Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
File:                     mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json)
Hash identifier:          RDFO8u9K1HeQom2HKG5A12uwQQt7Z05q/lkvfm+1qPI=
Subject key identifier:   49:52:93:F2:EB:1A:AE:51:AC:83:16:E4:FB:1A:EC:AA:C7:11:8F:BA
Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
Certificate issuer:       /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426
Certificate serial:       085C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
Manifest number:          084E
Signing time:             Mon 28 Sep 2026 21:13:29 +0000
Manifest this update:     Mon 28 Sep 2026 21:13:29 +0000
Manifest next update:     Mon 05 Oct 2026 21:13:29 +0000
Files and hashes:         1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: 5hFXIjFmR+CHpNABiZQ+TsYoAMWYWw0PIgC82S58rmc=)
                          2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: SEGLZJRsG8d/oF/uE/MLRtBE/snz3gSEd4tQtKL1yRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 21:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426
        Validity
            Not Before: Sep 28 21:13:29 2026 GMT
            Not After : Oct  5 21:13:29 2026 GMT
        Subject: CN=6abad879-a695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:58:a6:12:fc:81:34:c0:b3:c3:e8:84:59:
                    d8:1b:03:56:44:86:02:ea:75:fa:b8:e4:1c:b3:78:
                    14:89:c7:32:be:fd:3e:3b:c3:2e:76:1a:f4:a2:51:
                    dc:e8:7f:a2:d9:f2:aa:9a:d1:21:21:05:3c:18:0f:
                    8f:72:fe:a3:ce:91:20:5e:7f:8f:54:19:a0:c4:ae:
                    16:e7:b9:a5:43:3e:37:94:57:aa:8e:32:ab:33:0f:
                    fa:7d:e0:b4:6e:77:ae:e7:20:d7:4b:44:a2:56:c4:
                    21:79:20:74:04:a6:47:f9:00:a5:fe:c4:12:02:2b:
                    c5:21:2f:67:fd:a7:c7:ad:8e:87:b1:b8:9b:3f:4d:
                    81:84:1f:88:d9:0a:7f:02:ac:1a:31:40:77:49:97:
                    45:ab:62:d9:42:98:e5:bf:90:76:3f:12:e7:3f:79:
                    7a:47:d0:08:5a:e3:6f:f9:98:7b:5b:d0:d5:a4:93:
                    66:a9:0d:b8:7b:77:8f:20:6f:8f:bf:83:45:72:3e:
                    ab:2a:33:03:a2:19:82:3e:1d:c7:79:af:33:a7:a1:
                    6b:98:3f:5b:3c:b4:71:ed:db:87:83:bc:20:69:9a:
                    27:25:df:e4:5e:4d:d5:3a:17:ec:e3:6a:ad:83:4e:
                    fb:1b:c3:e6:86:a0:8a:62:a3:4a:1a:98:5a:1c:da:
                    98:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:52:93:F2:EB:1A:AE:51:AC:83:16:E4:FB:1A:EC:AA:C7:11:8F:BA
            X509v3 Authority Key Identifier:
                keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ce:48:b5:a4:c8:c2:5e:42:d8:3c:7e:57:f9:a6:8e:fb:14:
         92:f7:4e:30:fe:07:7c:37:aa:cc:4c:b7:8e:32:49:5f:88:96:
         5f:a4:3f:5d:0c:a1:63:8a:3b:62:99:3c:48:87:8e:d0:b8:d7:
         c9:b6:cc:9d:88:28:3e:80:03:03:53:5e:73:82:ad:60:06:ed:
         0f:03:99:d9:06:d2:12:3e:91:03:bc:11:9d:26:09:95:e2:70:
         a4:b4:c3:de:24:0d:c5:d2:15:95:e3:c0:bf:3a:24:e2:0a:8e:
         60:49:d2:69:21:05:34:ae:85:b0:5f:96:17:8e:0a:b8:e0:a7:
         f0:d0:f3:f4:d9:ed:ff:d4:3f:ba:c6:31:23:dd:24:9f:34:1c:
         ee:f0:3e:c9:60:3d:b5:36:93:48:40:01:4c:e2:d1:cb:e9:e5:
         84:58:40:24:10:67:11:0f:2b:e8:03:3c:ce:43:df:89:38:fc:
         f1:86:8e:43:82:de:a8:da:f3:07:c1:d7:81:bd:ed:e9:32:1f:
         5a:90:88:02:22:0f:5a:12:73:79:19:93:da:56:b6:22:ec:42:
         c5:46:e7:20:97:a4:5e:d0:10:16:25:3c:50:51:a2:11:f7:3a:
         b5:ec:04:92:52:82:60:29:e8:92:b3:be:14:67:dc:a8:38:61:
         1a:b0:e1:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz
NEVDODQ0MjYwHhcNMjYwOTI4MjExMzI5WhcNMjYxMDA1MjExMzI5WjAYMRYwFAYD
VQQDEw02YWJhZDg3OS1hNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaRYphL8gTTAs8PohFnYGwNWRIYC6nX6uOQcs3gUiccyvv0+O8Mudhr0olHc
6H+i2fKqmtEhIQU8GA+Pcv6jzpEgXn+PVBmgxK4W57mlQz43lFeqjjKrMw/6feC0
bneu5yDXS0SiVsQheSB0BKZH+QCl/sQSAivFIS9n/afHrY6HsbibP02BhB+I2Qp/
AqwaMUB3SZdFq2LZQpjlv5B2PxLnP3l6R9AIWuNv+Zh7W9DVpJNmqQ24e3ePIG+P
v4NFcj6rKjMDohmCPh3Hea8zp6FrmD9bPLRx7duHg7wgaZonJd/kXk3VOhfs42qt
g077G8PmhqCKYqNKGphaHNqYJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElSk/Lr
Gq5RrIMW5Psa7KrHEY+6MB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB
RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw
b2tmSWFILWhLT1UwN0lSQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHs5ItaTIwl5C2Dx+V/mmjvsUkvdOMP4HfDeqzEy3jjJJX4iWX6Q/XQyhY4o7
Ypk8SIeO0LjXybbMnYgoPoADA1Nec4KtYAbtDwOZ2QbSEj6RA7wRnSYJleJwpLTD
3iQNxdIVlePAvzok4gqOYEnSaSEFNK6FsF+WF44KuOCn8NDz9Nnt/9Q/usYxI90k
nzQc7vA+yWA9tTaTSEABTOLRy+nlhFhAJBBnEQ8r6AM8zkPfiTj88YaOQ4LeqNrz
B8HXgb3t6TIfWpCIAiIPWhJzeRmT2la2IuxCxUbnIJekXtAQFiU8UFGiEfc6tewE
klKCYCnokrO+FGfcqDhhGrDh7w==
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:17:24 2026 by rpki-client