Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
File:                     sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json)
Hash identifier:          3+DevV74X/mVgEAn2WjP+MWIP0xvQx4C678kvKDmQnQ=
Subject key identifier:   57:53:F5:1D:BF:EA:33:30:89:95:68:B2:6F:99:C2:EE:33:B7:D0:5D
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Certificate issuer:       /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial:       0D7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
Manifest number:          0D62
Signing time:             Tue 06 Oct 2026 18:12:03 +0000
Manifest this update:     Tue 06 Oct 2026 18:12:03 +0000
Manifest next update:     Tue 13 Oct 2026 18:12:03 +0000
Files and hashes:         1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: akPpNv06mOqxbsIIOMRyOgI5nLPW62ayhmw/o7Mu/Bk=)
                          2: A869B800367611F088B7726AC4F9AE02.roa (hash: h0vzLBO9AmONx7Qad7DB4zJWcKBNkWxmiiTY+i7XavM=)
                          3: F920A266A14D11F19C4FD5BB4B11F970.roa (hash: AOVlQsIItS0GQv8Ip9YgVoTaSV/cQNswIGn8znsjXog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
                          rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3452 (0xd7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
        Validity
            Not Before: Oct  6 18:12:03 2026 GMT
            Not After : Oct 13 18:12:03 2026 GMT
        Subject: CN=6ac539f3-b79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d8:1b:e9:85:94:16:40:c4:20:29:26:ee:e2:
                    6c:a1:dc:d2:84:c9:50:ad:2d:03:3c:cb:38:f3:ad:
                    69:6c:11:81:5b:2b:fd:cd:0f:73:7e:a6:b8:90:a9:
                    89:20:43:65:9b:6e:90:43:87:9a:65:f8:55:2d:6c:
                    e4:63:20:62:fb:e6:90:21:99:19:32:d6:5e:0d:0b:
                    75:58:10:91:1a:78:9f:3e:1f:28:b4:63:10:ca:2b:
                    f4:d6:52:9f:b8:3b:bc:32:dc:96:f3:df:9c:55:6c:
                    c8:b4:7a:94:f9:b0:80:eb:72:70:64:f2:72:85:2b:
                    ae:79:8e:d2:40:c0:1d:c9:e9:dc:ac:cd:cb:b9:c3:
                    fc:2a:87:3e:37:bf:45:18:28:a8:53:2a:83:c4:53:
                    53:6a:a5:c6:af:5f:7c:41:d3:d1:3b:00:f3:fe:60:
                    3e:14:f8:a9:05:94:06:37:62:8d:10:dc:8a:5e:d2:
                    f0:81:91:ff:9d:cb:53:e5:d1:9f:59:76:c5:8d:c5:
                    a7:5f:66:cc:2e:e9:44:dc:d9:53:81:09:f8:a7:8e:
                    f3:cb:1c:49:e7:47:f3:1c:06:f3:4f:6f:1a:f7:d6:
                    b1:e5:1a:47:f6:c6:8f:d3:d1:16:4e:ae:36:8f:b4:
                    9a:02:b1:bc:2d:6d:df:b9:23:5b:ba:0f:8e:06:2f:
                    d6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:53:F5:1D:BF:EA:33:30:89:95:68:B2:6F:99:C2:EE:33:B7:D0:5D
            X509v3 Authority Key Identifier:
                keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:43:a4:08:1f:94:39:c9:0c:31:bd:e6:fc:05:64:25:9c:d1:
         26:f3:f5:8e:33:83:c4:64:f9:76:e2:70:45:7c:25:59:ae:0e:
         41:12:7e:aa:6d:81:0d:01:86:aa:3e:ef:88:7f:40:98:ba:b1:
         fc:c0:d2:a8:b5:70:6d:28:fb:92:35:60:ed:20:b5:b2:5d:51:
         42:3b:dd:ea:32:fd:ad:0d:d6:3e:a7:d9:f5:72:a4:dc:e7:de:
         36:c3:7a:8b:1f:ff:a8:89:d0:d9:ce:31:68:59:29:07:2c:06:
         82:f8:51:2c:63:fb:f6:df:85:c6:4e:73:e2:2a:7a:ca:0f:18:
         28:eb:b2:07:6c:69:fb:8c:85:bf:f2:49:c0:3f:25:40:79:42:
         e1:6c:29:5a:04:49:84:c0:38:79:44:11:90:68:e0:53:98:cc:
         56:44:19:5e:27:39:d2:d0:4c:8e:ef:12:91:5b:b4:ca:cf:13:
         37:d5:a2:5b:29:4e:b4:c5:62:d7:3e:8f:3f:9d:e7:0f:09:b6:
         14:b9:b3:a4:4e:78:ff:ad:99:87:5e:a9:c6:52:7a:1a:45:0b:
         9a:50:fe:8c:4a:bc:74:48:f9:1a:f1:96:ca:25:8d:7b:dc:27:
         d1:45:f7:fa:74:bc:a2:3d:90:10:85:0e:a3:b0:b2:ba:cd:15:
         ee:4c:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:58:54 2026 by rpki-client