Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File:                     1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier:          yT7lUVvv3MWI37dTFC5OplF+S/wfwBZNQ8I3ee3aXw8=
Subject key identifier:   75:A1:25:65:80:26:0E:58:87:B8:F0:D0:BF:9F:AB:78:54:AC:47:B0
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer:       /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial:       0BCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number:          0BC0
Signing time:             Sun 04 Oct 2026 19:04:59 +0000
Manifest this update:     Sun 04 Oct 2026 19:04:59 +0000
Manifest next update:     Sun 11 Oct 2026 19:04:59 +0000
Files and hashes:         1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: UJcJgB9WfIT4aTtigYTIfJb5gzk6WwPlnkdDC3vm+oQ=)
                          2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: HwZqMM9CCAKrNJ/ljMcsv3VZ0uDCep1MPwtiH6UgXOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
                          rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3018 (0xbca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
        Validity
            Not Before: Oct  4 19:04:59 2026 GMT
            Not After : Oct 11 19:04:59 2026 GMT
        Subject: CN=6ac2a35b-97dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:06:61:cf:d1:4d:39:32:b5:7d:d3:84:ba:
                    48:89:2b:4f:e1:ca:71:94:93:3b:ca:61:f6:aa:17:
                    a5:32:62:cc:dd:b8:bf:13:b2:84:53:2d:d4:a5:15:
                    a9:45:e6:cc:ac:01:3b:d1:5a:0c:d8:06:ee:88:5f:
                    33:e8:49:dd:77:cb:ce:95:45:49:3f:f3:34:fd:a0:
                    7c:00:14:0c:11:21:8f:b3:32:50:68:a0:33:64:e2:
                    ae:53:c2:cb:72:5c:5a:3e:87:d5:4d:1e:39:23:e3:
                    23:70:bd:78:82:0c:da:3e:65:9c:2e:e1:e4:08:a8:
                    b5:06:db:9b:52:0a:9c:fb:99:7c:10:cd:00:a6:74:
                    92:5b:b4:70:c1:99:25:ef:fe:fe:bb:5d:b3:e0:c6:
                    17:80:24:c6:f3:2e:a1:32:84:9e:1f:d2:f5:f4:a8:
                    0a:80:1f:df:73:1b:41:59:18:6f:0b:ab:02:cc:60:
                    98:13:50:61:73:ab:72:25:c9:d2:0d:58:15:df:01:
                    f4:2f:10:04:b9:c1:f4:2f:dc:42:9e:3b:2b:0c:b7:
                    c3:a8:8d:46:95:5c:33:a8:83:c4:cc:5b:26:f3:8e:
                    33:00:d5:c2:d9:c8:ac:09:41:2a:e9:d6:6c:33:33:
                    47:4d:3a:84:71:3c:75:ea:2e:73:eb:f9:38:d9:28:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A1:25:65:80:26:0E:58:87:B8:F0:D0:BF:9F:AB:78:54:AC:47:B0
            X509v3 Authority Key Identifier:
                keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ef:bc:52:1c:6f:5b:84:04:cc:f0:67:dc:53:8e:3c:b7:a5:
         e0:70:f5:f5:90:82:63:f8:c7:61:1f:60:41:27:c7:74:f4:bf:
         e1:01:32:a0:47:c9:69:bb:22:f8:a2:46:ed:8e:1f:ed:1f:51:
         9b:19:ff:45:6d:e1:11:0f:12:3d:3e:6d:38:9d:6b:24:96:af:
         1c:4a:27:84:b2:6e:f6:62:fa:79:60:78:34:d3:43:7d:21:5c:
         bb:15:d1:cd:10:3c:17:10:12:a0:2f:d6:8a:92:6c:e2:a4:ef:
         9b:35:7d:68:ef:b4:7a:19:a9:2c:a9:b4:85:78:4a:c9:4c:7d:
         15:13:e6:65:0b:43:e2:d0:84:7c:9c:3e:f6:de:91:c9:73:95:
         fd:32:ef:fd:68:e3:67:98:0e:a1:f1:57:b4:3f:76:15:dc:cb:
         9e:f4:3c:07:91:f1:98:67:70:17:a2:cf:64:06:c5:d1:7a:d9:
         89:66:9c:fe:08:12:07:70:c3:f5:ca:22:08:84:d3:02:99:ef:
         5d:8e:f3:39:78:98:c9:3e:ee:74:67:89:1e:d0:da:a5:35:94:
         fe:bf:ea:d1:d0:86:91:b0:82:09:ec:29:ba:93:6b:ff:94:b1:
         3a:e7:a9:33:cc:ab:8c:75:52:86:b4:8e:ac:e9:f9:ab:53:5a:
         bf:d4:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:39:16 2026 by rpki-client