Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
File:                     f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json)
Hash identifier:          xr/kPPFNNkwEQaMQlynH+KZ2C1RIUZE/FODWlCgx03I=
Subject key identifier:   8C:67:D9:77:DD:4A:07:CC:9A:72:CA:3C:6A:09:66:95:65:A0:CB:07
Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7
Certificate issuer:       /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
Certificate serial:       11C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
Manifest number:          11AE
Signing time:             Sun 04 Oct 2026 17:12:50 +0000
Manifest this update:     Sun 04 Oct 2026 17:12:50 +0000
Manifest next update:     Sun 11 Oct 2026 17:12:50 +0000
Files and hashes:         1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: 5KwoPWgVDlGXSNppTbmF7FZ6VN1dOlIaUAv2YkxG/DA=)
                          2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: 3Xi7wtEGd4JYA4AAv2yv0nPxB/PtZ4h9SU2C5rJNJXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl
                          rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4546 (0x11c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
        Validity
            Not Before: Oct  4 17:12:50 2026 GMT
            Not After : Oct 11 17:12:50 2026 GMT
        Subject: CN=6ac28912-c91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:78:a6:41:a5:a1:54:c9:e4:50:8d:ac:75:
                    9f:c6:e4:18:97:15:e2:75:86:d6:0f:12:d3:de:8d:
                    23:88:77:79:50:0f:e9:a4:eb:59:64:4b:07:dc:65:
                    be:eb:9a:44:c8:94:58:fb:f4:78:a1:9b:9c:12:dd:
                    8b:cd:7f:03:1b:63:18:32:1a:a5:97:2e:59:5a:fa:
                    c4:bb:28:e9:c8:40:de:dc:af:f2:f1:79:e6:af:ef:
                    30:92:bc:cc:1e:25:b8:aa:7f:2c:ec:d5:45:16:f2:
                    17:db:37:84:de:81:d8:b3:04:77:59:96:51:fe:4c:
                    c5:22:97:d6:6a:ea:38:b9:99:83:cc:f5:56:15:6f:
                    52:78:50:d2:b2:e2:78:b3:ff:0d:32:a1:d0:ae:81:
                    2a:2b:d9:df:ec:59:0f:40:24:e9:fe:ef:ca:e3:4e:
                    97:d8:b5:e6:d9:e5:b9:36:96:32:28:91:8a:95:5a:
                    a5:7a:4e:d9:0b:86:64:1b:fc:a5:ec:8a:ff:f8:f6:
                    9d:08:d3:e0:31:d3:5c:5f:b3:48:53:5e:15:e4:ce:
                    3f:93:b5:32:27:6d:b6:28:32:85:5d:00:be:33:ea:
                    44:29:a0:a5:13:37:03:96:66:db:f5:22:93:2b:4c:
                    58:09:66:29:e4:8e:00:93:cb:ff:96:29:79:f9:13:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:67:D9:77:DD:4A:07:CC:9A:72:CA:3C:6A:09:66:95:65:A0:CB:07
            X509v3 Authority Key Identifier:
                keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e8:d1:5f:03:9e:8e:19:7c:82:04:64:ef:e3:8a:7d:27:72:
         7e:de:94:38:1e:03:b2:8e:8e:4e:ef:a8:ab:af:41:57:0a:c9:
         ef:b2:49:ce:22:ff:c0:fe:8c:af:0e:40:27:a3:c7:cb:a7:56:
         ef:d1:dc:3a:b3:f4:4b:ac:9a:49:84:ed:f4:13:9f:67:73:ef:
         74:7c:fb:13:b5:73:72:22:13:ff:02:e7:87:e0:a8:60:3f:d6:
         9f:b6:d9:4c:b3:e0:54:be:ec:30:8a:b3:c3:87:9c:54:08:0d:
         7a:8f:dc:5f:4a:9c:54:72:f6:74:3d:21:86:2b:4c:e6:48:f2:
         c4:25:5d:ae:3c:a5:3a:74:1e:05:4b:f6:96:00:aa:2f:98:0b:
         29:ec:03:06:18:60:cd:a6:21:8a:d0:0a:9c:fa:21:e8:20:55:
         e2:00:8f:c3:4a:bb:76:64:62:3d:34:50:cf:fe:d7:42:35:58:
         e9:62:99:4d:be:d0:00:5f:fb:80:8f:c5:63:34:fc:f1:6b:f8:
         da:ea:3b:bc:2a:d7:61:5e:b1:be:a1:ca:81:00:56:06:f0:68:
         33:9a:26:7f:ee:d8:5c:d0:26:77:a7:e2:e3:3a:24:43:e3:c8:
         49:69:28:33:c5:6f:4a:05:56:ef:f3:bf:56:70:e0:d1:78:e5:
         36:88:82:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:03:37 2026 by rpki-client