Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
File:                     oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json)
Hash identifier:          yqvAFV+QmpjrVpVwlTmVQNn6kaQ4g8kgCii57s/3/GY=
Subject key identifier:   11:D0:45:2B:60:CF:6B:21:22:8E:01:57:9D:BA:75:76:AE:53:E5:E2
Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
Certificate issuer:       /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Certificate serial:       039F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
Manifest number:          038E
Signing time:             Wed 23 Sep 2026 00:20:39 +0000
Manifest this update:     Wed 23 Sep 2026 00:20:38 +0000
Manifest next update:     Wed 30 Sep 2026 00:20:38 +0000
Files and hashes:         1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: p1prLReYrIZgHBI/sYk/x0xLKCTAZeoha2oS6OKcnqE=)
                          2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: AL1NzX9lNGPHM09HP1wQ+++0IfWrYhSei2NeZGdZGpw=)
                          3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: aCy5PMuDzpryQuVwSt0E5y4Po7ZiB/Ss+uP5KTFzKkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
                          rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
        Validity
            Not Before: Sep 23 00:20:38 2026 GMT
            Not After : Sep 30 00:20:38 2026 GMT
        Subject: CN=6ab31b57-c201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:d8:7b:1d:26:fd:ef:35:89:aa:02:cb:9c:
                    54:e4:f5:57:ba:88:04:e4:1f:5b:ee:0f:0d:1a:99:
                    79:91:df:e9:49:a8:b8:31:3b:b2:a9:4f:97:07:de:
                    67:9c:7d:61:f8:cb:ac:75:fd:0a:01:a2:40:49:49:
                    a5:47:b3:95:69:05:90:c9:78:f4:19:fe:80:3e:51:
                    c6:05:55:24:d8:99:79:85:bc:9d:c6:c8:38:78:d9:
                    64:46:aa:7f:ee:31:93:a9:29:f3:7d:66:31:b0:ca:
                    cd:98:09:0d:da:2a:ff:9c:61:18:38:05:ca:72:47:
                    77:0a:2c:57:b3:3d:4c:aa:55:c2:9f:6e:13:35:5f:
                    e4:0f:30:a6:2f:92:dc:ea:b3:16:fb:c7:19:8d:aa:
                    eb:7d:68:30:cf:a0:b2:d0:30:b5:32:df:2e:2a:bc:
                    54:7f:2f:89:28:a4:c4:a8:9f:aa:0b:61:e0:8e:af:
                    50:09:54:99:da:c7:e3:db:1a:52:f2:c4:04:c2:8c:
                    8a:9e:4f:11:5c:1d:1a:18:0a:43:d7:c9:13:a9:6e:
                    57:ae:4d:57:cb:81:88:7d:19:a6:b7:31:36:87:b6:
                    e7:f8:7a:23:f8:af:9d:8e:6f:fb:5d:07:f3:ec:b5:
                    3a:96:86:55:8b:18:63:f1:b5:b8:ee:70:6d:e6:7c:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:45:2B:60:CF:6B:21:22:8E:01:57:9D:BA:75:76:AE:53:E5:E2
            X509v3 Authority Key Identifier:
                keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:06:70:8d:a8:07:69:02:17:a4:da:1a:9f:f5:65:47:c6:cf:
         63:df:57:57:5b:f7:82:06:c6:e4:07:87:92:a7:f5:77:bc:e7:
         27:f5:ef:1b:91:7e:0f:ae:ef:39:ae:e2:f1:a0:8f:f0:36:7f:
         d6:63:93:65:67:54:e9:39:42:97:90:7b:e1:aa:6a:37:16:38:
         91:fa:9c:2a:52:0e:74:80:56:63:d4:93:66:bd:f0:47:88:35:
         ea:91:ae:61:2f:26:a1:3f:cc:7f:65:4a:28:76:19:8e:a7:1f:
         6d:60:5a:89:58:c8:95:13:a2:5f:9e:71:b4:c9:6c:f3:49:88:
         14:cd:c1:8e:18:40:40:a8:c4:78:7f:0e:1e:8f:a6:35:99:1d:
         c7:4c:a4:78:14:f2:e1:75:c9:2b:74:f9:fe:a2:e9:c4:07:2b:
         76:82:f1:1d:20:66:36:27:22:68:81:16:fb:92:2b:54:e0:60:
         60:fb:32:b3:0f:41:8b:c5:20:be:25:fd:71:85:1b:05:9e:97:
         08:92:c2:06:02:2b:b3:77:12:40:2b:7f:d0:d1:68:2b:c2:70:
         09:2b:cd:72:0a:d9:4c:a0:fc:d5:22:08:82:5c:76:f2:1d:af:
         f1:42:fd:7d:0f:4b:1f:b6:df:3c:92:8a:92:53:67:f4:65:44:
         35:0f:59:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3
MzlBMDE1RDEwHhcNMjYwOTIzMDAyMDM4WhcNMjYwOTMwMDAyMDM4WjAYMRYwFAYD
VQQDEw02YWIzMWI1Ny1jMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVDYex0m/e81iaoCy5xU5PVXuogE5B9b7g8NGpl5kd/pSai4MTuyqU+XB95n
nH1h+Musdf0KAaJASUmlR7OVaQWQyXj0Gf6APlHGBVUk2Jl5hbydxsg4eNlkRqp/
7jGTqSnzfWYxsMrNmAkN2ir/nGEYOAXKckd3CixXsz1MqlXCn24TNV/kDzCmL5Lc
6rMW+8cZjarrfWgwz6Cy0DC1Mt8uKrxUfy+JKKTEqJ+qC2Hgjq9QCVSZ2sfj2xpS
8sQEwoyKnk8RXB0aGApD18kTqW5Xrk1Xy4GIfRmmtzE2h7bn+Hoj+K+djm/7XQfz
7LU6loZVixhj8bW47nBt5nxPUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHQRStg
z2shIo4BV526dXauU+XiMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0
MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r
dXVDTVBwTUx5djV6bWdGZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgQZwjagHaQIXpNoan/VlR8bPY99XV1v3ggbG5AeHkqf1d7znJ/XvG5F+D67v
Oa7i8aCP8DZ/1mOTZWdU6TlCl5B74apqNxY4kfqcKlIOdIBWY9STZr3wR4g16pGu
YS8moT/Mf2VKKHYZjqcfbWBaiVjIlROiX55xtMls80mIFM3BjhhAQKjEeH8OHo+m
NZkdx0ykeBTy4XXJK3T5/qLpxAcrdoLxHSBmNiciaIEW+5IrVOBgYPsysw9Bi8Ug
viX9cYUbBZ6XCJLCBgIrs3cSQCt/0NFoK8JwCSvNcgrZTKD81SIIglx28h2v8UL9
fQ9LH7bfPJKKklNn9GVENQ9ZAg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:26 2026 by rpki-client