Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft
File:                     fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft (raw, json)
Hash identifier:          leGjLS7/MyviCn2j44wUsNMxfdC/24TjhRd+JSdGLMs=
Subject key identifier:   5D:16:00:D1:36:45:93:41:76:3A:5C:22:4B:FA:6A:26:80:7B:28:A2
Authority key identifier: 7D:85:23:C9:19:4A:AE:90:B1:40:D6:58:8B:2C:B3:5B:B3:78:DC:A4
Certificate issuer:       /CN=A915B53B/serialNumber=7D8523C9194AAE90B140D6588B2CB35BB378DCA4
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYUjyRlKrpCxQNZYiyyzW7N43KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft
Manifest number:          15
Signing time:             Sun 11 Oct 2026 09:46:14 +0000
Manifest this update:     Sun 11 Oct 2026 09:46:13 +0000
Manifest next update:     Sun 18 Oct 2026 09:46:13 +0000
Files and hashes:         1: fYUjyRlKrpCxQNZYiyyzW7N43KQ.crl (hash: 2CKk0w4tXfW7SUDljkdmzKFOIiU/kpzaoqhzswdE3Ys=)
                          2: 10FAFA36ACD811F1A413C9326C11F970.roa (hash: K0WYHVmvlzu39e9QCpMkN/Uieb8ADNB5R9SM75i/GcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYUjyRlKrpCxQNZYiyyzW7N43KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B53B, serialNumber=7D8523C9194AAE90B140D6588B2CB35BB378DCA4
        Validity
            Not Before: Oct 11 09:46:13 2026 GMT
            Not After : Oct 18 09:46:13 2026 GMT
        Subject: CN=6acb5ae5-0d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2a:02:b4:f9:c6:51:74:0b:d2:9c:3b:a7:08:
                    0a:25:8b:34:35:d5:58:0a:03:f8:3a:cc:36:36:6a:
                    34:39:19:7c:73:bf:23:61:ac:6f:85:ac:dc:d9:f0:
                    30:f0:a4:c5:6b:18:2b:4f:73:0f:8b:8e:55:8a:d3:
                    f6:b4:9c:2e:7e:6e:91:24:e4:af:17:17:9c:aa:ee:
                    15:df:69:98:0c:c4:b6:0d:50:31:1c:29:63:59:1b:
                    f4:93:a8:b7:08:49:fc:e8:52:79:8c:55:08:b7:cc:
                    2e:97:04:45:ce:46:de:8b:f5:85:f5:cf:fa:ce:16:
                    54:b2:a5:34:6e:5c:61:28:99:c3:6b:ed:a5:a3:c3:
                    6f:33:97:3a:9f:47:30:88:fd:26:bb:b4:64:45:8f:
                    67:73:01:d0:18:6b:a3:75:6e:01:c2:73:21:80:b6:
                    cc:3f:d9:0b:50:40:89:fb:44:1b:b7:65:7c:47:e3:
                    7f:c1:d8:71:9a:d4:83:4f:51:58:bc:68:4d:f2:d1:
                    da:8c:46:0c:84:6e:55:db:19:d2:73:e9:7e:08:f1:
                    29:97:b8:7e:50:9a:fb:b3:0f:a3:62:29:08:4c:83:
                    6b:2e:86:58:06:f0:8b:1e:c9:54:3b:9a:1e:f7:88:
                    03:b2:04:c0:f2:0b:40:86:18:80:a1:ce:da:ae:dd:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:16:00:D1:36:45:93:41:76:3A:5C:22:4B:FA:6A:26:80:7B:28:A2
            X509v3 Authority Key Identifier:
                keyid:7D:85:23:C9:19:4A:AE:90:B1:40:D6:58:8B:2C:B3:5B:B3:78:DC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYUjyRlKrpCxQNZYiyyzW7N43KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8b:66:83:89:7f:35:61:c4:06:95:35:5c:97:db:38:c5:a4:
         8a:ac:d2:1e:08:61:7a:c9:23:fd:8e:52:fc:7b:de:97:23:51:
         08:6f:3e:9f:76:c1:39:7a:68:45:d6:83:6b:ac:b4:aa:08:a0:
         25:33:87:5c:ea:e3:a7:69:e5:4c:b5:b9:05:45:be:4d:f4:9d:
         1e:30:09:69:01:6e:d1:de:eb:7f:20:4b:f1:39:a0:6d:24:5d:
         41:99:1e:30:f8:5c:e3:d2:2d:2e:3a:89:dc:36:0e:13:36:8e:
         d7:42:14:da:6c:a1:20:ad:67:72:ed:ea:2e:66:d0:7b:39:74:
         51:63:07:2b:b9:b9:82:70:eb:2e:56:7e:88:6e:28:6a:23:43:
         9e:95:31:e7:f8:68:87:84:d7:01:9e:49:20:c6:5b:b8:bd:e3:
         81:b2:4b:ef:2a:c4:e5:6b:ab:8d:f3:05:14:20:6d:a0:dd:b6:
         55:69:e6:85:be:0c:96:3b:57:63:32:ca:12:90:d4:e5:62:35:
         b2:ad:da:5c:a0:36:34:88:cd:be:5a:87:d3:37:74:b6:0e:1c:
         3e:2a:55:3c:6f:68:1b:c5:7b:6c:09:eb:7d:ff:51:c3:98:ab:
         20:a2:10:83:7f:37:98:0c:06:e4:49:fb:0f:9d:3f:63:59:7c:
         70:dc:86:c0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QjUzQjExMC8GA1UEBRMoN0Q4NTIzQzkxOTRBQUU5MEIxNDBENjU4OEIyQ0IzNUJC
Mzc4RENBNDAeFw0yNjEwMTEwOTQ2MTNaFw0yNjEwMTgwOTQ2MTNaMBgxFjAUBgNV
BAMTDTZhY2I1YWU1LTBkMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDnKgK0+cZRdAvSnDunCAolizQ11VgKA/g6zDY2ajQ5GXxzvyNhrG+FrNzZ8DDw
pMVrGCtPcw+LjlWK0/a0nC5+bpEk5K8XF5yq7hXfaZgMxLYNUDEcKWNZG/STqLcI
SfzoUnmMVQi3zC6XBEXORt6L9YX1z/rOFlSypTRuXGEomcNr7aWjw28zlzqfRzCI
/Sa7tGRFj2dzAdAYa6N1bgHCcyGAtsw/2QtQQIn7RBu3ZXxH43/B2HGa1INPUVi8
aE3y0dqMRgyEblXbGdJz6X4I8SmXuH5QmvuzD6NiKQhMg2suhlgG8IseyVQ7mh73
iAOyBMDyC0CGGIChztqu3eN5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXRYA0TZF
k0F2OlwiS/pqJoB7KKIwHwYDVR0jBBgwFoAUfYUjyRlKrpCxQNZYiyyzW7N43KQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNTNCLzRCNEI0NjIwQUNE
NjExRjFCOTU1NTBGRjZCMTFGOTcwL2ZZVWp5UmxLcnBDeFFOWllpeXl6VzdONDNL
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZllVanlSbEtycEN4UU5aWWl5eXpXN040M0tRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC
NTNCLzRCNEI0NjIwQUNENjExRjFCOTU1NTBGRjZCMTFGOTcwL2ZZVWp5UmxLcnBD
eFFOWllpeXl6VzdONDNLUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA/i2aDiX81YcQGlTVcl9s4xaSKrNIeCGF6ySP9jlL8e96XI1EIbz6fdsE5emhF
1oNrrLSqCKAlM4dc6uOnaeVMtbkFRb5N9J0eMAlpAW7R3ut/IEvxOaBtJF1BmR4w
+Fzj0i0uOoncNg4TNo7XQhTabKEgrWdy7eouZtB7OXRRYwcrubmCcOsuVn6Ibihq
I0OelTHn+GiHhNcBnkkgxlu4veOBskvvKsTla6uN8wUUIG2g3bZVaeaFvgyWO1dj
MsoSkNTlYjWyrdpcoDY0iM2+WofTN3S2Dhw+KlU8b2gbxXtsCet9/1HDmKsgohCD
fzeYDAbkSfsPnT9jWXxw3IbA
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:52:56 2026 by rpki-client