Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File:                     4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier:          OqnISORtDC/mYl1yGXkX3LLmu2VLjCujh2ibY+Raa9E=
Subject key identifier:   86:D2:A8:0D:43:CE:AB:AE:4F:EC:93:DC:C1:7E:7F:E2:F5:FF:38:A6
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer:       /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial:       0E8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number:          0E7C
Signing time:             Thu 22 Oct 2026 17:47:00 +0000
Manifest this update:     Thu 22 Oct 2026 17:46:59 +0000
Manifest next update:     Thu 29 Oct 2026 17:46:59 +0000
Files and hashes:         1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: j8VxNcipbbrQMHdATJtZR1SXy2KqHk1OGCy/quFcIYE=)
                          2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: HnvsHqcmUKW7ahLgN9nvtNlg8GIV2Dhcq2/uEZrWjX4=)
                          3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: bhmnlpYZPEuWaSc0+L7rL2QZ7zRKqGCV4y6eL/DlqEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
                          rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3727 (0xe8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
        Validity
            Not Before: Oct 22 17:46:59 2026 GMT
            Not After : Oct 29 17:46:59 2026 GMT
        Subject: CN=6ada4c13-b162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:b5:7c:7e:22:3f:4a:c5:2e:81:5f:2c:ff:
                    3b:b1:1c:e3:80:5e:ca:7b:ba:fd:d6:e6:13:40:67:
                    66:a8:35:9b:cb:f7:1b:75:fd:86:f6:fe:96:bb:da:
                    52:35:03:23:59:12:fe:b5:ec:2d:9b:a1:51:87:7a:
                    2b:24:a1:09:41:17:86:8c:e3:56:93:7b:07:a1:e1:
                    36:cc:0f:6f:32:1e:e1:77:fd:62:4c:4b:a4:e6:6a:
                    18:cd:56:40:00:75:f1:c4:18:fc:d1:b3:e0:9b:2e:
                    2d:98:52:58:ba:61:e5:63:c0:09:5a:cd:0e:e6:1b:
                    b7:3e:a3:08:ef:b2:4f:a1:64:a8:49:c7:02:7e:c5:
                    ff:dc:ab:bf:0c:2c:63:a3:eb:60:75:4c:89:5d:b3:
                    b2:b5:9a:49:e9:a1:e0:e0:7b:21:96:b8:02:ae:72:
                    e7:e5:15:ef:2a:be:2b:b0:f9:d4:24:c2:29:e4:5e:
                    15:15:41:98:86:68:96:5c:ef:8d:d6:bf:d7:7e:1d:
                    77:3c:a3:97:02:81:7c:a8:33:5f:ad:44:e5:63:f6:
                    30:bb:86:46:dc:c2:16:4a:d0:cb:d2:eb:0a:54:17:
                    b2:26:58:38:fe:75:23:51:c8:01:72:f1:c1:cd:5e:
                    06:d3:b9:0a:78:83:da:39:cc:8b:2c:44:4d:72:a6:
                    ad:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D2:A8:0D:43:CE:AB:AE:4F:EC:93:DC:C1:7E:7F:E2:F5:FF:38:A6
            X509v3 Authority Key Identifier:
                keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a1:41:9a:b1:f1:64:4f:10:2c:9c:36:e7:0e:07:3b:91:51:
         ba:b9:a2:0e:58:3d:94:17:c1:66:25:73:ba:aa:62:36:b4:15:
         91:1e:47:62:a3:ce:33:11:58:e3:24:98:38:75:a2:e8:f2:85:
         67:80:0b:1d:b7:20:67:f9:f1:bb:af:33:c0:b8:28:80:86:3e:
         81:6a:6c:00:48:e1:d7:d0:7d:4f:05:7c:6f:d6:3e:6e:04:05:
         73:ae:e6:c4:11:75:c8:e2:94:e5:06:af:7d:96:58:62:07:f2:
         20:26:9d:5e:e1:10:ef:96:a9:53:46:93:d7:be:96:40:83:1d:
         32:f8:46:33:17:ef:e6:7f:f5:0f:bb:a0:7f:1e:19:21:e0:b8:
         5f:54:8a:53:89:6f:27:87:14:b5:0d:cd:4e:7a:8e:9e:76:c2:
         47:6a:79:a3:07:f7:15:a8:65:d2:bc:29:03:9c:ca:82:29:ad:
         b2:4b:d5:26:e1:ac:37:f2:60:ed:75:fd:6d:a2:f6:35:e3:c4:
         c6:c9:70:b3:9c:a9:be:37:47:de:1e:a7:34:ea:d8:4c:23:43:
         37:1f:4d:14:5d:c1:b0:f5:21:60:b4:9c:7f:a6:63:f9:08:d5:
         37:df:81:89:a0:f2:b2:c1:db:25:93:16:c9:d3:a1:26:5a:73:
         9c:78:89:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:52:31 2026 by rpki-client