Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
File:                     DS1vMynFa_bo-UG9_adJbb4lMOU.mft (raw, json)
Hash identifier:          BgG1BlNiwEC+tvZ+o+8IAxtpTuTevSZbmoAPDIc/Hao=
Subject key identifier:   83:A0:6E:1F:3C:67:B9:1F:AF:85:05:57:53:1A:15:03:0C:F7:35:20
Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5
Certificate issuer:       /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
Manifest number:          013A
Signing time:             Sun 11 Oct 2026 06:05:22 +0000
Manifest this update:     Sun 11 Oct 2026 06:05:21 +0000
Manifest next update:     Sun 18 Oct 2026 06:05:21 +0000
Files and hashes:         1: DS1vMynFa_bo-UG9_adJbb4lMOU.crl (hash: eyGhdEKDQEXv77tpQmK0BtDoEdhiC0E6eKeDbj5imp0=)
                          2: 8836D872E37B11EFB4D75458C4F9AE02.roa (hash: AB3/bfeVD+zx9JPQDfLkzjvvihkm85QjiqRQVWmZktU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
        Validity
            Not Before: Oct 11 06:05:21 2026 GMT
            Not After : Oct 18 06:05:21 2026 GMT
        Subject: CN=6acb2722-25d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:1a:71:b5:65:01:4a:80:02:a5:a5:82:87:
                    79:1f:c2:bd:12:1b:0f:e1:82:00:d8:f2:a7:5c:78:
                    36:d6:b3:f1:db:de:77:4b:e8:f6:72:de:ae:1f:7f:
                    0b:06:e5:db:0c:c1:82:05:91:7e:36:39:5a:dd:2b:
                    57:74:56:89:d8:2a:d5:1a:8a:bb:16:76:68:4b:5b:
                    73:87:e0:fc:04:1a:f1:a4:62:d5:02:e0:d3:86:a5:
                    2d:62:45:4c:ae:83:56:62:b4:81:7d:c2:c1:87:02:
                    d2:52:52:ed:34:19:ab:86:39:56:e5:9e:43:bc:d5:
                    f0:65:d7:b2:1d:a3:ee:2d:f3:69:37:0e:08:a7:cd:
                    47:f6:f3:c7:3c:c4:a5:52:ea:4d:03:bc:1d:6e:2d:
                    d0:c4:6f:cd:85:4d:f0:31:14:f8:fe:94:b8:ec:5b:
                    dd:da:85:01:38:32:70:7d:05:5d:f2:e2:8b:2f:cb:
                    f1:b0:95:fb:90:91:d6:f7:be:7f:dc:6e:38:de:b3:
                    33:39:0f:75:44:d7:44:0c:52:c5:a2:e9:51:3b:56:
                    a9:49:99:14:16:3d:28:a4:5c:f5:ce:2a:88:f1:7c:
                    eb:4e:38:b7:dd:93:ec:d7:07:0a:de:41:85:0b:61:
                    4a:bd:6c:55:25:bc:2f:8d:a6:19:c4:b3:8e:aa:0f:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:6E:1F:3C:67:B9:1F:AF:85:05:57:53:1A:15:03:0C:F7:35:20
            X509v3 Authority Key Identifier:
                keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7e:fe:a6:4b:ee:39:79:4f:a2:14:e4:06:a9:e6:c7:53:82:
         15:d9:2e:69:b3:cb:a5:df:b4:d7:af:80:67:95:5b:be:17:ee:
         dc:08:da:aa:e0:a4:7f:94:cc:ef:33:1e:8d:40:d4:2e:74:1e:
         4f:07:cd:e5:48:20:1c:16:e1:0d:c4:5c:44:02:d9:1b:da:7e:
         5f:f0:36:71:60:cc:04:d4:b8:dc:92:3b:c4:1c:2c:4e:26:89:
         f1:48:1e:fd:c5:62:96:7e:73:65:10:a0:a3:e9:d5:2d:13:a2:
         c6:de:3f:1f:f5:f8:6c:68:4f:2a:d3:65:be:03:8f:be:74:0d:
         22:cd:78:ac:11:b0:08:95:c8:0b:cf:0b:b8:d2:11:5e:d2:9d:
         ca:e1:61:06:cd:4b:2e:ac:ad:2a:77:5b:b0:18:5f:ba:2a:3d:
         bf:27:a2:28:a1:99:81:11:7a:ec:cb:06:55:ea:71:e0:5c:64:
         d8:06:1d:5d:9c:97:a6:d0:de:a1:8c:b0:4a:8d:29:9c:d2:bd:
         4a:f1:81:bd:80:97:e6:ee:16:e3:40:5f:a2:95:80:7f:c2:00:
         0a:87:ae:69:73:bd:f5:94:bb:09:d9:6e:4a:c3:1a:4d:36:0c:
         be:f9:22:c5:d8:69:59:6c:57:11:5e:eb:04:93:da:eb:61:6e:
         4b:68:9b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:25:47 2026 by rpki-client