Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
File:                     sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json)
Hash identifier:          GMkAxRBv52gAlMKtlu1Rx0cAZ28ZdRVCacGS2x6aSPo=
Subject key identifier:   4D:6E:92:58:53:3B:39:6E:58:27:09:AE:AD:B4:39:20:09:61:4C:2A
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Certificate issuer:       /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial:       0D77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
Manifest number:          0D5D
Signing time:             Sat 26 Sep 2026 18:09:50 +0000
Manifest this update:     Sat 26 Sep 2026 18:09:49 +0000
Manifest next update:     Sat 03 Oct 2026 18:09:49 +0000
Files and hashes:         1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: DixhVQ4nqzfY0eC/1vN5RWcAJjsfO3wW5ydZpYvMDHE=)
                          2: A869B800367611F088B7726AC4F9AE02.roa (hash: h0vzLBO9AmONx7Qad7DB4zJWcKBNkWxmiiTY+i7XavM=)
                          3: F920A266A14D11F19C4FD5BB4B11F970.roa (hash: AOVlQsIItS0GQv8Ip9YgVoTaSV/cQNswIGn8znsjXog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
                          rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3447 (0xd77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
        Validity
            Not Before: Sep 26 18:09:49 2026 GMT
            Not After : Oct  3 18:09:49 2026 GMT
        Subject: CN=6ab80a6d-6bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:59:88:7e:b4:2f:81:da:1a:3a:25:f7:e2:
                    f2:e2:3c:1b:e9:b6:e6:71:4e:79:47:b1:8c:ee:47:
                    35:9f:14:5e:64:dd:ff:79:3a:b9:08:3d:00:77:37:
                    ee:df:16:b7:2c:fb:cb:e8:52:55:c7:eb:71:55:1f:
                    45:7f:a6:71:be:33:43:6c:7a:de:be:dd:a8:f3:42:
                    9a:5c:57:ad:e3:54:a2:a1:06:64:27:16:31:cc:ee:
                    f5:ae:60:70:3d:da:6a:d4:d5:0b:74:df:b3:73:b5:
                    e9:86:28:15:64:43:f2:57:2e:30:4d:55:57:c8:c7:
                    cc:01:13:9d:3c:50:01:17:e4:e1:a9:5f:8a:35:1d:
                    4d:ff:3f:4e:69:d3:aa:9f:42:0b:ab:af:89:31:00:
                    98:75:8a:28:da:11:65:5a:78:cd:4c:b6:3f:62:74:
                    ce:a3:f5:13:7e:b4:56:f0:5e:02:59:75:f1:22:ff:
                    26:a2:ca:25:f1:c5:68:08:a0:6a:63:22:b4:0a:b0:
                    0d:29:50:0f:03:0a:b7:b9:ea:e7:0d:d1:6b:38:c5:
                    d7:b5:cf:7f:99:9a:db:7a:ed:db:5e:29:ea:5d:0f:
                    42:cc:14:bc:ef:11:c3:31:e5:8e:f3:57:cb:b5:ba:
                    35:94:3c:cd:53:1c:52:a3:d4:95:3d:07:98:12:93:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6E:92:58:53:3B:39:6E:58:27:09:AE:AD:B4:39:20:09:61:4C:2A
            X509v3 Authority Key Identifier:
                keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5e:87:20:20:1a:9f:8e:bd:b9:a0:97:fc:da:00:b6:9f:65:
         aa:91:c9:76:47:7f:ed:37:5d:b3:3f:4a:8b:a9:6a:de:6f:b2:
         5c:5f:3f:e8:7a:09:7f:94:c5:89:06:03:5b:4f:df:d9:af:6f:
         78:30:9a:13:de:c1:0b:cc:00:04:7b:10:f3:f5:74:6c:9a:76:
         bd:6b:0a:5c:4b:9b:a2:6f:ab:1e:50:2f:69:42:02:71:56:f1:
         b0:e0:f1:9f:d1:3f:90:e1:fc:b8:74:14:23:59:20:94:98:f7:
         bf:6f:5d:85:22:69:ee:40:86:58:b6:3d:2d:22:1b:d8:55:c7:
         94:e0:4e:43:cd:af:f3:3c:cf:a0:0e:83:3d:63:16:f3:28:bb:
         84:08:fd:d4:66:ca:47:4a:bc:2b:d7:f8:89:61:04:3b:ed:ae:
         fc:3e:f2:5b:64:76:18:c0:b1:0c:6d:e4:ac:76:26:ae:db:09:
         d8:2d:aa:c3:9e:98:19:ae:25:af:b9:c4:b1:67:42:23:f9:a8:
         60:fe:c5:7e:a1:9a:92:56:35:e4:ba:9e:29:8f:02:43:4e:e4:
         3c:b8:ce:ce:56:c3:43:6a:4e:34:10:f0:b0:40:2a:c3:ae:cd:
         a5:67:06:64:df:82:6f:c3:aa:4d:76:18:7f:5b:de:78:b1:7f:
         70:ae:f3:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG
ODlENjlDQzAwHhcNMjYwOTI2MTgwOTQ5WhcNMjYxMDAzMTgwOTQ5WjAYMRYwFAYD
VQQDEw02YWI4MGE2ZC02YmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmRZiH60L4HaGjol9+Ly4jwb6bbmcU55R7GM7kc1nxReZN3/eTq5CD0Adzfu
3xa3LPvL6FJVx+txVR9Ff6ZxvjNDbHrevt2o80KaXFet41SioQZkJxYxzO71rmBw
Pdpq1NULdN+zc7XphigVZEPyVy4wTVVXyMfMAROdPFABF+ThqV+KNR1N/z9OadOq
n0ILq6+JMQCYdYoo2hFlWnjNTLY/YnTOo/UTfrRW8F4CWXXxIv8mosol8cVoCKBq
YyK0CrANKVAPAwq3uernDdFrOMXXtc9/mZrbeu3bXinqXQ9CzBS87xHDMeWO81fL
tbo1lDzNUxxSo9SVPQeYEpPetQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1uklhT
OzluWCcJrq20OSAJYUwqMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz
RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M
TUcwVXBrTUFjb2I0blduTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlV6HICAan469uaCX/NoAtp9lqpHJdkd/7Tddsz9Ki6lq3m+yXF8/6HoJf5TF
iQYDW0/f2a9veDCaE97BC8wABHsQ8/V0bJp2vWsKXEubom+rHlAvaUICcVbxsODx
n9E/kOH8uHQUI1kglJj3v29dhSJp7kCGWLY9LSIb2FXHlOBOQ82v8zzPoA6DPWMW
8yi7hAj91GbKR0q8K9f4iWEEO+2u/D7yW2R2GMCxDG3krHYmrtsJ2C2qw56YGa4l
r7nEsWdCI/moYP7FfqGaklY15LqeKY8CQ07kPLjOzlbDQ2pONBDwsEAqw67NpWcG
ZN+Cb8OqTXYYf1veeLF/cK7zbw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:01:53 2026 by rpki-client