Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
File:                     1lqglKUeKDl1O1khC2zyxUkVwB4.mft (raw, json)
Hash identifier:          qu7AXOZv3HEqog5C/KmHL48UPo6FVO20DsjsJeGtH2E=
Subject key identifier:   BD:B5:33:45:C0:55:D6:C3:4F:3C:A3:2C:54:10:6F:1E:38:FC:A4:FB
Authority key identifier: D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E
Certificate issuer:       /CN=A915C1AA/serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
Certificate serial:       0ADE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
Manifest number:          0AD4
Signing time:             Fri 02 Oct 2026 19:40:14 +0000
Manifest this update:     Fri 02 Oct 2026 19:40:13 +0000
Manifest next update:     Fri 09 Oct 2026 19:40:13 +0000
Files and hashes:         1: 1lqglKUeKDl1O1khC2zyxUkVwB4.crl (hash: 00O+mU+HFWkEHCk1PuB0W9FZDlKOQCtv4I91LDqKtBg=)
                          2: 220853047F2211EA8E730F35C4F9AE02.roa (hash: 7CmN4Uwz4KunDjXjABX/+wH9LiNgYUi6h/chFNKyFxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl
                          rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2782 (0xade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1AA, serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
        Validity
            Not Before: Oct  2 19:40:13 2026 GMT
            Not After : Oct  9 19:40:13 2026 GMT
        Subject: CN=6ac0089d-51cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:1d:07:93:41:a5:b3:10:69:25:14:b3:1f:
                    a9:03:5f:c6:e7:bb:4f:c3:15:07:e1:3c:66:92:31:
                    0d:27:2d:42:78:ac:d0:30:ef:0f:01:61:07:ab:51:
                    bf:22:6c:72:fe:6e:21:fb:bf:f2:81:a6:84:9b:b7:
                    f2:8e:d2:d7:96:08:d1:b6:02:17:db:db:89:52:29:
                    7b:6b:9a:03:33:ad:b1:76:b5:f6:71:1c:16:e3:33:
                    5e:00:eb:59:c7:9b:6b:b5:57:0d:d3:74:9e:71:d9:
                    30:58:1a:6d:59:35:6e:2d:3d:63:34:5c:ca:08:83:
                    7f:61:3d:42:ea:29:2a:b0:da:81:a4:1f:57:96:49:
                    91:e3:8e:dc:6a:e2:01:d2:9e:42:0f:88:d6:0d:6b:
                    ed:3f:b6:e5:85:ad:8e:61:fe:67:13:bd:9e:d6:d3:
                    2c:17:00:ca:63:ed:89:5b:81:13:aa:a2:b1:e1:3e:
                    5b:50:29:5b:46:3d:c8:26:4e:b4:d5:70:66:a5:c9:
                    74:6e:02:33:37:92:2c:60:e9:c3:c7:36:cb:79:fc:
                    d6:e8:d5:92:f3:91:31:35:0e:6d:47:6f:b4:85:21:
                    68:46:3a:b8:cc:a0:7e:dc:93:bd:0d:0d:42:cd:f4:
                    57:55:4c:2e:b8:f1:b9:19:2f:5a:33:4b:31:5c:2f:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B5:33:45:C0:55:D6:C3:4F:3C:A3:2C:54:10:6F:1E:38:FC:A4:FB
            X509v3 Authority Key Identifier:
                keyid:D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0c:0c:dc:60:a6:a4:9d:a0:a9:38:bc:07:da:a8:6c:69:63:
         12:c5:03:8d:0d:2a:e0:30:97:c4:d3:a1:89:15:17:40:54:d5:
         5c:8f:e1:8e:b8:0f:1c:25:01:2f:2b:b1:db:a7:73:52:da:bf:
         5b:b6:b7:95:10:8f:00:09:67:79:75:50:6c:3c:b5:af:64:79:
         91:87:a0:20:41:37:cb:cc:92:d3:16:6a:e3:4b:81:92:74:10:
         78:9f:7b:91:ac:ad:38:22:78:b1:59:19:1b:c8:04:22:16:9a:
         de:10:5c:1f:84:7c:ad:f4:ee:52:e5:62:47:74:df:71:04:08:
         7f:af:b5:bb:a0:68:46:4c:d0:7b:5a:6e:b5:08:a5:27:f8:2b:
         ac:52:73:49:52:fd:85:4c:66:84:02:67:6e:48:e4:35:de:6c:
         b4:b3:9b:10:b5:6d:d1:36:25:cc:af:bc:8a:e1:9c:09:ad:8c:
         0e:29:53:9d:39:f4:d9:65:8a:7e:77:43:e9:82:99:f0:c4:28:
         31:a7:0b:26:9f:2d:c8:71:b0:ff:52:10:b3:35:f1:45:ee:ad:
         dc:eb:f9:df:f2:36:0c:65:1e:1a:d4:ee:6b:dc:f0:0a:0f:a5:
         6a:7e:5b:57:68:1f:c3:dd:45:62:49:69:74:d5:54:0d:e2:aa:
         66:da:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:10:21 2026 by rpki-client