Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
File:                     RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json)
Hash identifier:          SIFkP/2qIxVWUOCuxm8IVZ+VxHJVs0k6jDy+R/OcNG8=
Subject key identifier:   F8:51:E1:37:2A:2A:F3:9E:06:48:43:F3:73:AE:6E:0C:28:7D:4A:FD
Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
Certificate issuer:       /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Certificate serial:       02B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
Manifest number:          02A7
Signing time:             Tue 27 Oct 2026 01:47:52 +0000
Manifest this update:     Tue 27 Oct 2026 01:47:52 +0000
Manifest next update:     Tue 03 Nov 2026 01:47:52 +0000
Files and hashes:         1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: HvICbUZV0ZYecdobsJ/raAux3PDpvcdBURjYTlscErY=)
                          2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: DI/eG9DXOFb9EKRR2bPnL0OAziLMqCbunU7psCFOUsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
                          rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
        Validity
            Not Before: Oct 27 01:47:52 2026 GMT
            Not After : Nov  3 01:47:52 2026 GMT
        Subject: CN=6ae002c8-e5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:0c:63:3d:bd:0f:13:9d:9e:68:a6:9a:e4:
                    8b:64:93:ed:ca:cd:da:56:7c:d1:db:c7:64:e8:6f:
                    2b:68:ae:f1:1c:f8:54:c7:a3:ab:f4:09:83:4c:0d:
                    78:23:eb:6b:93:6f:47:24:b2:e8:ce:1f:77:35:88:
                    03:5b:ec:e8:73:ac:e3:eb:da:7a:16:8f:37:f3:6b:
                    29:f1:4c:00:0a:00:89:4b:3e:97:b0:b6:37:df:d2:
                    e3:31:13:c6:01:4f:a5:74:4e:ae:43:e5:31:45:5f:
                    1d:14:61:5e:a1:cf:76:e8:8b:15:c2:e7:bc:45:26:
                    66:e4:1b:11:e1:84:65:ba:e0:2d:c0:aa:dd:e9:aa:
                    6b:c4:80:fb:5a:c4:4b:18:d6:9c:e7:c1:ac:b5:82:
                    87:24:ca:44:ec:73:d5:df:6d:c9:ce:b0:a3:6e:02:
                    95:7f:c9:fc:61:af:d9:7e:f3:86:63:ba:3f:08:b0:
                    fb:e6:f4:ef:3a:d0:d0:78:15:18:97:d2:93:c6:f1:
                    e2:c9:45:a0:58:5d:70:b0:66:93:27:c8:e6:04:1e:
                    15:b5:bd:87:8d:e5:1b:e7:b7:46:d8:8d:91:1d:fe:
                    55:6d:3a:7c:6a:a1:09:97:e6:22:ee:e0:19:82:e4:
                    62:f3:6d:87:bb:65:1d:19:72:8a:ee:dd:a8:ad:06:
                    d2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:51:E1:37:2A:2A:F3:9E:06:48:43:F3:73:AE:6E:0C:28:7D:4A:FD
            X509v3 Authority Key Identifier:
                keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:98:88:a4:92:06:da:1c:42:5a:87:bd:89:f3:8b:ed:dc:
         19:1b:3a:04:4a:08:f7:4b:ca:bb:6c:76:c8:1a:a3:16:15:27:
         a3:26:e2:bc:68:0b:19:dc:34:09:52:dd:32:41:d3:64:16:6f:
         4c:6d:58:f9:84:ce:f3:3d:7f:65:cb:eb:d8:44:57:1b:2d:19:
         69:b3:c3:c3:8a:dc:69:26:8c:db:f7:70:10:97:d8:3c:7e:d9:
         72:39:65:13:7b:67:2b:3a:a5:ce:48:d3:21:b9:bd:43:26:55:
         9e:b2:2e:70:8f:d3:69:9f:22:62:75:75:56:31:d5:6c:79:16:
         0b:6b:f9:e3:60:72:f5:cc:21:e4:48:3d:09:c8:84:1f:1d:22:
         5b:af:fa:09:19:5e:60:ca:a8:cd:9d:18:33:61:25:51:1c:ce:
         bf:cb:ab:e2:19:d1:1a:ba:98:2d:39:f0:bc:58:48:fb:56:31:
         74:b6:31:00:76:ad:be:ae:eb:c9:b2:27:a1:92:22:51:80:32:
         50:4c:eb:bf:fb:e2:18:af:38:dd:ca:4e:27:3b:1c:3d:f7:4d:
         de:90:4c:74:f5:96:1e:63:7f:4c:3d:96:16:45:a0:44:08:37:
         df:cb:85:76:8a:d8:3c:4e:6d:9a:f7:66:65:84:6b:fd:4d:ff:
         73:71:3d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:36:23 2026 by rpki-client