Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File:                     Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier:          xIJA3tt59hD7FcjDPCJeqxdkAlEhprR7l6O7Fo9IYu4=
Subject key identifier:   7F:97:B8:5A:CF:5C:2C:F8:EF:41:84:D7:E5:8B:48:DB:2E:D6:5B:C5
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer:       /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial:       082E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number:          0817
Signing time:             Sun 04 Oct 2026 21:16:50 +0000
Manifest this update:     Sun 04 Oct 2026 21:16:49 +0000
Manifest next update:     Sun 11 Oct 2026 21:16:49 +0000
Files and hashes:         1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: Tz5prktYFsWN65JayPSTZDqXnzWjCSL+z8hukWat0cg=)
                          2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: WP3GWDQymjlRsnSc3HAqORtZqI7XnBdju+4ENbLFk6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
                          rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
        Validity
            Not Before: Oct  4 21:16:49 2026 GMT
            Not After : Oct 11 21:16:49 2026 GMT
        Subject: CN=6ac2c241-170b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:c6:b0:6b:3c:38:aa:49:73:8f:bc:bb:c2:
                    00:0c:07:84:bd:ce:b6:ee:89:c2:2f:cb:9b:a6:e0:
                    29:fd:35:ec:fa:20:f2:77:dc:e3:c2:35:8e:10:87:
                    0d:ef:c4:03:16:9e:ff:3d:d1:24:4e:9d:88:2e:de:
                    29:35:50:eb:76:60:5f:5a:c9:ca:f1:b6:dc:4f:2d:
                    95:da:a3:c0:8a:e1:c4:25:32:8e:f9:96:2e:e1:e7:
                    74:09:fb:b5:62:7a:ad:e2:80:c3:2b:0e:6c:5d:17:
                    93:45:21:8c:db:91:9d:64:7a:52:31:71:16:24:60:
                    fe:a8:cf:fc:48:15:60:3d:29:0d:e3:38:2a:97:65:
                    21:40:f9:9d:7a:b5:9f:39:e9:8c:14:87:0d:f0:03:
                    bb:0b:bb:67:35:e0:b3:44:97:e6:49:e7:5e:ac:ad:
                    b1:8b:45:54:4b:1a:b5:82:e9:96:2a:fa:58:ec:23:
                    3a:68:27:d0:d3:dc:79:83:11:26:35:dd:f0:a2:bc:
                    4b:e5:76:6e:1d:42:52:0a:ba:d2:ae:9b:23:f9:c8:
                    3b:69:54:fe:76:1d:75:54:e0:9c:e2:f9:eb:5b:fe:
                    a0:e0:1e:71:ed:13:8b:45:b1:68:d7:f3:a8:80:75:
                    29:f1:1c:ce:bf:f8:2e:0f:03:8d:9a:93:e4:88:50:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:97:B8:5A:CF:5C:2C:F8:EF:41:84:D7:E5:8B:48:DB:2E:D6:5B:C5
            X509v3 Authority Key Identifier:
                keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b0:6e:c4:ac:53:1e:c0:50:1e:7c:4d:ef:a0:33:07:95:0e:
         28:fc:d9:7f:6f:cf:6f:37:d1:aa:bd:06:b1:f3:b7:f7:0a:a9:
         5c:9b:90:9a:c5:36:00:b3:16:f4:8b:a5:b1:27:0d:54:24:0a:
         67:84:ff:e4:b5:41:1a:4f:ff:cd:b6:38:c2:fe:57:41:dc:fa:
         02:30:19:53:d9:48:44:28:e2:20:c4:66:b1:9e:bd:0c:e4:8d:
         8c:eb:90:9a:3f:3a:c4:30:3c:0b:f2:e4:0f:94:93:6b:25:2c:
         ba:12:d5:db:d0:4a:b6:ef:8e:e5:29:b9:88:b6:bc:57:fb:c9:
         1d:7f:05:c5:f5:8b:86:d5:39:15:37:bb:da:5a:e2:68:81:f5:
         4f:40:91:a5:f2:60:33:db:2a:84:ca:10:f4:31:bc:95:82:ce:
         a6:61:d3:c7:26:18:40:25:b3:83:9f:56:da:64:c2:9a:99:4a:
         75:01:e1:b7:99:cb:ce:3a:4d:9f:b9:ef:35:73:1b:23:ac:58:
         83:fc:2c:78:0e:bb:30:10:54:a1:76:a7:25:1e:82:e7:51:2e:
         01:65:c6:a8:aa:15:c9:5d:a7:c3:26:2f:5d:a4:9b:26:c1:74:
         50:a1:b2:18:ae:87:b3:1d:50:08:57:e4:66:e7:0d:b0:d2:c7:
         03:8f:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:48:40 2026 by rpki-client