Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
File:                     hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json)
Hash identifier:          9SIAKfog88cldDnEFg1Y+V6vSVoc6rRRWyqnEiVJAJA=
Subject key identifier:   65:58:4B:6D:BB:11:D1:C5:F0:0C:AA:AF:A9:AB:3F:12:41:6C:B1:A4
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Certificate issuer:       /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
Manifest number:          015F
Signing time:             Wed 07 Oct 2026 05:38:23 +0000
Manifest this update:     Wed 07 Oct 2026 05:38:22 +0000
Manifest next update:     Wed 14 Oct 2026 05:38:22 +0000
Files and hashes:         1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: lmY9px3AlOac0r9ndpaH4xe9mpBtOvWPhyKMrb2Kc0w=)
                          2: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=)
                          3: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=)
                          4: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
                          rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 05:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
        Validity
            Not Before: Oct  7 05:38:22 2026 GMT
            Not After : Oct 14 05:38:22 2026 GMT
        Subject: CN=6ac5dacf-ad80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:a9:1b:b8:e2:13:f6:8e:5f:57:82:ce:e5:
                    40:34:c0:51:40:a0:a8:7d:cf:48:59:24:5d:ad:6d:
                    4b:5f:82:6e:2b:a1:8a:0b:7d:2a:8a:ce:ec:47:c5:
                    2d:38:ce:de:85:d3:ea:57:4f:cd:1b:3d:dd:5e:c0:
                    d2:e6:b8:20:2a:a0:2e:97:c2:0e:86:c8:8a:94:a1:
                    83:58:9e:dc:ae:dc:ec:09:c8:34:ca:0b:69:aa:31:
                    17:d2:70:75:fe:fa:12:ad:e6:1e:4b:d5:a8:ee:1d:
                    6b:ce:80:5f:6b:5e:3e:b4:1d:84:bc:bf:4e:b7:47:
                    d8:58:dc:e6:66:66:40:95:33:97:c0:fb:bd:f1:b2:
                    f8:d6:44:67:b4:21:a1:5b:71:7d:d5:0c:19:33:4a:
                    57:c4:11:67:8a:a5:17:04:5c:fd:90:1d:83:f7:06:
                    e1:8c:7b:0e:24:b8:a5:70:5c:87:df:ae:32:73:8f:
                    76:99:69:f2:35:72:50:fc:f8:84:6e:97:f5:59:24:
                    b4:a1:8d:7f:bd:96:a4:c8:35:6d:9e:b8:ae:75:6f:
                    cb:12:63:c4:54:4e:c0:e1:c7:13:62:42:11:f3:2d:
                    7e:19:fa:3b:bf:ba:de:a5:bd:8a:f9:e8:fe:e1:4f:
                    fb:f3:3a:2e:3b:46:d9:21:bc:35:63:76:c3:dc:df:
                    df:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:58:4B:6D:BB:11:D1:C5:F0:0C:AA:AF:A9:AB:3F:12:41:6C:B1:A4
            X509v3 Authority Key Identifier:
                keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:1b:ab:e6:99:15:f8:d2:be:e7:cf:95:93:f2:78:2b:8b:e1:
         b3:06:8d:79:b9:51:cb:aa:74:ba:36:0e:ee:cc:fa:d1:e8:e9:
         d1:e5:7a:cc:97:ab:35:9e:83:48:63:a2:c3:6c:b7:cf:8d:a6:
         97:7f:38:73:b2:74:b7:be:d3:ac:e3:5c:20:99:91:a7:86:6f:
         c1:6d:bb:8f:19:74:38:91:5d:5f:b4:b5:91:7a:55:6f:4f:a0:
         26:c9:3f:ba:b2:ed:af:21:47:dc:07:2c:91:93:e2:d0:54:36:
         a5:96:85:8d:bc:e2:05:f8:50:ab:0c:2a:87:6d:09:bc:04:13:
         19:80:1f:97:c8:89:7b:18:81:2a:29:9d:b8:25:ed:76:f5:95:
         55:15:66:9c:5c:6e:42:77:b1:b5:30:7f:f8:ba:84:03:f2:b9:
         78:97:4b:71:06:eb:ca:ba:8f:cf:ab:83:de:ad:5f:9b:b4:8f:
         6a:7e:b9:0e:f0:3f:4a:fb:37:d8:b6:99:37:a3:e8:30:8e:dc:
         29:55:fe:83:61:13:43:4c:49:67:94:8b:11:0d:fb:3e:66:fc:
         59:61:08:4f:75:50:8a:f3:5c:4d:82:f0:ed:4a:2b:cb:9f:ad:
         77:86:aa:b7:96:99:02:10:5a:a2:ae:2c:c1:4c:b4:ab:78:f4:
         91:28:ae:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:04:41 2026 by rpki-client