Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File:                     8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier:          5o2wft54e5AjVskMXze83HLw5I6l064qFicRvep8Ceg=
Subject key identifier:   40:FC:ED:AD:05:44:12:DF:C6:3D:E0:BB:12:9F:D2:CA:A4:A7:7B:93
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer:       /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number:          015F
Signing time:             Fri 25 Sep 2026 05:08:04 +0000
Manifest this update:     Fri 25 Sep 2026 05:08:04 +0000
Manifest next update:     Fri 02 Oct 2026 05:08:04 +0000
Files and hashes:         1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: pqkHYq+mc4VYzwPoRzre2TOF21wbgN78bU0G8ir1lO8=)
                          2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: T1zCfhDV1GULebI1Zrd7vcq1PSLqbmhv8BwiI/PVCOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
                          rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
        Validity
            Not Before: Sep 25 05:08:04 2026 GMT
            Not After : Oct  2 05:08:04 2026 GMT
        Subject: CN=6ab601b4-89c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:21:e6:eb:10:50:40:11:8c:2f:da:47:d5:e0:
                    a7:7b:02:8b:75:e3:8d:cf:8a:e2:f8:6c:cb:16:25:
                    27:63:92:09:82:d2:c2:58:b7:86:81:16:27:7e:ba:
                    34:95:5b:78:d4:60:79:c9:a8:1d:eb:f2:dc:b5:ce:
                    68:6d:ca:50:0a:b1:30:3b:16:a4:18:03:71:dd:00:
                    30:36:1e:27:4f:aa:8c:a4:0f:b2:7b:09:08:fb:ea:
                    ca:d1:08:cd:a5:a7:7a:59:ec:20:12:60:9a:36:1a:
                    d1:28:ba:0e:96:d9:81:27:88:fd:8a:c6:ba:41:f2:
                    3e:77:d6:8f:09:37:ef:72:45:2b:5b:dc:f1:d8:0b:
                    59:d2:99:d8:76:09:e6:6a:1d:1a:9a:3a:22:95:e1:
                    f5:25:5e:18:35:39:97:85:6c:48:18:ca:69:b0:63:
                    90:25:28:20:51:99:e7:ec:97:cf:02:67:28:76:8c:
                    4e:81:39:18:5b:68:5a:9a:30:0e:9d:92:e4:41:29:
                    1f:fd:79:d6:a7:78:8a:a3:17:75:49:e0:e8:2d:5f:
                    91:23:73:a5:14:93:c3:68:b5:a6:fe:ca:c0:93:77:
                    30:07:ca:c5:86:1f:b5:4b:8d:0b:13:0c:52:7c:fb:
                    2a:4b:c8:c1:1d:2d:2c:1a:89:c9:24:b0:2c:d0:27:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FC:ED:AD:05:44:12:DF:C6:3D:E0:BB:12:9F:D2:CA:A4:A7:7B:93
            X509v3 Authority Key Identifier:
                keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ff:91:db:7e:35:9c:a7:f2:a4:4a:0b:cc:fc:7d:fb:a0:aa:
         bc:56:31:ef:bd:65:b4:b0:00:eb:54:62:7b:31:23:7c:59:1d:
         f4:22:34:50:7c:26:ad:01:ab:85:9b:ae:47:cd:af:5d:f8:ce:
         79:57:a9:40:9c:73:b2:49:bf:f2:85:99:a8:76:05:2b:39:0c:
         68:4e:48:7e:28:93:b5:e2:14:f9:e7:a6:d6:81:96:c1:34:d2:
         32:93:d9:18:b3:74:7b:aa:3e:3c:88:4e:47:7c:8a:b0:df:2d:
         14:95:1d:ce:cd:39:f9:5e:73:9e:a1:06:06:f0:f2:4e:fd:f3:
         e7:b7:cd:bf:68:27:70:52:bf:66:d1:f5:81:d7:8b:6c:42:cb:
         82:c4:1e:d5:f5:44:dc:7d:10:a2:c3:8a:2a:a4:4f:79:f4:8d:
         bc:02:dc:1a:fc:21:d2:28:51:ac:b8:7d:32:a6:dc:f3:ef:c2:
         d0:15:9b:73:de:2b:ca:da:15:87:20:a6:bc:e3:df:e4:cb:5c:
         2b:28:78:58:d1:a4:14:c6:a9:d4:9f:f8:7c:47:7e:44:1f:f5:
         14:17:28:a0:5a:08:31:dc:51:59:60:2d:53:4a:59:9e:bf:97:
         d7:3d:0e:fc:d2:63:55:d5:f8:2a:d0:9f:78:7c:d4:b8:67:9a:
         2b:51:c7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:54:29 2026 by rpki-client