Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft
File:                     D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json)
Hash identifier:          yleKppIz6u17YT9lKMuOkaAnZo+gWNZVPu3QuHNzGN4=
Subject key identifier:   7F:E2:80:7F:CF:23:0D:44:3A:09:D8:F0:03:3F:7C:1D:BE:8B:C5:CC
Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2
Certificate issuer:       /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2
Certificate serial:       0565
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft
Manifest number:          055C
Signing time:             Sat 26 Sep 2026 23:27:16 +0000
Manifest this update:     Sat 26 Sep 2026 23:27:16 +0000
Manifest next update:     Sat 03 Oct 2026 23:27:16 +0000
Files and hashes:         1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: auE0ty+CapLdfyH0/7BEPPu4GjCbw4WPtpOKS4kgFxI=)
                          2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: 5lCINEHjd8+xd6sXkjO7AtEmTBRBsLAVi/p3J3/fp6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl
                          rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 23:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4EA, serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2
        Validity
            Not Before: Sep 26 23:27:16 2026 GMT
            Not After : Oct  3 23:27:16 2026 GMT
        Subject: CN=6ab854d4-8d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:ed:78:be:58:d0:f1:6f:b7:f5:63:94:cc:
                    a2:3f:a1:4b:6c:07:e9:83:c4:7f:76:e4:62:76:24:
                    b4:40:5f:92:e2:6a:79:ca:37:b6:79:64:2f:83:1d:
                    b5:7e:50:7b:18:f4:12:35:d6:fa:ea:b9:4e:0f:48:
                    89:16:dc:d0:01:3e:22:ca:7a:b7:c6:ad:05:8d:0b:
                    34:d1:5e:fb:a8:bc:1b:e1:0e:cd:17:17:b4:96:54:
                    f7:cf:9b:68:aa:ed:5b:41:c5:63:a2:d8:65:09:58:
                    d0:e4:91:3b:2f:11:a1:c2:d5:c4:90:88:95:20:db:
                    67:d5:7b:86:7b:9a:56:8e:ca:da:f2:b9:ec:0b:a3:
                    43:cc:77:a2:f1:a3:1c:8e:ee:8e:d1:28:93:7a:ed:
                    63:35:ee:0d:14:0f:7f:07:de:01:cd:9d:b1:0c:66:
                    4d:0a:1f:1f:2c:77:e7:27:cb:df:36:fe:b4:82:f4:
                    d9:48:5b:f4:ab:a5:c3:b1:57:25:9b:1e:a2:58:e4:
                    f7:f7:2c:d2:b5:0c:6a:30:9a:35:77:56:0f:7a:a5:
                    8f:38:9c:7d:d0:ce:9c:7b:fe:60:a7:f5:69:40:ac:
                    58:c8:a8:e4:08:86:4f:16:73:c7:1e:46:ad:a0:ce:
                    b0:0f:ce:b5:6c:82:d0:1d:ce:c2:35:98:63:4f:65:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E2:80:7F:CF:23:0D:44:3A:09:D8:F0:03:3F:7C:1D:BE:8B:C5:CC
            X509v3 Authority Key Identifier:
                keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:31:3f:f3:54:75:8e:a2:10:5e:7f:eb:82:22:a7:2c:7d:e7:
         90:0c:01:b8:6e:10:9a:4e:39:10:79:84:33:45:67:c7:2a:79:
         37:39:a9:b1:63:2f:48:60:74:4b:4a:52:8e:a6:42:74:2f:f7:
         e4:ab:aa:53:f9:8d:9b:e0:1a:7c:4b:f2:9a:65:d6:33:97:52:
         1f:7e:4e:05:c8:72:7d:65:d8:12:c5:ca:e9:19:c2:b7:43:b7:
         54:97:fa:91:cb:73:1f:f7:01:ba:4d:e0:31:7e:e7:6b:f7:15:
         52:21:f7:55:d6:5a:e2:e6:5f:10:15:d5:4d:17:8f:6d:f3:24:
         b1:28:cf:74:45:7e:c1:01:a9:53:83:b1:8a:b5:11:74:27:1f:
         04:06:13:ee:44:3b:a8:21:48:38:79:7d:64:a7:51:ca:02:24:
         31:eb:8d:e8:f4:69:2b:71:85:f0:63:ff:3e:6b:92:41:72:3d:
         70:90:77:5d:39:3d:9b:87:43:74:5d:0e:c3:28:01:80:d2:ae:
         9d:36:cc:22:71:ab:42:d2:c9:97:01:24:a0:35:8f:e4:63:89:
         9f:41:db:77:6f:37:87:54:35:ed:f1:d8:c3:07:ca:6c:53:e6:
         04:8b:53:7f:f8:c5:ad:d0:0a:0b:f0:26:f1:50:42:a2:bb:e2:
         c7:fd:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:55:16 2026 by rpki-client