Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          7OyM9vfZ8dp7+cxiPFsVf1KNGLu81nURnPiod8YHXbo=
Subject key identifier:   7E:B3:E7:8C:14:6B:C7:76:14:E7:B1:EF:A7:CF:C7:96:A4:7A:BC:96
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0EBD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0E8E
Signing time:             Mon 26 Oct 2026 14:23:09 +0000
Manifest this update:     Mon 26 Oct 2026 14:23:08 +0000
Manifest next update:     Mon 02 Nov 2026 14:23:08 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: kmIZ1Fw7RDdWcU4JIOnVzxddJtluKyIb7MmO2av0EN4=)
                          2: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: BgJh4zD4wVA6vueDCVPTNC8t5x//InfjVE6PnSk4dVs=)
                          3: A2DC8C9A4F7B11F1A3D5282FCC833773.roa (hash: YUtSjt3WoGXo+IxfCpIihU+kCKwTBNB8WP+VlFPoQho=)
                          4: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: w0JJZrGQyv8oK5rum9hMEp7rzJrhOm8IUGzDQDqo468=)
                          5: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: d203/4qzc9h+hSrcLL8nLeuaomn8Z28uEnCu3k7Q+eU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3773 (0xebd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Oct 26 14:23:08 2026 GMT
            Not After : Nov  2 14:23:08 2026 GMT
        Subject: CN=6adf624d-2522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:37:fc:d0:78:78:54:eb:32:23:a4:5d:fa:
                    4f:5a:fe:52:35:76:f4:c6:13:a8:ea:ed:56:3c:c6:
                    8d:a2:38:7a:7f:9c:bb:ce:c4:a0:64:20:3e:13:12:
                    67:34:14:fb:47:ad:0e:1f:35:6a:71:cc:29:e5:8b:
                    4b:c6:76:a2:7f:75:b5:0d:1f:f3:3d:cd:94:1c:1b:
                    90:5c:2f:07:25:7d:0e:23:56:20:16:13:c9:4f:61:
                    2b:51:f7:29:51:9a:02:9c:0f:d6:04:97:ec:56:f0:
                    18:11:b8:0f:13:b8:3e:b8:e9:47:9b:9f:e3:03:e4:
                    20:7f:25:97:1a:3d:7b:32:1a:aa:86:ac:15:d9:c8:
                    b4:be:44:b4:01:f2:ce:8b:e8:e9:68:6f:92:60:c1:
                    60:01:bb:73:13:cf:50:d9:c8:79:08:a0:6f:15:79:
                    58:df:0c:4f:60:ac:5d:4f:96:d5:f1:72:52:00:72:
                    a3:3d:f1:f9:0a:d5:59:f3:7a:25:f9:be:a5:6f:cf:
                    03:7d:0b:81:04:26:82:95:c3:82:74:1d:77:d1:a6:
                    ed:9e:ad:bb:c9:ff:ed:18:91:5e:d4:8c:9c:71:c5:
                    b2:52:32:9a:30:3d:78:c4:b5:a4:aa:a4:42:ff:b2:
                    1e:4d:86:14:6c:9b:c8:4b:58:31:53:e4:de:62:4c:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B3:E7:8C:14:6B:C7:76:14:E7:B1:EF:A7:CF:C7:96:A4:7A:BC:96
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4b:3a:31:02:56:e4:27:16:1f:26:aa:41:f6:9d:45:a5:45:
         b7:8c:5b:4d:f5:50:29:16:d6:ef:49:96:20:86:fb:4d:fb:3e:
         a0:e1:be:bb:f2:6b:9e:71:37:a3:3e:4c:3d:07:e7:05:d1:42:
         85:e9:d5:29:11:20:03:2f:8c:69:52:9b:b8:d0:d5:61:1e:af:
         6a:15:f0:22:28:97:e7:c7:28:e0:cb:64:59:f5:c0:a8:70:aa:
         43:5c:6c:e5:15:23:47:6e:a0:f5:f4:b4:88:ff:e0:c1:3c:dc:
         e9:f1:11:91:02:b5:f1:58:97:f9:d5:39:3a:01:6a:d7:81:cd:
         06:0f:b0:1b:55:02:28:4c:52:70:b3:93:36:62:79:47:03:9a:
         b2:66:b2:28:2e:ff:65:16:44:d8:8f:55:4c:89:a5:ee:70:7f:
         2c:d5:72:c3:a6:cc:a1:ae:59:f0:73:36:c5:6f:98:d7:45:81:
         36:28:2a:f8:fc:8a:10:d9:f2:3c:d9:83:64:04:26:e6:a6:dc:
         3e:9b:3d:b8:7c:06:f3:3b:c9:60:1b:da:ae:44:8b:99:ea:4d:
         56:4b:38:c8:e6:82:d2:e5:85:36:60:4d:68:fe:88:74:1f:57:
         8d:5b:16:0d:b6:b6:16:2d:6b:ae:86:4d:a4:08:42:db:8c:76:
         42:90:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:17:47 2026 by rpki-client