Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
File:                     PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json)
Hash identifier:          uqzDDYiZmhg3ZJYxwjLRhq65ZBs9v2i5mFamxy1Sz7g=
Subject key identifier:   9E:26:2D:40:1C:4C:40:F0:2E:78:B6:9D:96:B8:5D:72:35:11:A6:21
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Certificate issuer:       /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial:       0583
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
Manifest number:          057C
Signing time:             Fri 02 Oct 2026 23:35:44 +0000
Manifest this update:     Fri 02 Oct 2026 23:35:43 +0000
Manifest next update:     Fri 09 Oct 2026 23:35:43 +0000
Files and hashes:         1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: S1jF1Z0T7tlqvtDG2ZY+hMYSnZSu1R794DqG9hfg9po=)
                          2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: T0ns+7x4iK0WmW0k/dhc+1Ohg2P5NWnpBDqsr9+P9R0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
                          rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
        Validity
            Not Before: Oct  2 23:35:43 2026 GMT
            Not After : Oct  9 23:35:43 2026 GMT
        Subject: CN=6ac03fd0-6027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:06:fb:54:a6:18:a5:44:cc:63:92:24:ff:ba:
                    66:2a:df:95:b0:a6:e5:ff:0d:7a:4d:7f:b8:40:46:
                    39:c6:5a:97:2f:6a:c5:1f:c0:c1:c3:31:10:dc:76:
                    35:d1:4a:d7:54:cd:46:2f:e3:d6:8f:ea:2c:fe:9f:
                    a3:1d:3e:19:6a:4f:bc:fa:6f:91:e4:5e:70:8f:e5:
                    75:5c:e8:4d:5c:f6:0f:f3:ea:ee:6f:37:6a:14:05:
                    4c:b6:af:3d:82:a0:78:ba:e2:e9:34:32:b0:b0:05:
                    d9:25:ae:c4:85:1b:0c:c2:e9:bc:d8:e3:c5:e8:b2:
                    15:e8:ac:c6:b7:e3:42:50:7d:e3:d9:e2:90:a9:48:
                    60:b4:5c:b1:db:db:93:20:d0:5e:c9:c9:99:d5:10:
                    a2:7f:ba:4c:55:7e:a8:04:72:94:36:84:68:74:5f:
                    08:5b:da:50:dd:64:be:b2:d2:60:93:48:a3:77:a2:
                    5f:aa:b3:34:40:36:a8:0a:cc:e3:5d:b6:4d:da:49:
                    23:7d:36:7c:2f:91:f1:c8:3a:2f:ca:4a:e9:94:20:
                    17:27:86:cb:c3:19:41:ce:6b:4e:2e:fc:e7:3a:56:
                    a0:23:44:18:ce:62:c0:a6:24:58:49:70:b6:08:98:
                    b9:7e:74:fa:b5:49:bc:5e:b5:78:94:d2:a2:64:75:
                    23:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:26:2D:40:1C:4C:40:F0:2E:78:B6:9D:96:B8:5D:72:35:11:A6:21
            X509v3 Authority Key Identifier:
                keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:04:91:a5:eb:ea:27:f5:70:19:18:b2:1f:f5:b8:fa:14:93:
         a8:f2:25:b0:21:ea:46:cc:6b:25:73:95:8e:b7:a9:52:fd:6c:
         cf:61:a1:06:67:33:d5:f9:f2:88:a7:46:4f:ba:a6:5c:56:3d:
         03:6d:4d:b5:71:95:aa:f9:04:e7:3a:ad:8d:f5:88:4b:5a:63:
         e4:91:10:2b:70:1b:6e:f6:26:3f:53:fa:d3:5f:a6:d3:e4:6d:
         9e:ad:96:1b:8a:ef:d9:8f:04:be:a3:f7:f5:c8:e7:c5:a3:59:
         b3:9f:1a:62:d1:91:d8:8e:04:a3:9f:ef:56:c8:cb:2c:33:4c:
         97:9a:2d:19:79:6d:8c:2c:de:36:d1:51:b0:db:9a:28:50:0f:
         8c:a3:89:1b:27:77:0f:03:f7:1d:1e:62:c8:0e:1c:72:bf:3b:
         63:31:80:21:69:5a:84:01:88:40:22:c0:d3:de:73:7a:cc:a7:
         d6:c0:36:a5:1c:de:6c:89:d6:85:c4:23:7b:8f:69:39:96:c8:
         b7:dc:78:71:f7:28:8e:2e:a2:e2:7f:3d:61:b3:57:b4:eb:6e:
         b2:c3:a3:6f:21:56:ff:7c:09:80:e7:1e:76:5f:36:f2:0f:27:
         3e:23:0d:e6:f1:7f:4e:56:1c:42:73:bd:60:7b:e1:b2:6b:3d:
         24:1e:4d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:59:17 2026 by rpki-client