Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          knHi9NQ6SiwJTEHdzyGbltSx4q4pWr2kUH4h7IgL0Ng=
Subject key identifier:   6F:30:04:51:7B:B0:E8:3C:F8:1C:B3:D6:D2:10:23:F5:60:A5:40:ED
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0EAC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0E7D
Signing time:             Tue 22 Sep 2026 14:23:04 +0000
Manifest this update:     Tue 22 Sep 2026 14:23:03 +0000
Manifest next update:     Tue 29 Sep 2026 14:23:03 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: KGNbywLP/j9jzhK3+JCM1mVLxAEOj7CqK+BSIPYwBLQ=)
                          2: A2DC8C9A4F7B11F1A3D5282FCC833773.roa (hash: YUtSjt3WoGXo+IxfCpIihU+kCKwTBNB8WP+VlFPoQho=)
                          3: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: d203/4qzc9h+hSrcLL8nLeuaomn8Z28uEnCu3k7Q+eU=)
                          4: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: BgJh4zD4wVA6vueDCVPTNC8t5x//InfjVE6PnSk4dVs=)
                          5: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: w0JJZrGQyv8oK5rum9hMEp7rzJrhOm8IUGzDQDqo468=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3756 (0xeac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Sep 22 14:23:03 2026 GMT
            Not After : Sep 29 14:23:03 2026 GMT
        Subject: CN=6ab28f48-0e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:1b:46:29:4e:67:bb:2c:25:47:ec:1c:3f:
                    87:e2:e4:15:44:79:3f:37:6d:91:a6:a7:b4:02:bf:
                    8d:39:72:31:99:5d:02:df:29:c1:c3:d9:ed:a9:dc:
                    c9:f6:00:42:bd:e9:56:9d:64:36:2b:b4:41:e7:17:
                    bf:6c:0f:c7:61:a8:d9:66:72:98:eb:d8:78:e2:c9:
                    cc:85:44:24:ba:d4:85:6a:ab:09:5e:37:9d:af:68:
                    ba:68:68:f3:b8:80:3a:42:21:72:01:3b:33:98:1e:
                    a2:df:ee:32:e4:7e:e0:70:3f:42:a9:b5:09:9a:5a:
                    1e:a4:09:3e:63:40:9a:97:db:e2:13:c0:56:1e:73:
                    1d:f6:1c:ca:2b:2e:6c:13:c0:1f:04:96:a7:96:b0:
                    ae:ea:7d:37:f5:40:40:e0:1c:49:42:bf:85:7f:64:
                    4b:63:be:4f:85:70:3a:13:31:0b:5c:02:4a:d2:a5:
                    71:58:fd:bc:91:e7:90:5d:ae:a4:70:a6:70:fc:e2:
                    d8:69:6f:ff:cb:9b:82:88:5b:35:7c:f9:e0:cc:ee:
                    0f:b4:79:6a:83:b1:e6:bf:5b:96:4b:49:c5:ea:7d:
                    05:70:a7:76:be:01:a0:71:a5:69:c0:16:43:47:d2:
                    52:4b:88:60:f9:99:d3:f4:ad:fb:4e:26:b0:78:e0:
                    03:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:30:04:51:7B:B0:E8:3C:F8:1C:B3:D6:D2:10:23:F5:60:A5:40:ED
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:64:3a:c8:17:27:09:49:6f:d9:ba:45:b6:cc:16:1c:08:
         5f:de:4f:48:04:68:bd:54:4d:8d:92:57:3c:38:a0:12:37:42:
         72:d9:40:80:56:e5:9e:e6:31:7f:49:56:e1:be:a8:1f:e3:18:
         10:d4:35:68:df:e6:ec:1a:70:fc:49:17:5d:b2:24:10:75:ff:
         e6:ef:c8:9f:51:50:36:68:77:da:60:69:e1:b3:4c:c1:16:7f:
         e3:59:1e:96:f6:ee:65:20:4d:0d:bc:9c:b6:38:55:d6:ff:cd:
         44:aa:65:3d:f2:cb:10:e4:d0:ab:e1:c2:f2:c2:cd:14:90:88:
         3b:65:fa:d1:2a:7b:3d:da:e0:5b:b6:45:9f:c0:e7:9c:8d:be:
         0e:63:df:c5:38:b1:35:52:fb:79:1a:b1:b9:1e:4d:b7:36:ef:
         1e:a1:b3:0d:6b:5d:0f:8f:e0:f1:9a:78:dd:3e:fc:2a:bc:89:
         54:52:86:ce:c8:95:ca:ac:51:06:f7:b0:7b:29:a1:e3:92:80:
         ea:e8:94:f8:2f:13:55:88:f2:02:cb:fe:70:e3:b5:19:1d:d8:
         4a:47:c5:66:af:43:0f:eb:3f:af:02:99:84:70:7b:dc:0a:ba:
         80:a4:9e:12:f5:06:5e:c5:da:36:e3:b1:ea:b1:62:b1:b5:d4:
         dc:8b:70:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:34:38 2026 by rpki-client