Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
File:                     up0lGkqfrMTkpmOHdQooZioxAFc.mft (raw, json)
Hash identifier:          j5QLnc7v6ZatOJLHtHqeyp5G4DhCQIWIPer/taaWoxc=
Subject key identifier:   90:85:EA:F7:06:16:0B:1C:DE:1B:C8:5D:80:A9:BF:50:1A:8B:BB:56
Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57
Certificate issuer:       /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057
Certificate serial:       35B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
Manifest number:          359D
Signing time:             Tue 06 Oct 2026 14:46:30 +0000
Manifest this update:     Tue 06 Oct 2026 14:46:30 +0000
Manifest next update:     Tue 13 Oct 2026 14:46:30 +0000
Files and hashes:         1: up0lGkqfrMTkpmOHdQooZioxAFc.crl (hash: WPfUk/sxvdRfinltwGQMp6Kop+lx4InnivohaO98+ls=)
                          2: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (hash: lss52Vk6s5NKAwPIvixoGZCUFwCH6PpKUZ3T9cQ0amo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl
                          rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13748 (0x35b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057
        Validity
            Not Before: Oct  6 14:46:30 2026 GMT
            Not After : Oct 13 14:46:30 2026 GMT
        Subject: CN=6ac509c6-4ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:13:1d:4d:8e:a2:5c:d2:3f:ba:ef:f3:a1:9f:
                    38:f6:41:86:c5:42:26:d9:4e:22:c5:af:80:f2:85:
                    be:36:a7:b8:e4:ad:cf:d7:7c:2b:5b:9f:9c:a6:9a:
                    0a:85:5f:9a:0e:bf:29:78:79:24:6e:8e:9d:d2:bb:
                    e3:c0:de:91:cc:5c:9d:67:54:ce:9d:f1:40:f7:41:
                    3b:36:c2:62:ca:0e:57:5d:36:ea:34:3d:3d:e1:b3:
                    d2:bf:94:22:9a:5b:76:ad:3f:6d:09:1e:10:0a:8f:
                    42:d9:fe:6a:df:80:2b:3a:d8:84:57:8f:f1:0d:7c:
                    ba:c4:66:76:22:7e:38:f1:6a:9e:16:f7:9d:b6:8a:
                    51:0f:d0:97:50:27:a8:a4:21:89:53:41:b9:d8:c2:
                    cd:73:42:10:c4:e7:bb:0d:ec:d1:54:5f:e5:85:cf:
                    56:84:20:d0:05:b7:df:d3:df:58:33:5b:91:d6:5a:
                    71:54:29:6f:0b:ca:a9:25:b6:50:2f:99:69:df:75:
                    d1:5e:7a:93:99:f5:d5:e4:55:b2:9e:70:cd:34:ff:
                    10:9f:80:f2:59:f2:29:7d:db:bb:06:e1:36:40:e7:
                    05:99:85:6f:c9:e1:88:c4:27:ea:f1:a0:cf:c7:c7:
                    5b:75:24:6b:50:97:82:20:5a:46:c2:26:6c:39:d6:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:85:EA:F7:06:16:0B:1C:DE:1B:C8:5D:80:A9:BF:50:1A:8B:BB:56
            X509v3 Authority Key Identifier:
                keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e4:35:ca:a9:10:47:84:4a:24:ab:20:53:d9:68:7b:f3:ca:
         65:e2:4e:e0:4f:e0:58:df:06:aa:2a:f7:9e:a9:3b:4b:11:13:
         37:92:56:0b:be:a9:12:b6:8a:a5:02:33:f3:90:73:2f:90:7b:
         65:8e:81:02:ce:0d:25:90:b9:7e:1c:fd:20:80:b5:a5:64:83:
         07:de:b8:e3:40:b5:60:65:e7:5e:ca:fd:0f:76:d1:d3:e7:d3:
         16:3f:5f:75:23:ef:cd:8c:bc:a5:0f:19:e2:46:ae:40:9e:fe:
         8b:74:4e:78:49:44:56:90:d0:f4:0a:17:53:70:ab:ad:5b:df:
         88:a4:19:14:3b:3d:eb:d5:15:10:7e:e1:b3:95:36:5a:3e:3e:
         a6:42:76:5b:2d:6c:a1:71:57:c5:ef:7b:85:49:b7:64:fa:7d:
         8c:42:13:1f:bf:5d:2d:8a:b6:db:71:0f:ee:5a:aa:5b:30:ca:
         99:87:4e:5a:42:2e:86:2e:e5:e2:42:27:52:e0:73:67:51:bd:
         1f:95:d9:ff:d4:c3:e1:7e:27:02:2f:bf:76:62:bd:ac:bd:7c:
         ef:de:70:e2:b7:81:d5:bd:cb:95:32:09:5a:20:38:54:e8:8d:
         8c:33:b7:bd:84:a0:bf:83:7b:c8:ad:0e:da:cc:d2:4a:d7:01:
         3a:96:27:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1ODExMTAvBgNVBAUTKEJBOUQyNTFBNEE5RkFDQzRFNEE2NjM4Nzc1MEEyODY2
MkEzMTAwNTcwHhcNMjYxMDA2MTQ0NjMwWhcNMjYxMDEzMTQ0NjMwWjAYMRYwFAYD
VQQDEw02YWM1MDljNi00YWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBMdTY6iXNI/uu/zoZ849kGGxUIm2U4ixa+A8oW+Nqe45K3P13wrW5+cppoK
hV+aDr8peHkkbo6d0rvjwN6RzFydZ1TOnfFA90E7NsJiyg5XXTbqND094bPSv5Qi
mlt2rT9tCR4QCo9C2f5q34ArOtiEV4/xDXy6xGZ2In448WqeFvedtopRD9CXUCeo
pCGJU0G52MLNc0IQxOe7DezRVF/lhc9WhCDQBbff099YM1uR1lpxVClvC8qpJbZQ
L5lp33XRXnqTmfXV5FWynnDNNP8Qn4DyWfIpfdu7BuE2QOcFmYVvyeGIxCfq8aDP
x8dbdSRrUJeCIFpGwiZsOdb4XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCF6vcG
Fgsc3hvIXYCpv1Aai7tWMB8GA1UdIwQYMBaAFLqdJRpKn6zE5KZjh3UKKGYqMQBX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU4MS9CQjhGREZGRTFE
OTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJNVGtwbU9IZFFvb1ppb3hB
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VwMGxHa3Fmck1Ua3BtT0hkUW9vWmlveEFGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjU4MS9CQjhGREZGRTFEOTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJN
VGtwbU9IZFFvb1ppb3hBRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApOQ1yqkQR4RKJKsgU9loe/PKZeJO4E/gWN8Gqir3nqk7SxETN5JWC76pEraK
pQIz85BzL5B7ZY6BAs4NJZC5fhz9IIC1pWSDB96440C1YGXnXsr9D3bR0+fTFj9f
dSPvzYy8pQ8Z4kauQJ7+i3ROeElEVpDQ9AoXU3CrrVvfiKQZFDs969UVEH7hs5U2
Wj4+pkJ2Wy1soXFXxe97hUm3ZPp9jEITH79dLYq223EP7lqqWzDKmYdOWkIuhi7l
4kInUuBzZ1G9H5XZ/9TD4X4nAi+/dmK9rL18795w4reB1b3LlTIJWiA4VOiNjDO3
vYSgv4N7yK0O2szSStcBOpYnnw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:41:41 2026 by rpki-client