Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
File:                     t_uD0cnC98OLcAJxRkrCM2Ti59c.mft (raw, json)
Hash identifier:          B/5KYqNjhQzPT9de8ZOT004+2tWtneGMeWLm06rnRjM=
Subject key identifier:   3F:68:5D:F0:DD:C3:DF:90:81:61:C1:C8:E3:BF:87:F4:38:17:22:E7
Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
Certificate issuer:       /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
Manifest number:          A5
Signing time:             Sat 19 Sep 2026 07:17:41 +0000
Manifest this update:     Sat 19 Sep 2026 07:17:41 +0000
Manifest next update:     Sat 26 Sep 2026 07:17:41 +0000
Files and hashes:         1: t_uD0cnC98OLcAJxRkrCM2Ti59c.crl (hash: aRJC0WDiECwU0rHZeaEgzYEEUeQnt/8VCxU1Z5bHy+8=)
                          2: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (hash: fuNnrqSgI2XXye8Z2eFA0jRKqdXrxlxebRTfn3G5134=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
                          rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
        Validity
            Not Before: Sep 19 07:17:41 2026 GMT
            Not After : Sep 26 07:17:41 2026 GMT
        Subject: CN=6aae3715-e87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:16:0f:6b:0d:02:1f:74:2e:e1:58:8e:d9:
                    8d:05:21:4f:98:95:be:0b:d1:02:5b:be:ec:d5:80:
                    e9:db:d7:fd:7a:cf:3f:43:25:36:b8:bb:64:53:da:
                    e4:a4:c0:24:a5:dc:de:b9:0a:d2:6b:2a:cf:c7:34:
                    87:80:93:a4:6c:70:af:21:dd:76:4a:b0:29:ca:b3:
                    9b:75:c7:2f:4e:7d:d8:a9:8b:55:ef:eb:b1:94:fe:
                    59:5d:35:ff:6e:e2:38:42:47:80:78:37:1c:0f:f2:
                    ed:28:35:aa:f2:cc:89:34:63:43:54:12:df:97:d5:
                    69:96:9d:f9:98:e5:8a:c0:fe:fa:5a:3f:75:8a:6a:
                    df:e3:cc:80:c3:ce:b2:80:ac:f7:11:70:70:76:1e:
                    6b:11:85:9d:84:7f:45:a5:e3:37:84:af:9f:3b:f8:
                    d4:f1:2c:57:b3:f0:b3:1a:21:3d:a9:fe:7c:45:67:
                    01:79:d3:92:95:01:08:67:66:86:13:f2:21:4c:8a:
                    f8:b2:ec:88:4e:fb:78:28:72:0b:12:8c:8b:3d:fa:
                    c0:29:99:c8:6d:98:18:a6:06:4b:fb:ed:85:37:27:
                    5e:16:48:4e:fc:54:d5:1c:7d:d4:43:e5:cd:35:c3:
                    88:f1:6d:a0:78:01:3d:db:e4:d0:41:36:6a:a1:d1:
                    de:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:68:5D:F0:DD:C3:DF:90:81:61:C1:C8:E3:BF:87:F4:38:17:22:E7
            X509v3 Authority Key Identifier:
                keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:0b:2a:86:fc:b1:a6:e8:46:0d:c7:db:07:30:bf:e4:0e:
         1b:73:ba:e2:7f:1a:5e:29:ff:d5:2e:f6:5e:aa:b6:34:fe:0c:
         a2:a6:05:0a:67:0f:de:f1:b7:75:7d:fc:e5:e0:aa:e5:de:cf:
         4b:72:d8:2a:21:f6:f1:e6:8f:c3:64:11:89:96:17:9a:1b:b4:
         5b:38:b0:30:66:9f:de:d0:d1:08:ec:0d:ac:0d:84:13:df:04:
         8b:8b:50:51:f9:7d:d9:24:52:dc:8c:d4:3a:df:0d:8a:a5:bd:
         21:28:19:0a:92:a3:04:24:27:52:13:26:a9:78:89:0c:3f:ef:
         a1:b1:57:56:6f:b8:43:bd:f0:d3:af:66:f8:31:5a:06:87:c3:
         e4:ff:07:a5:bd:6b:a5:c4:7e:a8:0f:f6:c0:f5:c4:0f:3c:e2:
         bf:2d:d8:ff:3b:14:fc:c3:76:e9:3e:1b:41:87:b6:3e:5b:38:
         9f:da:30:48:3b:4f:bb:56:71:73:a1:a6:b0:0d:6a:57:a0:9f:
         8a:a9:f7:2f:29:02:8b:c6:7d:d2:de:ca:9c:66:82:40:08:ef:
         7a:09:4d:0e:1b:a8:f6:47:16:00:94:01:ed:ed:bd:5c:9b:ec:
         aa:61:5f:23:44:45:18:3a:db:bc:a1:76:01:58:5d:14:1b:53:
         e6:ad:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:20 2026 by rpki-client