Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File:                     fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier:          byGhyk4A9/bhIAik8qr0xXW71WMDXcNVW+nzgPeALmA=
Subject key identifier:   0F:43:B2:EA:D3:23:B2:EE:05:D9:F3:ED:AF:1A:E9:1A:B4:5C:BC:4B
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       047F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number:          0466
Signing time:             Sat 03 Oct 2026 00:29:17 +0000
Manifest this update:     Sat 03 Oct 2026 00:29:17 +0000
Manifest next update:     Sat 10 Oct 2026 00:29:17 +0000
Files and hashes:         1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: CLLA98QmuXG/O7WprUlVKH/uUslq80T2Q+Z42De+LBs=)
                          2: 1762C314878E11F199DA80955211F970.roa (hash: IzQBeC4PmDoF+drcIWyzoD8TumN/IGGjux0nGstfa/Q=)
                          3: 791CD4FEFAE511F0B461E4A0696F56BC.roa (hash: 7W5oQwxnfaz/Da+/adv0pSip5O41XdqYh1qWJQtoYxU=)
                          4: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: Tj4ow2/jq+mUP/LMLTPrpgT8A3SwEW2gBwmbNDd2jrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Oct  3 00:29:17 2026 GMT
            Not After : Oct 10 00:29:17 2026 GMT
        Subject: CN=6ac04c5d-89b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:8b:09:b7:44:da:86:72:3a:c6:9e:7e:2e:
                    60:23:88:e9:cd:ff:1c:29:c8:e0:b4:fb:2d:cf:e1:
                    dd:84:3b:8e:39:6c:47:95:43:5e:1a:be:86:2a:33:
                    5d:9e:17:26:eb:bc:1d:82:ce:fd:e4:5c:be:0d:7b:
                    81:3a:72:f2:c3:dd:ce:b9:ae:e1:43:0b:52:e4:ab:
                    ee:eb:2b:04:81:73:93:7c:f7:40:e6:7c:e3:b5:0b:
                    88:02:75:91:76:21:98:75:04:19:2a:ff:c6:00:3a:
                    96:d6:2f:ec:d8:8c:77:4e:51:3d:b5:c6:43:ff:2b:
                    68:0c:51:33:cb:88:2c:9e:f3:31:6d:3b:42:58:ce:
                    4e:30:d7:e3:b7:01:69:8b:b5:47:b5:1c:fe:4f:7f:
                    69:0a:8c:10:e8:e0:37:25:24:21:ef:06:c9:d9:35:
                    e4:00:36:d1:25:97:74:97:4f:24:f5:99:5b:c1:60:
                    5c:d9:5a:26:b7:ea:63:2b:35:ab:8c:df:a7:ae:28:
                    43:e4:8f:64:71:e4:c3:29:88:e2:15:b1:a0:e3:d5:
                    01:fd:8e:76:8a:b8:ad:a5:3e:b7:5a:0c:5c:fb:1b:
                    2f:5a:9b:be:79:da:8d:2b:7d:c4:f0:8e:06:31:49:
                    e0:ee:ff:68:16:11:d7:3d:dd:90:79:05:a6:5c:0d:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:43:B2:EA:D3:23:B2:EE:05:D9:F3:ED:AF:1A:E9:1A:B4:5C:BC:4B
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c9:5e:f4:79:88:66:ed:fb:4a:4a:6c:de:cf:28:db:f0:db:
         78:90:08:fa:81:60:ed:4b:87:10:c6:4b:ce:00:b4:fd:9d:f3:
         d5:d0:9b:6d:9d:c4:6c:40:49:08:f9:a1:80:f3:dd:c7:a7:fc:
         b5:24:9b:3a:19:97:83:9b:11:b5:95:06:3d:25:96:45:87:98:
         6e:5b:8b:2b:f4:91:77:d3:0b:e9:4c:4f:f1:f9:57:93:be:9d:
         5d:94:d4:a8:86:02:dc:76:2d:f0:1c:0a:82:45:84:e8:5d:bc:
         73:06:51:8e:7e:26:18:69:3d:bf:c4:63:8e:37:87:f5:71:49:
         4d:51:6b:4a:ac:97:71:a3:e2:f6:ea:3e:be:33:f7:27:f5:7f:
         92:6c:58:7f:5c:0a:bf:b4:dc:92:73:c5:4e:68:78:7f:92:d5:
         5a:21:6e:d4:ab:14:03:24:25:0e:29:74:12:da:ee:4c:76:a4:
         af:ec:38:b3:54:02:d5:38:d6:f4:84:d9:57:81:1d:88:f2:aa:
         7a:c6:04:b5:b2:5a:8f:16:3a:19:ae:28:27:85:76:99:61:b4:
         15:dd:d6:25:33:be:34:47:b6:2d:f5:54:a8:9f:d3:1d:8d:10:
         70:65:b3:36:8d:8d:04:ca:56:3c:7f:e5:40:56:57:e1:78:6a:
         f5:cb:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:48:06 2026 by rpki-client