Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
File:                     mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json)
Hash identifier:          a93SBGEXlSOE0EDydzQHz+IcH8ib37BniriqVrfAlS0=
Subject key identifier:   03:BA:FC:57:E2:D6:3F:B8:60:FD:76:BA:63:1B:C6:BC:C8:EA:A4:9E
Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
Certificate issuer:       /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426
Certificate serial:       085B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
Manifest number:          084D
Signing time:             Sat 26 Sep 2026 21:10:18 +0000
Manifest this update:     Sat 26 Sep 2026 21:10:17 +0000
Manifest next update:     Sat 03 Oct 2026 21:10:17 +0000
Files and hashes:         1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: kj7HfSYxjDyWKYJC3Es4keLQVgKok2/jcuMeNyRUSo8=)
                          2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: SEGLZJRsG8d/oF/uE/MLRtBE/snz3gSEd4tQtKL1yRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426
        Validity
            Not Before: Sep 26 21:10:17 2026 GMT
            Not After : Oct  3 21:10:17 2026 GMT
        Subject: CN=6ab834ba-7a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fb:67:72:44:61:d5:97:41:1d:e5:a9:45:ff:
                    f4:7e:fb:45:1a:f7:dc:9d:99:88:e0:c4:9b:10:f6:
                    a4:c1:94:a4:3f:cb:4a:95:8c:29:4a:d5:d0:55:c4:
                    1f:f4:58:1a:fb:f4:bf:34:15:3c:1e:1c:42:7f:0e:
                    80:39:64:fb:88:ef:b0:39:42:43:75:0e:ae:bb:c1:
                    42:8b:49:b1:86:c6:aa:89:55:74:49:f1:96:b1:fe:
                    01:d7:6b:6a:51:a8:3d:27:3d:0c:18:d1:8d:27:5a:
                    5c:f4:5d:40:ea:8f:df:4a:2c:12:4b:73:50:9e:ca:
                    56:3a:83:88:b9:d1:c3:46:dd:51:76:27:fd:26:e2:
                    0b:d6:69:51:31:14:d3:59:83:7a:b6:a6:fa:e3:a4:
                    5b:19:44:92:dd:ee:98:d7:c3:e9:e9:03:16:ff:22:
                    14:71:02:39:f2:d5:92:1e:ae:66:81:a8:51:62:49:
                    c0:a2:21:73:73:dd:28:9a:00:98:b8:9c:2c:ff:99:
                    88:47:a0:15:5c:c7:7f:96:04:80:20:d5:e8:7d:29:
                    dd:3e:04:72:cd:41:66:18:84:12:ba:2c:fa:55:3c:
                    b8:6c:b5:fc:44:36:16:49:45:25:e8:47:1d:63:84:
                    59:65:9a:9c:d2:ca:a3:73:5d:84:bf:66:0f:89:0f:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BA:FC:57:E2:D6:3F:B8:60:FD:76:BA:63:1B:C6:BC:C8:EA:A4:9E
            X509v3 Authority Key Identifier:
                keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9f:e7:55:c0:df:c8:d4:85:df:4a:0f:3c:cb:73:ae:67:d1:
         97:2d:82:11:b9:57:dd:66:3c:72:3d:cf:0b:f1:04:df:72:78:
         77:8b:f9:61:e7:c3:8f:0c:eb:c8:0c:a4:bd:5d:a2:82:96:7c:
         27:f4:9b:2c:c0:b6:9c:08:7a:d0:d7:76:a6:f6:74:1e:1e:39:
         25:88:c8:49:5b:59:3a:df:c1:2f:73:65:a8:e4:fb:d2:8c:61:
         c1:8f:15:cb:a4:d4:e3:60:cc:e1:32:3e:24:54:44:84:2a:bd:
         f7:d0:0b:02:82:4e:90:97:e3:cc:0d:38:35:3d:19:cc:75:79:
         f0:a3:ae:89:22:92:c0:1e:ce:e2:8e:8f:85:21:1a:15:e6:03:
         07:b6:42:af:a7:60:b5:a2:12:da:2d:6c:d3:01:6c:87:53:16:
         47:e3:6d:b5:74:29:6a:95:f7:81:da:60:c2:8d:8a:c5:21:6b:
         96:44:5c:70:ee:af:7d:dd:16:e8:16:7a:7b:dd:7c:ef:e5:b0:
         58:9a:8f:28:5b:27:00:bb:03:31:a7:dc:17:38:7c:39:83:eb:
         e5:65:c6:d0:df:39:1c:68:b0:7c:23:61:02:ab:3e:44:a8:77:
         e3:9d:df:27:ab:1e:66:9c:bf:fd:91:8b:3f:b0:07:99:db:13:
         2a:0e:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:19:21 2026 by rpki-client