Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
File:                     l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json)
Hash identifier:          aKItfO3X57o/9kp/O9g+GT9Y4PnaLgJEdiJgdikk1RA=
Subject key identifier:   D8:D5:E6:92:20:0B:9C:92:0E:B7:D7:A0:5C:12:68:84:6E:E2:8B:E5
Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA
Certificate issuer:       /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
Certificate serial:       0C48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
Manifest number:          0C2F
Signing time:             Thu 24 Sep 2026 18:44:25 +0000
Manifest this update:     Thu 24 Sep 2026 18:44:24 +0000
Manifest next update:     Thu 01 Oct 2026 18:44:24 +0000
Files and hashes:         1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: KgVd/oxUE/njRdqf3C3EqFlxsepnzvbMnonCoyWhVfA=)
                          2: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: MCISxnfnNlB/wFJ//N3jml3NUfgJKmd1tRtdTSF+Xts=)
                          3: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: NAxyiAU8glno68cNHqspT7JDCLwrA8VgpOOy/tuTa5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl
                          rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3144 (0xc48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
        Validity
            Not Before: Sep 24 18:44:24 2026 GMT
            Not After : Oct  1 18:44:24 2026 GMT
        Subject: CN=6ab56f89-a10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:45:23:a0:69:46:17:94:d9:25:40:3e:88:
                    cf:44:61:66:72:8b:a5:b5:ef:b7:18:98:58:b8:f6:
                    0c:4f:51:ca:2e:87:74:46:c0:16:b2:d2:8d:67:e1:
                    eb:2d:d4:f1:7c:3b:4b:cc:e3:c0:fb:65:b2:46:2a:
                    0e:51:7d:d2:b6:55:0e:c6:31:f7:8c:3f:fd:d1:6b:
                    28:b2:fb:54:f1:d4:c9:12:9f:08:27:4f:d1:b1:e6:
                    8f:d8:e5:e1:4e:06:0b:c6:56:d8:20:74:06:75:be:
                    fe:7e:27:6e:6a:ec:11:59:9d:35:b1:d6:fd:63:86:
                    d9:72:71:23:79:af:6e:cc:62:9d:ce:95:a6:a3:9d:
                    01:7d:36:9d:ce:23:d6:f1:57:77:f9:1e:d7:a6:19:
                    e0:c3:2d:1c:5c:4b:b7:f5:0d:4d:59:42:87:23:40:
                    16:00:77:f6:a3:a1:8e:55:4a:79:be:48:79:0f:b4:
                    5d:64:27:6a:bc:17:26:d2:19:48:eb:56:ff:cd:ed:
                    9e:1d:f0:40:63:65:70:65:42:b8:e3:24:e9:05:26:
                    99:ba:65:9b:dc:d7:eb:33:82:e1:33:65:6a:7c:ba:
                    00:96:eb:41:de:73:7e:5d:46:a0:0f:7e:e0:87:fd:
                    d7:e8:56:fe:58:24:ea:4f:ff:40:a1:2c:59:c4:12:
                    50:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D5:E6:92:20:0B:9C:92:0E:B7:D7:A0:5C:12:68:84:6E:E2:8B:E5
            X509v3 Authority Key Identifier:
                keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:00:5b:8d:db:30:0f:29:3c:1f:66:eb:98:6d:d8:67:73:5d:
         5a:c3:21:ed:5f:4e:19:a7:36:9f:0e:c3:e8:d5:f3:48:82:82:
         8f:39:11:04:a2:ff:26:d9:73:ab:8d:a1:66:91:1b:60:83:54:
         92:f9:1d:27:5b:7f:db:84:61:cc:3c:52:20:95:93:f8:90:67:
         9f:55:b2:5f:37:bf:64:1c:50:3d:2d:e0:c4:64:d3:66:07:65:
         0b:cf:78:31:e2:e7:bd:c5:5b:9a:b8:58:69:51:96:42:c1:a5:
         d1:5d:60:4e:88:46:df:aa:dc:91:29:d1:9f:1d:d9:cc:12:d5:
         c1:19:79:81:64:73:a1:60:a9:5c:c1:52:68:86:c8:74:60:2a:
         c8:98:7e:8d:47:c2:e0:0e:e1:9f:e8:02:ed:36:d3:cb:47:f4:
         33:08:d8:92:25:de:5a:9c:f6:4c:28:d4:6a:e7:4e:63:27:03:
         22:60:f6:54:94:38:0b:25:b7:0e:66:95:d7:f1:dd:62:5d:e7:
         aa:64:a5:68:06:f9:42:44:bb:c5:c2:b3:f0:a9:be:2f:f2:bb:
         3e:23:e4:5a:3f:b6:f1:1b:46:6e:15:b3:fe:e8:60:0a:64:1e:
         13:83:6b:e1:c4:f1:69:ee:33:05:4f:f1:35:b7:36:70:f7:00:
         45:a1:a4:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3
RDEwMkVBQ0EwHhcNMjYwOTI0MTg0NDI0WhcNMjYxMDAxMTg0NDI0WjAYMRYwFAYD
VQQDEw02YWI1NmY4OS1hMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5yhFI6BpRheU2SVAPojPRGFmcoulte+3GJhYuPYMT1HKLod0RsAWstKNZ+Hr
LdTxfDtLzOPA+2WyRioOUX3StlUOxjH3jD/90WsosvtU8dTJEp8IJ0/RseaP2OXh
TgYLxlbYIHQGdb7+fiduauwRWZ01sdb9Y4bZcnEjea9uzGKdzpWmo50BfTadziPW
8Vd3+R7Xphngwy0cXEu39Q1NWUKHI0AWAHf2o6GOVUp5vkh5D7RdZCdqvBcm0hlI
61b/ze2eHfBAY2VwZUK44yTpBSaZumWb3NfrM4LhM2VqfLoAlutB3nN+XUagD37g
h/3X6Fb+WCTqT/9AoSxZxBJQWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjV5pIg
C5ySDrfXoFwSaIRu4ovlMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC
NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0
QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwgBbjdswDyk8H2brmG3YZ3NdWsMh7V9OGac2nw7D6NXzSIKCjzkRBKL/Jtlz
q42hZpEbYINUkvkdJ1t/24RhzDxSIJWT+JBnn1WyXze/ZBxQPS3gxGTTZgdlC894
MeLnvcVbmrhYaVGWQsGl0V1gTohG36rckSnRnx3ZzBLVwRl5gWRzoWCpXMFSaIbI
dGAqyJh+jUfC4A7hn+gC7TbTy0f0MwjYkiXeWpz2TCjUaudOYycDImD2VJQ4CyW3
DmaV1/HdYl3nqmSlaAb5QkS7xcKz8Km+L/K7PiPkWj+28RtGbhWz/uhgCmQeE4Nr
4cTxae4zBU/xNbc2cPcARaGkLw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:17:17 2026 by rpki-client