Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
File:                     L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json)
Hash identifier:          xoZ0L7QkktZsdKkaD+0SnnFUqYOYAv9II0ZqcR3tn+8=
Subject key identifier:   33:04:09:2D:FA:1E:9C:41:1A:83:76:3F:2F:01:A9:4D:F8:58:40:D8
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Certificate issuer:       /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
Manifest number:          0117
Signing time:             Fri 09 Oct 2026 06:35:02 +0000
Manifest this update:     Fri 09 Oct 2026 06:35:01 +0000
Manifest next update:     Fri 16 Oct 2026 06:35:01 +0000
Files and hashes:         1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: wV2fRy2KIi2/kZJZJ2X1glPiuNmM+xLZvLjFfe2tf64=)
                          2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: ETq/ueZ+moHz6omb3XVGSrkGJeYMxT06+9CG44Ybvps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
                          rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
        Validity
            Not Before: Oct  9 06:35:01 2026 GMT
            Not After : Oct 16 06:35:01 2026 GMT
        Subject: CN=6ac88b16-45a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:7a:d8:bb:00:a8:b8:6c:42:64:5f:dd:f6:
                    9b:31:4c:95:75:df:e0:d9:95:bb:b7:1b:4c:28:c2:
                    96:12:4c:0b:99:83:57:8a:91:49:23:af:0b:43:56:
                    01:7b:c9:86:52:2f:b2:7a:6c:b9:40:e2:69:48:50:
                    2d:f5:d8:6e:22:3a:41:15:bd:b1:2f:a9:d8:44:21:
                    c3:9b:b4:ec:1e:e6:a3:8a:1e:08:d0:0b:80:5c:e8:
                    67:5d:59:6d:23:61:1d:10:46:47:0b:4c:38:23:25:
                    40:2a:ae:5d:2e:57:0f:a1:40:ba:28:08:03:99:d3:
                    a8:05:14:31:c4:68:58:04:97:00:5b:68:ec:28:34:
                    a0:69:2d:5d:a2:67:2c:86:59:19:7f:e8:8d:c5:14:
                    4c:6a:5d:81:41:8c:71:62:3a:6b:41:91:e0:d5:53:
                    12:0f:01:f4:43:c2:80:e0:8d:1d:9e:84:a5:5b:ab:
                    14:46:b2:13:c1:75:2e:95:ca:34:55:db:f1:7a:72:
                    be:e7:1e:e4:ae:13:4b:38:aa:35:b7:eb:39:57:2a:
                    1c:a0:75:df:dd:cc:26:a4:e8:df:0f:e7:dc:0b:0a:
                    b6:5e:f6:ab:1d:1e:ca:5b:12:f8:61:66:25:fa:3a:
                    47:34:0e:23:f0:f1:09:9d:4a:2f:76:06:ae:21:6f:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:04:09:2D:FA:1E:9C:41:1A:83:76:3F:2F:01:A9:4D:F8:58:40:D8
            X509v3 Authority Key Identifier:
                keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ea:23:00:4b:de:1b:7d:52:ad:70:f7:e9:ef:f8:a3:c7:87:
         e9:17:19:35:41:14:19:11:54:4b:71:0c:c4:c6:e0:ee:4e:a2:
         7d:68:2f:92:af:48:28:12:7e:07:6a:23:76:8f:0b:40:83:16:
         1f:3c:ef:cb:3d:7a:5c:b0:df:4d:9b:c5:80:56:ee:57:c0:28:
         2e:66:60:2d:f7:c6:e9:ca:10:11:5a:f2:05:cd:9f:87:a2:5b:
         bd:e2:66:c1:d0:71:8d:64:63:bb:a8:dc:76:4e:a2:86:db:5e:
         78:a4:e5:b4:e4:7a:7f:46:9a:06:5a:1e:6b:f1:25:58:1e:48:
         3a:fd:78:e7:04:06:9a:a3:87:fc:a6:32:39:f6:9b:e4:93:1f:
         c4:31:32:56:b1:23:96:9e:4c:b6:ea:28:cc:d4:02:5d:05:b2:
         79:a9:4f:55:c6:93:2e:2e:ac:b7:30:8a:7b:3f:ac:17:65:de:
         bb:de:bb:d0:6d:25:41:ab:25:b7:3a:39:65:25:0e:a2:fd:1b:
         46:9b:d7:72:73:90:96:ad:bb:4e:3a:7e:50:3c:dd:17:11:73:
         a9:c0:b6:91:3a:ae:1a:e3:e5:07:3c:35:ff:75:f0:3d:8b:0b:
         40:a2:bc:e9:9a:75:ba:fb:0c:57:6d:af:f2:bf:a5:fb:66:0d:
         49:bc:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:33:51 2026 by rpki-client