Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
File:                     fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json)
Hash identifier:          HA0rXA3emmmfHz6gPOrFlSAHVqBGhIwMHJeO6AaXsgg=
Subject key identifier:   04:87:C6:99:05:FF:DB:FD:C9:18:EB:CB:6B:1A:0B:0B:67:87:33:FA
Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82
Certificate issuer:       /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
Certificate serial:       0D53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
Manifest number:          0D48
Signing time:             Sun 04 Oct 2026 18:09:36 +0000
Manifest this update:     Sun 04 Oct 2026 18:09:35 +0000
Manifest next update:     Sun 11 Oct 2026 18:09:35 +0000
Files and hashes:         1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: LRYWfK5mkp6lmZ0lvIr+5PDdQG7k7oZ5aJdp0geWpcA=)
                          2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: NvhlXYswaCkDrQcUogSejm7AhVdKU/aQPJOILHNuqlk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl
                          rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3411 (0xd53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
        Validity
            Not Before: Oct  4 18:09:35 2026 GMT
            Not After : Oct 11 18:09:35 2026 GMT
        Subject: CN=6ac2965f-235f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:8b:5b:0f:61:88:a9:d7:95:8a:54:6c:78:
                    48:56:da:56:14:a6:ee:9a:bb:61:6b:68:75:50:c4:
                    01:d0:7b:a4:2c:69:b0:2f:c0:f5:05:fc:33:a3:c5:
                    04:e3:a0:d2:b1:e4:de:7f:f2:04:3e:48:eb:69:e1:
                    e1:f0:6a:d9:dc:f0:57:98:a8:b4:55:f0:66:a6:bb:
                    a0:a7:32:f2:4d:af:65:ee:45:89:28:37:d4:86:65:
                    5c:8f:12:79:07:0a:34:9e:7e:fa:2d:95:ee:30:4f:
                    ab:9c:60:66:ed:c4:5b:bb:4f:c3:0d:5c:35:e4:4d:
                    6a:0d:5c:6d:36:5f:f6:76:ee:34:82:ea:c7:86:b8:
                    1d:4f:bc:48:5f:92:e9:27:fb:55:b4:a0:f3:54:76:
                    e3:72:0b:d8:9d:93:2e:45:9c:cf:fd:ad:75:4c:ca:
                    c0:48:40:d6:22:7a:fa:9c:51:69:ea:b7:12:9e:bf:
                    46:d3:bb:b8:77:cb:d5:da:38:bd:72:93:8a:10:e3:
                    0c:b2:69:a2:95:ee:25:db:99:c8:f1:e5:47:34:18:
                    40:35:d6:16:9e:fb:0b:91:7a:c5:b6:10:4c:ff:e5:
                    e3:05:d5:40:78:a1:83:a5:29:da:94:31:21:10:bb:
                    8f:4d:c0:ec:f4:3d:0f:8c:3e:21:8d:9e:39:6c:c7:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:87:C6:99:05:FF:DB:FD:C9:18:EB:CB:6B:1A:0B:0B:67:87:33:FA
            X509v3 Authority Key Identifier:
                keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b8:66:f1:f6:2b:0d:b9:57:80:cc:94:04:2a:48:f9:ee:3f:
         65:f2:01:ba:e6:b4:76:db:34:d8:36:5f:f2:d8:5e:e6:80:07:
         4b:30:79:e7:3e:c3:14:ba:1e:c4:d0:00:f0:f6:50:c1:ff:ef:
         12:7f:7a:c1:77:dd:0e:8b:57:25:cf:2e:60:0d:63:ba:54:16:
         d3:e4:da:94:bb:68:9b:17:c3:2c:33:9a:8e:52:15:85:e2:06:
         b7:aa:28:b8:8a:ca:7d:da:98:7e:e8:86:82:ee:fb:ba:6d:ac:
         c9:07:d9:68:85:5e:9a:c8:ea:b5:35:cb:c7:0b:a2:90:7b:c8:
         3e:0a:47:68:f9:66:1e:66:91:22:d7:cb:43:bd:6a:5b:58:75:
         5b:1f:9a:5b:86:c0:a8:b2:fb:7c:f4:4a:8e:35:ab:df:4e:95:
         72:9d:3d:97:b2:7c:4e:16:0c:cf:82:6e:d3:bf:5d:10:a9:d8:
         af:7d:18:72:c1:07:b4:6e:75:ec:95:93:ab:64:23:72:5a:e0:
         f1:b0:26:1f:62:b2:5b:5d:61:ed:58:4c:a7:5b:37:82:eb:55:
         f6:c3:24:3e:e4:c3:5b:81:51:c9:13:81:eb:be:dd:43:59:b8:
         6c:43:14:52:18:2a:a9:dd:ab:0e:81:99:50:b0:7b:9f:33:7a:
         96:64:6e:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1OTgxMTAvBgNVBAUTKDdEQzQ2MkFGM0U2Mjc4QTgyMTg5MDVBMUIzRTdEQjM3
RjJFRjdBODIwHhcNMjYxMDA0MTgwOTM1WhcNMjYxMDExMTgwOTM1WjAYMRYwFAYD
VQQDEw02YWMyOTY1Zi0yMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAocCLWw9hiKnXlYpUbHhIVtpWFKbumrtha2h1UMQB0HukLGmwL8D1Bfwzo8UE
46DSseTef/IEPkjraeHh8GrZ3PBXmKi0VfBmprugpzLyTa9l7kWJKDfUhmVcjxJ5
Bwo0nn76LZXuME+rnGBm7cRbu0/DDVw15E1qDVxtNl/2du40gurHhrgdT7xIX5Lp
J/tVtKDzVHbjcgvYnZMuRZzP/a11TMrASEDWInr6nFFp6rcSnr9G07u4d8vV2ji9
cpOKEOMMsmmile4l25nI8eVHNBhANdYWnvsLkXrFthBM/+XjBdVAeKGDpSnalDEh
ELuPTcDs9D0PjD4hjZ45bMclQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASHxpkF
/9v9yRjry2saCwtnhzP6MB8GA1UdIwQYMBaAFH3EYq8+YnioIYkFobPn2zfy73qC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU5OC84MTJDRTlENDA0
NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVLZ2hpUVdocy1mYk5fTHZl
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZjUmlyejVpZUtnaGlRV2hzLWZiTl9MdmVvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjU5OC84MTJDRTlENDA0NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVL
Z2hpUVdocy1mYk5fTHZlb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABrhm8fYrDblXgMyUBCpI+e4/ZfIBuua0dts02DZf8the5oAHSzB55z7DFLoe
xNAA8PZQwf/vEn96wXfdDotXJc8uYA1julQW0+TalLtomxfDLDOajlIVheIGt6oo
uIrKfdqYfuiGgu77um2syQfZaIVemsjqtTXLxwuikHvIPgpHaPlmHmaRItfLQ71q
W1h1Wx+aW4bAqLL7fPRKjjWr306Vcp09l7J8ThYMz4Ju079dEKnYr30YcsEHtG51
7JWTq2Qjclrg8bAmH2KyW11h7VhMp1s3gutV9sMkPuTDW4FRyROB677dQ1m4bEMU
Uhgqqd2rDoGZULB7nzN6lmRugw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 04:01:04 2026 by rpki-client