Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
File:                     MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json)
Hash identifier:          ZfYxXLt6+3fhvYJOwf2fm/IocgMoWNvYezBEZhqmwXY=
Subject key identifier:   48:62:59:AD:00:99:C4:48:D6:CD:CA:01:C1:D1:5B:6D:34:15:5D:29
Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
Certificate issuer:       /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Certificate serial:       0F46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
Manifest number:          0F31
Signing time:             Sun 04 Oct 2026 17:37:53 +0000
Manifest this update:     Sun 04 Oct 2026 17:37:52 +0000
Manifest next update:     Sun 11 Oct 2026 17:37:52 +0000
Files and hashes:         1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: Vg5JMjR1urhh+Q5xKgPq1mur9lUnTUhqnkulvWPARpk=)
                          2: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: xKR+1TqcXk1tuGXmRs5U35Hu6EeN0viZWiMmzSgp8ik=)
                          3: 5822028E51F811EAB221F834C4F9AE02.roa (hash: 3FX6yd8ajXUCf1DvaodFv7wjS6jvEbFRhv/3yRD4WYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
                          rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 17:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3910 (0xf46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
        Validity
            Not Before: Oct  4 17:37:52 2026 GMT
            Not After : Oct 11 17:37:52 2026 GMT
        Subject: CN=6ac28ef0-6d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:59:cc:e4:29:f1:73:12:da:bc:d0:05:30:
                    8d:95:6c:2d:be:d2:9b:95:31:29:3f:05:37:a8:08:
                    dc:ba:c4:af:4a:92:76:37:3e:08:79:17:d3:b6:c3:
                    2c:c9:b1:c4:56:f9:42:bd:60:12:2d:24:49:c1:40:
                    24:eb:da:f9:d9:f6:7c:cc:e1:6b:96:c2:7e:1d:74:
                    2f:80:dc:e5:79:08:65:b7:15:24:73:fa:16:8f:a9:
                    9d:80:3d:e9:52:a5:51:e9:82:49:0e:0b:63:be:5e:
                    9f:d3:b8:58:f9:e4:76:27:d3:58:ec:0b:8f:97:8c:
                    5e:01:11:7c:e0:b4:47:dd:a2:df:78:b0:03:0a:b2:
                    30:4a:1d:bf:46:81:a0:6c:8e:10:76:2b:20:0a:a0:
                    fc:8c:b3:07:93:98:f0:40:93:9c:e6:9d:6c:90:0c:
                    fb:84:1e:2b:77:07:26:49:18:0e:4f:cc:22:47:5a:
                    65:7b:c2:dc:47:0e:4a:11:ec:a0:8d:d7:0c:a6:02:
                    32:85:03:57:d2:d4:eb:71:9c:ea:b9:d9:e3:cb:a9:
                    e8:2f:1c:22:d7:6e:e1:ca:71:ac:7d:f5:d8:63:29:
                    00:77:fa:94:90:0a:99:52:3f:e6:d8:95:c1:b5:db:
                    2f:70:f6:96:56:0b:f5:ad:90:de:85:a9:10:2f:ff:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:62:59:AD:00:99:C4:48:D6:CD:CA:01:C1:D1:5B:6D:34:15:5D:29
            X509v3 Authority Key Identifier:
                keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ac:93:9d:3e:17:73:ce:cb:78:12:82:49:3a:f2:02:03:ce:
         8a:55:4e:b6:e8:99:04:94:db:52:c6:ea:35:7a:38:ab:fd:5f:
         82:54:db:7b:d1:6d:84:91:19:6b:84:a6:b5:a9:ae:26:d0:fb:
         a4:4f:bc:43:17:95:96:42:da:75:70:7e:2a:98:5a:e4:89:5c:
         ba:85:5e:2d:3c:67:c1:7c:fb:bc:be:f4:df:ac:84:fc:56:e6:
         d6:c9:1c:d7:dc:a2:c8:91:fa:25:fe:b9:3e:c3:7f:d4:38:41:
         71:ec:33:28:34:dc:86:c9:44:93:31:a5:b2:1c:66:da:88:09:
         73:47:11:e9:5b:22:38:4d:cb:3f:f7:74:18:5b:88:56:d3:96:
         5a:51:25:25:bf:b1:53:46:4d:2b:cf:6d:6a:a5:22:d0:f9:d4:
         cd:8e:f2:cc:f1:ff:14:65:e9:45:8f:c5:c6:60:1a:e5:b6:9f:
         30:b9:63:8b:05:93:68:52:21:ad:1c:d1:f7:22:24:e7:ec:2d:
         ce:da:7a:2a:e6:fb:6b:c9:ba:92:a5:21:9b:d2:e7:28:17:fb:
         4a:53:ee:96:2b:ea:33:af:28:fd:56:6f:a1:88:db:66:c3:6a:
         b2:0b:e2:96:11:ac:a5:7c:87:df:23:e7:89:8a:a5:07:85:ec:
         10:67:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:58:06 2026 by rpki-client