Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
File:                     15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json)
Hash identifier:          9M4gKnrYJzWdxGMKvU65Ps5vIAzTbDT7kCvfS7funhA=
Subject key identifier:   C7:E8:B8:E9:59:A1:D5:1E:83:7E:17:29:34:3D:A1:B7:5B:14:E3:95
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Certificate issuer:       /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
Manifest number:          0148
Signing time:             Fri 25 Sep 2026 05:32:48 +0000
Manifest this update:     Fri 25 Sep 2026 05:32:47 +0000
Manifest next update:     Fri 02 Oct 2026 05:32:47 +0000
Files and hashes:         1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: 1ljxX++TgWqai+LWdeuy8swu8pJaOWDUN78T0qo4gMI=)
                          2: B75DF5B4885B11F1898FC1875911F970.roa (hash: ClO5piivz8eEsp9F5qrC3vaNrxAb+jMIIwEfco0i7mk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
        Validity
            Not Before: Sep 25 05:32:47 2026 GMT
            Not After : Oct  2 05:32:47 2026 GMT
        Subject: CN=6ab60780-30a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:6c:ab:f3:f0:ea:c5:79:b8:76:12:ce:f9:
                    dd:d6:84:2a:c5:5b:ed:9a:ce:88:b6:04:58:8f:21:
                    37:f1:5c:64:a1:8b:96:58:2c:f9:c2:62:f7:b5:46:
                    16:05:89:41:a1:c8:52:d4:82:28:0d:9b:1f:6d:ee:
                    64:fb:33:73:10:26:fb:db:bf:b2:65:8d:08:b9:45:
                    ba:c2:50:dc:19:32:4a:11:36:a6:4d:da:d7:69:b5:
                    af:a4:c6:4f:e0:f0:4a:23:32:45:55:49:c1:f7:79:
                    8e:3f:ee:cd:77:5b:cc:14:30:ac:ec:6b:ff:c0:05:
                    77:43:40:77:a1:f6:8e:74:c1:83:9b:e5:cb:48:66:
                    89:2b:4d:25:3f:81:19:07:84:06:fe:12:af:32:d4:
                    ef:63:1a:58:77:0a:c5:bc:6f:34:4e:8c:41:f2:62:
                    9e:e2:fc:60:d9:b0:b2:aa:8b:35:7c:c6:c3:35:90:
                    ee:b3:1a:7f:d2:4c:a1:2a:c6:d2:5b:a7:f3:5e:ad:
                    5c:f4:1d:7b:2e:fd:bb:f1:3c:56:0f:00:3b:20:59:
                    64:62:f0:63:b1:4e:ea:80:34:cc:9d:67:7b:54:cf:
                    e7:58:d1:41:9c:06:09:91:89:54:b9:07:ec:52:7b:
                    fc:0c:d0:e4:39:e8:3f:5a:46:52:1d:55:f1:ff:1e:
                    aa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E8:B8:E9:59:A1:D5:1E:83:7E:17:29:34:3D:A1:B7:5B:14:E3:95
            X509v3 Authority Key Identifier:
                keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:38:ca:51:1e:65:49:28:14:e6:dd:d7:91:1c:f1:bf:fc:
         d8:d9:6d:91:33:b7:26:a7:a2:6f:1c:4f:b1:9b:e3:39:aa:ac:
         83:1e:f1:73:53:8e:4f:2e:fc:d1:07:7c:f6:89:44:ad:8d:78:
         cb:f3:e3:12:92:5f:04:47:9e:cd:61:7c:ba:ec:92:f7:29:d3:
         72:eb:6e:bd:47:01:e2:ff:7e:19:34:62:2d:ad:17:fa:c7:55:
         9e:2c:1b:3a:4e:86:68:ec:18:29:1f:9a:b9:33:ed:6d:c9:af:
         50:5d:5a:85:28:75:c6:f7:1d:74:4f:bf:13:3a:c1:ab:d4:03:
         a1:eb:4e:ba:ff:f1:2b:b9:ec:03:78:ba:2b:38:e3:d2:5e:ee:
         9c:fd:ff:b6:98:79:51:36:19:32:b9:6a:d1:a6:e0:71:0b:cd:
         14:c3:60:46:f4:a6:73:c1:53:1b:27:9f:29:08:f6:bc:91:05:
         ea:41:ea:10:f8:ce:17:13:0f:4a:ef:04:fb:ef:c5:88:5d:da:
         79:92:c8:64:51:0f:00:1d:18:38:05:25:39:db:2f:76:48:86:
         5c:aa:f9:90:e0:c5:ef:93:94:12:76:e6:d8:79:a2:ca:92:5a:
         94:74:63:74:98:fc:fe:67:29:95:ae:59:b0:6c:77:b3:f5:9f:
         94:76:36:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:47:36 2026 by rpki-client