Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
File:                     4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft (raw, json)
Hash identifier:          uVMgarEB5ujqtgakGe6A9HrftCWXsZjAabJ79JMBydw=
Subject key identifier:   39:DB:7D:A0:92:22:41:32:56:E7:CE:50:74:2D:0F:45:6C:10:4A:2F
Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
Certificate issuer:       /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Certificate serial:       2305
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
Manifest number:          22F2
Signing time:             Fri 02 Oct 2026 15:56:21 +0000
Manifest this update:     Fri 02 Oct 2026 15:56:21 +0000
Manifest next update:     Fri 09 Oct 2026 15:56:21 +0000
Files and hashes:         1: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl (hash: NhIX31QHb+HVBdXLyDyhiV1Z6+7hpxLhxD5h4xcSj/E=)
                          2: CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (hash: VKFgeV6Rmc+Rc92uXlIsfsO0P5v537kl0ZBvVM5G0V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8965 (0x2305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E005, serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
        Validity
            Not Before: Oct  2 15:56:21 2026 GMT
            Not After : Oct  9 15:56:21 2026 GMT
        Subject: CN=6abfd425-3691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:70:75:1a:68:e5:8f:8b:5c:90:9a:2d:59:
                    f8:1f:8f:bd:79:f6:c1:69:2c:84:31:9c:02:9f:9c:
                    06:78:25:63:c7:a7:1d:3d:ee:4a:d8:75:a8:c0:d2:
                    3e:0b:a3:7f:33:27:1b:a8:10:ca:91:95:1f:51:58:
                    a2:c2:de:42:76:39:33:7f:8c:1c:1d:8d:ca:df:3d:
                    bc:79:e8:39:75:03:7b:87:5f:f3:9d:29:30:3e:54:
                    af:3d:9f:6d:30:6c:b0:c4:73:eb:25:8e:30:2f:f5:
                    9c:6c:d3:ea:6f:fe:15:96:f2:40:f7:22:6e:4b:d7:
                    16:26:ea:a4:80:a4:5e:ab:89:d2:18:1c:60:1c:9c:
                    c8:c2:8e:89:ea:c4:5e:48:f0:25:eb:62:c3:7a:7f:
                    73:1b:b4:42:ab:2e:69:9a:16:ac:8b:07:f2:1f:a4:
                    79:70:d1:85:c4:ba:bf:13:60:e3:7d:bb:af:dd:71:
                    17:43:47:99:eb:38:ef:a3:7d:f8:96:f5:53:75:7e:
                    58:1b:10:0e:90:24:a7:19:69:0c:ec:c9:63:63:e1:
                    eb:f5:2d:1f:37:6d:3c:bd:08:33:20:4d:2d:41:89:
                    bf:32:ee:82:c0:eb:51:84:76:40:b7:17:b2:53:82:
                    79:4c:9d:d2:84:7f:73:b4:6a:14:d2:1b:53:ce:3f:
                    ea:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DB:7D:A0:92:22:41:32:56:E7:CE:50:74:2D:0F:45:6C:10:4A:2F
            X509v3 Authority Key Identifier:
                keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c8:87:0d:b5:e4:10:48:fa:21:18:6d:d0:ad:c9:2b:d5:95:
         38:7c:76:65:ad:de:39:7a:a7:f1:23:ca:28:c9:5d:da:fd:a7:
         20:8d:14:a3:61:89:64:b4:be:19:90:43:aa:e9:e1:1f:dc:fa:
         fc:92:6f:dd:d4:e9:5a:9f:e4:c3:d0:65:56:5d:61:ba:66:3c:
         d7:41:e6:5a:69:dd:72:fd:1f:6a:81:fc:02:dc:3d:ea:0b:92:
         7d:4c:5a:37:cd:22:82:ec:a6:3b:69:b5:25:83:33:2f:02:6a:
         3d:d5:d7:71:8f:05:7f:ae:91:e4:4b:eb:0c:16:76:cc:40:f7:
         d8:ff:f6:8a:a1:19:5c:19:d6:93:be:bb:c5:ff:6a:56:a8:6e:
         88:2e:02:9f:9f:42:3b:37:7c:dc:96:2f:37:e8:df:5f:f9:36:
         8a:7a:c5:4f:56:a5:96:1c:b8:6a:c3:98:24:08:79:eb:f3:7d:
         15:73:64:95:85:55:37:52:a9:c1:eb:dc:8b:42:76:81:89:c9:
         b5:bb:be:d0:cb:3a:98:ba:3f:30:5a:56:84:af:6d:05:58:a3:
         5c:32:fb:64:0e:80:bc:51:ed:d3:d3:f1:45:ea:46:0f:5c:82:
         ca:05:72:54:6c:07:7d:81:5f:15:82:2d:d1:e5:fd:3a:18:90:
         72:d0:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:54:37 2026 by rpki-client