Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
File:                     mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json)
Hash identifier:          mWgTFsWme9hSQ6a4s/V65c6E6+3IgFU4h+je2733JS4=
Subject key identifier:   5F:8E:01:AF:A3:4C:FD:C3:9A:68:44:94:71:EB:59:91:02:46:82:EF
Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
Certificate issuer:       /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426
Certificate serial:       0869
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
Manifest number:          085B
Signing time:             Sat 24 Oct 2026 21:01:55 +0000
Manifest this update:     Sat 24 Oct 2026 21:01:54 +0000
Manifest next update:     Sat 31 Oct 2026 21:01:54 +0000
Files and hashes:         1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: R9rgHhzz8wUV0luPQOOF7SJAls1NuqopE8UYnBnmht8=)
                          2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: SEGLZJRsG8d/oF/uE/MLRtBE/snz3gSEd4tQtKL1yRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 21:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426
        Validity
            Not Before: Oct 24 21:01:54 2026 GMT
            Not After : Oct 31 21:01:54 2026 GMT
        Subject: CN=6add1cc3-1e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:93:21:fe:aa:0c:01:7e:c3:2e:03:fc:47:
                    53:5c:ef:d6:e4:dc:ac:15:68:e8:92:b3:fa:14:5e:
                    f7:f8:91:2b:6b:d4:d9:d7:19:2d:dd:56:0f:af:eb:
                    99:e0:ae:70:39:ea:65:b0:1e:d9:bc:cf:63:73:86:
                    68:e1:a3:91:d1:de:80:4b:03:f0:b3:a5:a7:cf:ca:
                    a5:67:0c:29:e2:16:d9:8a:0b:5c:8c:01:8e:6f:91:
                    95:ef:51:30:5c:59:57:18:87:c0:0b:65:c4:97:ae:
                    0f:48:69:46:e9:c7:c4:47:0a:c7:5a:e3:70:cc:2f:
                    ee:8c:69:ef:67:93:69:e3:60:07:a9:2a:07:b9:e0:
                    64:7e:c0:bc:cf:5e:f4:aa:99:c2:d5:0f:aa:84:85:
                    a8:f4:c4:20:3e:45:80:6b:c3:f0:ba:6e:42:95:95:
                    5a:0b:26:0a:bb:86:2d:2d:a4:b2:60:45:95:40:29:
                    d5:f6:eb:79:2a:af:1c:dc:ff:be:81:c7:cc:88:02:
                    bf:0a:76:4c:4a:04:2e:8d:b8:8a:44:2a:24:c2:66:
                    c9:1d:9f:4a:44:82:fa:c5:ae:a9:07:df:bf:19:fd:
                    b3:38:52:e3:5c:df:1c:2a:47:f5:c9:55:a8:36:56:
                    15:5e:57:f1:25:27:9d:5d:43:fc:6b:d1:2e:91:c0:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8E:01:AF:A3:4C:FD:C3:9A:68:44:94:71:EB:59:91:02:46:82:EF
            X509v3 Authority Key Identifier:
                keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7d:a3:dd:61:e9:78:cb:6a:2f:e6:10:54:86:c6:1d:e1:b1:
         6c:59:35:e5:f8:3e:d2:5f:54:38:07:ce:2d:1f:e5:31:db:23:
         e4:f4:92:71:0e:e9:11:c1:5a:0b:fa:ed:60:a1:86:57:2b:eb:
         9f:9e:2b:1d:6b:8f:55:f6:4b:81:b6:bc:94:89:bc:ca:12:f6:
         e8:3e:25:8d:84:97:8a:06:6e:8e:eb:03:d8:61:bc:04:4d:4e:
         ad:a7:b9:c2:2e:24:3a:99:e8:24:14:94:5b:1f:5c:e4:73:21:
         9b:76:5e:83:1a:da:19:5a:1c:84:7b:f7:17:cb:2e:1b:38:86:
         60:b2:79:67:d9:47:7e:f7:65:82:dd:ff:ef:de:96:32:9e:72:
         64:34:cc:ae:33:25:39:0a:14:44:9a:d0:10:49:66:79:06:45:
         ed:46:c6:f4:f6:d1:aa:26:72:cd:01:ff:e0:ce:42:71:01:ee:
         d7:bf:00:d9:62:c9:cc:c2:ce:4a:02:80:96:7f:5f:4d:44:cc:
         b0:91:4f:e3:91:80:ab:eb:71:6d:3e:46:a5:eb:2a:97:83:85:
         b7:88:1c:f3:93:42:4d:01:fc:bc:c8:38:09:91:5d:76:de:2f:
         04:7c:78:60:63:c9:49:cf:8c:b1:93:f8:1b:0e:19:db:92:49:
         82:13:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:00:56 2026 by rpki-client