Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
File:                     MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json)
Hash identifier:          8FO4NQ6u4Iq6P1SrE+sLAgKWlXyPekyTFADzkgfpU9E=
Subject key identifier:   2B:E1:C2:84:D8:CA:58:CF:0E:8E:23:61:4E:F1:63:41:00:2C:2F:F1
Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
Certificate issuer:       /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Certificate serial:       0F47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
Manifest number:          0F32
Signing time:             Tue 06 Oct 2026 17:40:16 +0000
Manifest this update:     Tue 06 Oct 2026 17:40:15 +0000
Manifest next update:     Tue 13 Oct 2026 17:40:15 +0000
Files and hashes:         1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: 3zIJFpVfMDUQRCS60jp8+Zqy+7Rk5FXZu0/VME4hcng=)
                          2: 5822028E51F811EAB221F834C4F9AE02.roa (hash: 3FX6yd8ajXUCf1DvaodFv7wjS6jvEbFRhv/3yRD4WYA=)
                          3: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: xKR+1TqcXk1tuGXmRs5U35Hu6EeN0viZWiMmzSgp8ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
                          rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3911 (0xf47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
        Validity
            Not Before: Oct  6 17:40:15 2026 GMT
            Not After : Oct 13 17:40:15 2026 GMT
        Subject: CN=6ac53280-e993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:a4:2f:71:9c:65:c6:99:78:f9:d7:cd:12:
                    1d:9f:00:47:92:2d:ff:97:53:b3:13:ee:a6:63:2e:
                    5e:5f:ad:94:60:c5:e1:a6:f7:10:01:63:b0:c6:17:
                    16:09:1a:9a:e5:6d:47:96:45:63:87:9f:41:66:fb:
                    c6:72:53:96:43:e7:81:45:b7:63:61:08:c6:11:72:
                    dc:99:ea:ee:c2:da:1e:b7:fc:ac:12:ec:c2:be:31:
                    c7:be:a9:6d:a9:3b:90:b7:9b:4e:8c:96:5e:6d:22:
                    c0:b6:12:b0:c5:a2:05:d2:52:b0:67:1a:10:88:23:
                    e9:6f:62:47:02:a8:e7:df:e6:8e:1f:67:d6:00:b2:
                    0b:91:9c:a6:42:9b:e3:49:71:27:28:aa:7a:13:fd:
                    ba:b6:a9:17:6d:cb:74:f7:93:f5:e2:10:2f:81:cd:
                    b0:d8:e8:69:1b:c6:36:86:69:3a:06:e9:6c:16:65:
                    66:fd:9e:cd:c0:6b:fb:ae:0c:58:01:96:61:c6:b2:
                    51:f4:5d:55:5a:b0:85:ca:de:0a:24:fb:8f:c8:93:
                    e3:06:ab:be:33:d8:63:a1:55:3d:79:99:62:65:bd:
                    63:bc:ed:d7:80:51:ec:40:a3:0e:d0:2e:9c:98:f6:
                    84:34:48:cc:a1:ca:a0:4e:5e:89:61:4d:7b:d7:cb:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E1:C2:84:D8:CA:58:CF:0E:8E:23:61:4E:F1:63:41:00:2C:2F:F1
            X509v3 Authority Key Identifier:
                keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1a:8e:58:80:ea:d6:cc:34:bd:be:c5:63:16:6e:4a:6a:ae:
         ce:ef:1d:23:07:3e:e0:bf:1b:b0:ca:27:db:7c:f9:10:6e:99:
         af:2b:21:d7:ab:1a:31:a1:9f:db:39:e6:96:aa:18:bb:08:96:
         1e:d5:15:d4:4d:f0:f5:b2:df:e0:ae:38:e1:42:8d:33:a7:3f:
         0d:94:3d:23:e2:a4:b4:6c:32:5d:36:cd:4d:c9:f6:07:f8:1e:
         da:1e:03:b2:e6:d5:ee:0d:da:4c:9e:f8:a2:d6:0d:35:99:e5:
         6c:be:bc:73:c7:30:9e:5e:0a:6e:f2:6f:ce:8b:0e:f4:d2:9f:
         0a:09:46:53:01:fd:b0:55:d5:82:fd:a1:39:a4:c9:6b:77:9c:
         77:1f:f2:67:22:bf:19:d4:38:97:d8:5e:db:3f:7e:a6:84:ec:
         59:77:a7:ad:21:c9:44:c8:34:df:d0:76:64:81:7a:b3:f6:47:
         3b:be:ad:80:d1:c4:51:99:8b:54:97:8c:ad:e1:ef:64:89:bc:
         7c:0a:e6:e9:e2:7a:ba:12:56:f2:7f:3b:91:d5:c4:0e:09:8d:
         df:71:19:d9:b7:36:4e:6b:65:97:b3:ce:27:63:d4:27:8a:88:
         6f:ce:b7:0b:e6:ef:5c:ea:43:c7:8f:f8:3d:7b:5e:8a:34:21:
         6f:8a:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:18:32 2026 by rpki-client