:71:5e:13:f5:e3:4f:60:52:d6:1d:31:b6:07:3d:1a:7c:
         5e:51:2d:61:e5:b2:f9:93:66:66:2b:25:3e:f0:af:66:4a:bd:
         0d:ed:74:49:08:5d:fb:b7:2c:6b:11:21:94:94:39:91:fa:c1:
         98:fb:d0:82:a1:6e:8a:3a:c8:46:e6:26:ff:7a:95:e8:66:22:
         63:5a:05:63:88:bf:84:10:a0:4d:cf:ac:76:27:d1:3f:f3:45:
         7d:0b:e7:86:c0:48:36:f4:41:05:96:52:df:80:b8:f3:24:79:
         de:d1:37:4d:ce:66:c3:f0:ea:b5:ab:55:4f:9a:08:36:5d:c1:
         43:d1:e1:6d:03:8a:9e:b4:03:00:00:0c:a4:ad:1b:5d:e8:60:
         81:1d:32:72:57:a4:3c:94:bb:35:05:5b:cb:31:32:e2:2d:4e:
         1b:5e:3d:c3:9f:bd:73:99:48:36:63:e8:45:99:0a:78:fc:c2:
         f8:7f:0f:13:67:19:64:fb:02:db:b6:91:ea:65:91:8a:c5:88:
         0f:a1:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:10:47 2026 by rpki-client