Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
File:                     s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json)
Hash identifier:          i2JNohqZIFFgR9RxTIxn6DU0fvxe2nqvWTaQCN+r+2o=
Subject key identifier:   77:D1:DB:BF:D7:03:87:35:C4:47:49:1F:BA:91:EE:FB:80:62:8C:E2
Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
Certificate issuer:       /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
Manifest number:          D3
Signing time:             Tue 13 Oct 2026 07:24:30 +0000
Manifest this update:     Tue 13 Oct 2026 07:24:30 +0000
Manifest next update:     Tue 20 Oct 2026 07:24:30 +0000
Files and hashes:         1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: 1l5OM8KrflMGwm5CssI1/wAhZ4QfxQpI0PUNyqc0WiE=)
                          2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: kk5sjyLutQjUsbYJim6fXXwfLma+mT+CCDWR+53e7jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl
                          rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
        Validity
            Not Before: Oct 13 07:24:30 2026 GMT
            Not After : Oct 20 07:24:30 2026 GMT
        Subject: CN=6acddcae-73f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:d3:40:69:d1:45:53:13:15:a7:6f:50:bc:
                    f8:4f:25:db:3e:5c:60:6f:fb:48:00:a1:27:2e:7a:
                    5d:63:75:57:a4:10:af:de:35:98:61:2e:3f:40:44:
                    20:41:b8:3d:81:22:01:89:b1:3b:21:36:88:ac:a0:
                    94:15:b2:07:6c:bd:38:fe:06:e8:f5:d1:8b:7c:01:
                    92:c7:5b:98:9c:37:ae:76:aa:73:62:4f:3e:39:cb:
                    16:f0:3e:0f:3b:9c:13:be:d0:09:31:1c:f0:29:a7:
                    d0:dd:ea:1d:71:af:08:96:c5:83:53:35:a8:29:38:
                    0c:06:22:bb:c9:b2:12:38:09:e1:6c:ae:76:e6:9e:
                    57:8a:45:ff:5e:ba:6e:2c:2c:24:f2:e1:0e:b7:aa:
                    33:3b:20:c8:c8:47:a0:f1:a5:62:40:0e:35:03:cf:
                    53:6c:04:e5:97:e6:75:f1:94:3e:46:55:83:d6:18:
                    10:d6:d5:cc:d6:e1:9c:dd:fb:08:58:f0:56:84:a0:
                    f0:38:78:84:f8:4c:b2:e0:c4:28:23:cb:66:04:96:
                    44:13:52:b4:8c:ef:f0:8d:37:c9:d3:65:e3:dc:cf:
                    0c:a8:27:f1:ab:0a:87:b7:87:c2:cc:c1:0b:80:c3:
                    c1:23:0d:3b:77:9b:ad:8e:73:84:d7:64:3e:cd:46:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D1:DB:BF:D7:03:87:35:C4:47:49:1F:BA:91:EE:FB:80:62:8C:E2
            X509v3 Authority Key Identifier:
                keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:14:cf:92:84:d4:67:ef:34:0d:ac:84:da:2b:59:9d:a6:9f:
         7c:89:ef:a0:35:9d:89:5e:7f:7a:4f:d6:ac:8a:81:14:e2:59:
         04:5e:9b:5b:33:9e:82:9a:3d:b3:1e:ec:5c:41:f8:ae:3c:87:
         a7:0f:6c:e9:ea:38:c0:cc:6c:db:92:23:8a:1f:27:a3:5b:a8:
         1e:4b:4c:84:69:ca:f6:d0:cb:6a:16:c0:d5:8e:ce:a3:a3:44:
         0a:34:ee:31:d1:e9:2f:a2:c0:f4:01:dd:8c:b8:f4:e9:6f:7a:
         9e:57:da:45:93:cb:d8:d3:cb:a5:05:67:34:0d:d5:f4:12:87:
         fa:c7:d7:5b:d8:67:56:b6:8e:e7:d1:2a:1e:38:b2:5c:14:f3:
         0d:4b:ab:bd:54:76:8f:6a:49:40:1b:33:d7:82:7c:81:cc:80:
         f1:48:10:35:f6:bc:ca:aa:24:f8:13:33:5a:35:61:b7:da:e8:
         b0:e7:ee:d2:17:12:e4:a4:61:8a:48:da:fc:17:ef:46:73:ff:
         dc:8f:8e:20:17:c2:9c:e7:f0:ee:64:dc:e4:b2:41:16:4e:2a:
         6b:61:61:d4:c4:a7:2c:dc:b4:51:79:89:8a:af:e7:63:d9:11:
         26:15:f5:97:2d:31:11:3b:ee:fb:48:2f:8c:42:f1:c1:75:fe:
         37:2e:f5:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUxRjkxMTAvBgNVBAUTKEIzOEVEMTYxMzJEQ0I5Nzg5Njc2NzcxQThCMDlFNDUw
OUI5RUQ0RjkwHhcNMjYxMDEzMDcyNDMwWhcNMjYxMDIwMDcyNDMwWjAYMRYwFAYD
VQQDEw02YWNkZGNhZS03M2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgHTQGnRRVMTFadvULz4TyXbPlxgb/tIAKEnLnpdY3VXpBCv3jWYYS4/QEQg
Qbg9gSIBibE7ITaIrKCUFbIHbL04/gbo9dGLfAGSx1uYnDeudqpzYk8+OcsW8D4P
O5wTvtAJMRzwKafQ3eodca8IlsWDUzWoKTgMBiK7ybISOAnhbK525p5XikX/Xrpu
LCwk8uEOt6ozOyDIyEeg8aViQA41A89TbATll+Z18ZQ+RlWD1hgQ1tXM1uGc3fsI
WPBWhKDwOHiE+Eyy4MQoI8tmBJZEE1K0jO/wjTfJ02Xj3M8MqCfxqwqHt4fCzMEL
gMPBIw07d5utjnOE12Q+zUYV+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfR27/X
A4c1xEdJH7qR7vuAYoziMB8GA1UdIwQYMBaAFLOO0WEy3Ll4lnZ3GosJ5FCbntT5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTFGOS9BNkJBNkM4RThE
RTIxMUYwQTMwOEFDN0NDNEY5QUUwMi9zNDdSWVRMY3VYaVdkbmNhaXdua1VKdWUx
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3M0N1JZVExjdVhpV2RuY2Fpd25rVUp1ZTFQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTFGOS9BNkJBNkM4RThERTIxMUYwQTMwOEFDN0NDNEY5QUUwMi9zNDdSWVRMY3VY
aVdkbmNhaXdua1VKdWUxUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFBTPkoTUZ+80DayE2itZnaaffInvoDWdiV5/ek/WrIqBFOJZBF6bWzOegpo9
sx7sXEH4rjyHpw9s6eo4wMxs25Ijih8no1uoHktMhGnK9tDLahbA1Y7Oo6NECjTu
MdHpL6LA9AHdjLj06W96nlfaRZPL2NPLpQVnNA3V9BKH+sfXW9hnVraO59EqHjiy
XBTzDUurvVR2j2pJQBsz14J8gcyA8UgQNfa8yqok+BMzWjVht9rosOfu0hcS5KRh
ikja/BfvRnP/3I+OIBfCnOfw7mTc5LJBFk4qa2Fh1MSnLNy0UXmJiq/nY9kRJhX1
ly0xETvu+0gvjELxwXX+Ny71PA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:02:38 2026 by rpki-client