Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
File:                     3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json)
Hash identifier:          3LOvpm32/4p5EgaQSA/DJIqKtvz3Z4R4yfZyy9cOWcM=
Subject key identifier:   B0:2A:20:B1:05:63:DC:4E:89:EF:EE:58:E3:EB:04:10:98:89:A9:57
Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
Certificate issuer:       /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Certificate serial:       0F05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
Manifest number:          0EF8
Signing time:             Thu 24 Sep 2026 17:36:12 +0000
Manifest this update:     Thu 24 Sep 2026 17:36:12 +0000
Manifest next update:     Thu 01 Oct 2026 17:36:12 +0000
Files and hashes:         1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: UTyOn9fRc+DQ+lT1/tVkDbduE/FODYL0Xyo5SPY28WY=)
                          2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: o9Abyi/MKdfpzHukIV0+6UFoiozAzGZP2RU3WmijfSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
                          rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3845 (0xf05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
        Validity
            Not Before: Sep 24 17:36:12 2026 GMT
            Not After : Oct  1 17:36:12 2026 GMT
        Subject: CN=6ab55f8c-e113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:66:24:a6:b6:ce:18:e1:f3:58:dc:98:68:
                    10:a5:fc:1b:c9:4b:20:ff:94:d9:d0:af:1c:8f:6f:
                    a3:eb:18:37:e1:6e:7f:40:35:1e:b9:60:a6:9a:a9:
                    70:51:cf:b4:67:34:f0:4f:db:77:2f:58:77:7c:fe:
                    7f:83:5e:aa:7c:0d:8c:08:8c:e3:4a:3a:5d:4f:94:
                    1f:c1:10:73:7b:91:a7:1b:45:7e:5f:ee:af:80:dc:
                    19:6d:cf:6e:0a:76:1c:30:a3:e8:5a:b6:e0:b2:21:
                    11:40:7f:00:d1:a9:9f:6d:01:fc:de:ca:5e:a1:6f:
                    3c:46:ad:db:54:4c:0f:5c:bd:38:32:dd:78:25:9a:
                    ba:fb:c0:cb:1a:55:6b:0e:44:b8:17:6f:a9:ab:cb:
                    28:1d:fd:c5:f6:4b:2d:43:14:de:2b:10:8b:6f:3f:
                    23:d3:ed:30:ff:df:81:33:39:27:b5:02:d1:37:c7:
                    e8:5d:42:93:0b:0f:5d:ab:06:48:a1:8a:be:86:a8:
                    44:60:7b:19:b6:a5:01:8b:b9:29:17:af:12:f6:33:
                    d5:64:f8:92:39:7c:04:fb:ad:55:46:1a:da:ad:39:
                    36:41:5d:0c:34:ee:00:0f:df:0c:87:f0:ad:ec:81:
                    84:2c:86:32:52:5e:17:86:5b:b9:77:f6:8a:2c:2d:
                    62:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:20:B1:05:63:DC:4E:89:EF:EE:58:E3:EB:04:10:98:89:A9:57
            X509v3 Authority Key Identifier:
                keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:6d:db:24:95:94:ba:88:8a:fb:e8:33:c5:93:a2:d4:e4:d0:
         13:15:a5:d5:d1:e8:5e:d0:43:d3:08:41:f0:2d:b6:b8:1e:3d:
         0f:dd:08:c1:c0:9a:05:d9:73:5f:27:03:cb:52:19:d4:b0:29:
         e9:68:a8:23:98:63:3c:0a:ad:f8:4b:32:b6:ea:e4:3c:b6:c3:
         9d:8e:40:bd:75:a5:c2:84:f9:42:70:b4:4b:d9:94:f3:01:46:
         64:6e:49:e3:cb:26:de:89:ef:84:80:5a:c9:28:a8:83:a3:e2:
         85:02:6a:47:39:d8:8c:49:64:65:a3:f8:e2:4c:3c:d5:c0:cd:
         3c:00:35:c9:c1:35:4c:85:fe:04:b9:b7:35:08:d1:c3:9f:a4:
         05:a3:a2:3a:fe:39:7c:f3:26:dc:06:b9:15:88:01:f6:4d:8f:
         b7:8f:34:89:88:5e:9a:c5:ff:84:f2:4e:63:1e:08:c2:97:59:
         16:17:58:b3:50:67:8a:ac:dd:ca:a1:c4:87:37:14:f8:69:f4:
         4f:44:b1:82:b5:08:01:e9:42:da:cd:b9:74:62:67:6e:fe:d3:
         24:82:14:e6:fc:ce:9e:3c:2c:38:f8:76:f4:ae:0f:81:99:f1:
         5c:e8:93:ee:97:6f:d3:d4:7e:bd:c9:ad:fb:15:19:3b:e6:14:
         05:d0:78:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:20:30 2026 by rpki-client