Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
File:                     ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json)
Hash identifier:          q3o/NrOu6VCVuf+pwVk8gGDodnQVvmliWW6ayiufd5o=
Subject key identifier:   74:4B:66:97:28:4F:8E:E5:BF:9E:CB:AA:94:A6:A5:50:08:A5:6E:52
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Certificate issuer:       /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
Manifest number:          01E2
Signing time:             Mon 05 Oct 2026 03:53:32 +0000
Manifest this update:     Mon 05 Oct 2026 03:53:31 +0000
Manifest next update:     Mon 12 Oct 2026 03:53:31 +0000
Files and hashes:         1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: 63/3uTCdfBMyCNOhWD8BuPQoZYOxjtZc5yRMfNLoVfM=)
                          2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: 5PHbUM/X+Td9kzCJHVRsM26TQZj90GItMYtQ/V/nVug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
                          rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
        Validity
            Not Before: Oct  5 03:53:31 2026 GMT
            Not After : Oct 12 03:53:31 2026 GMT
        Subject: CN=6ac31f3c-14cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:16:dc:ef:ac:47:14:bf:62:8f:44:90:ba:
                    7c:62:0e:09:0c:ef:2d:02:7b:bc:c3:7d:8b:58:4c:
                    03:b6:c4:7d:a3:d9:61:e2:ae:82:9e:95:35:73:fb:
                    35:d3:12:c9:6a:3c:23:1f:67:ad:7d:26:0f:21:6e:
                    e9:e5:39:ce:e4:20:47:03:73:2b:25:81:2f:f5:27:
                    68:f2:1b:de:23:df:92:b8:5b:b1:ea:53:0e:ed:e4:
                    d1:3e:3a:a6:78:29:c4:81:3e:a6:99:99:24:5c:a7:
                    60:19:c2:6e:85:a7:6a:e6:1f:56:d1:7b:04:cc:f9:
                    f5:ea:eb:16:d1:18:e1:da:f4:80:95:1a:76:92:18:
                    fc:a9:1b:45:91:22:3b:92:5c:29:8a:e0:34:4a:87:
                    94:7f:da:e7:65:bc:b5:71:49:29:a2:82:03:b0:4e:
                    a8:a0:89:50:6d:51:81:5b:a3:3b:3b:4b:a9:dd:27:
                    37:e3:50:c5:ae:28:14:f6:f7:68:47:50:1f:2c:2f:
                    59:a3:33:e8:ab:0b:0e:81:87:aa:a9:69:99:ef:6d:
                    64:5c:c7:ea:ae:34:68:e6:8b:38:54:15:96:45:56:
                    bf:49:ce:b8:de:d4:9f:3f:a2:cc:fd:d5:be:f7:cb:
                    f3:d8:50:bc:a5:b9:5c:1b:cd:ca:f3:bf:aa:7f:d5:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4B:66:97:28:4F:8E:E5:BF:9E:CB:AA:94:A6:A5:50:08:A5:6E:52
            X509v3 Authority Key Identifier:
                keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:09:f0:7e:d0:fd:72:b6:15:84:bb:fc:dd:dc:f2:ed:eb:60:
         c4:96:f6:84:45:e5:0f:6e:16:2c:e4:78:82:e5:ee:5e:a0:e6:
         03:56:ee:da:29:42:c9:91:b4:ea:6f:23:14:56:10:1b:88:c3:
         19:0b:3c:51:77:cb:70:3e:a0:96:fa:aa:ea:43:e2:46:fa:a0:
         c3:d2:5a:d9:64:26:9d:40:02:c6:1c:3f:9e:23:9d:2f:ed:fb:
         f7:f3:71:23:b5:5f:f7:76:3c:4c:04:a1:81:92:4a:81:76:22:
         1a:e3:3a:14:a8:d7:0b:c2:27:96:ec:a5:2b:97:f7:5f:e5:f9:
         25:b0:56:73:14:d5:a1:15:8c:4a:90:b2:81:1c:26:fb:51:5f:
         46:28:50:0a:6d:32:34:32:25:37:72:57:18:a1:a3:50:ca:79:
         22:49:da:93:a3:a3:6f:3c:a5:7d:9a:92:89:bb:6b:fb:2a:6f:
         20:4f:ab:5e:01:19:0a:a2:94:5d:cd:9f:8a:ba:6a:bf:3b:4c:
         e8:11:94:97:76:34:28:c4:3e:5f:69:fd:20:96:71:4b:eb:30:
         1b:b8:26:ea:1e:8d:91:b9:13:5e:f6:93:12:40:be:ea:03:57:
         8f:b8:68:00:22:d5:6a:6b:4d:c5:2e:7d:6e:da:a0:4c:af:57:
         91:83:54:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz
MzQ3MjEwODIwHhcNMjYxMDA1MDM1MzMxWhcNMjYxMDEyMDM1MzMxWjAYMRYwFAYD
VQQDEw02YWMzMWYzYy0xNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2UW3O+sRxS/Yo9EkLp8Yg4JDO8tAnu8w32LWEwDtsR9o9lh4q6CnpU1c/s1
0xLJajwjH2etfSYPIW7p5TnO5CBHA3MrJYEv9Sdo8hveI9+SuFux6lMO7eTRPjqm
eCnEgT6mmZkkXKdgGcJuhadq5h9W0XsEzPn16usW0Rjh2vSAlRp2khj8qRtFkSI7
klwpiuA0SoeUf9rnZby1cUkpooIDsE6ooIlQbVGBW6M7O0up3Sc341DFrigU9vdo
R1AfLC9ZozPoqwsOgYeqqWmZ721kXMfqrjRo5os4VBWWRVa/Sc643tSfP6LM/dW+
98vz2FC8pblcG83K87+qf9XayQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRLZpco
T47lv57LqpSmpVAIpW5SMB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2
NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB
M3cybE96MlRFMll6UnlFSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxgnwftD9crYVhLv83dzy7etgxJb2hEXlD24WLOR4guXuXqDmA1bu2ilCyZG0
6m8jFFYQG4jDGQs8UXfLcD6glvqq6kPiRvqgw9Ja2WQmnUACxhw/niOdL+379/Nx
I7Vf93Y8TAShgZJKgXYiGuM6FKjXC8InluylK5f3X+X5JbBWcxTVoRWMSpCygRwm
+1FfRihQCm0yNDIlN3JXGKGjUMp5Iknak6OjbzylfZqSibtr+ypvIE+rXgEZCqKU
Xc2firpqvztM6BGUl3Y0KMQ+X2n9IJZxS+swG7gm6h6NkbkTXvaTEkC+6gNXj7ho
ACLVamtNxS59btqgTK9XkYNUqA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:24:46 2026 by rpki-client