Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
File:                     mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft (raw, json)
Hash identifier:          fOQMIRDrw3Udz6CCmhLjgnn9M1CviyRF2ZbsfqwG41Y=
Subject key identifier:   B0:6E:F6:20:91:A3:89:98:60:E2:7E:17:04:64:95:1B:A7:28:C6:4E
Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54
Certificate issuer:       /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
Certificate serial:       0953
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
Manifest number:          0949
Signing time:             Thu 08 Oct 2026 20:17:08 +0000
Manifest this update:     Thu 08 Oct 2026 20:17:08 +0000
Manifest next update:     Thu 15 Oct 2026 20:17:08 +0000
Files and hashes:         1: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl (hash: gPeE8clJPkEj5J8p7D772xSwQuYdVYwl/BOV/ww673s=)
                          2: F011FBC4CBDF11EAB6162265C4F9AE02.roa (hash: 8EHV/VMSXrOjjAZpqhkbeICGznRfE8ag9yaU9XrZYcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl
                          rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 20:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F7E7, serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
        Validity
            Not Before: Oct  8 20:17:08 2026 GMT
            Not After : Oct 15 20:17:08 2026 GMT
        Subject: CN=6ac7fa44-0498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:20:27:e9:0f:ac:11:73:77:fa:a0:7a:a9:
                    11:35:4e:75:bf:f5:8f:53:f2:65:c3:c5:92:00:ce:
                    b1:99:8b:5f:71:96:5d:a5:9f:73:f4:41:c2:13:9d:
                    d3:87:51:0e:a1:b7:02:aa:f5:1a:12:33:47:97:30:
                    a2:38:e6:27:fd:fa:51:08:09:d2:2c:22:c2:15:dc:
                    0f:db:bb:44:2f:b8:21:08:54:8e:ed:69:94:9f:bf:
                    2e:ab:11:d4:73:2f:41:48:18:c4:b2:d8:f6:0e:41:
                    d8:39:0d:79:bb:a7:44:95:91:18:df:ba:97:e9:9a:
                    43:0a:88:9b:32:4b:1b:04:08:b5:71:63:b6:a2:06:
                    b8:09:45:d8:70:18:5c:ea:f1:5f:b1:96:7d:b1:52:
                    1e:c8:f9:c0:60:b1:31:4f:9e:ea:f3:a5:54:87:a3:
                    b0:bd:f4:2a:45:7e:e5:ab:76:7a:18:70:d5:be:92:
                    ac:0b:e5:ea:ab:62:71:0e:8d:c1:2f:35:82:12:aa:
                    8a:c1:c5:be:dd:3f:50:45:29:77:2e:bd:e1:a2:41:
                    4e:ed:c0:62:2d:91:e2:11:ef:2c:22:c4:90:30:08:
                    db:62:8b:0c:05:5b:6b:f4:45:28:c6:45:85:74:cd:
                    ed:c8:6f:ce:d6:37:7a:5e:66:6b:b0:18:f0:82:27:
                    48:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6E:F6:20:91:A3:89:98:60:E2:7E:17:04:64:95:1B:A7:28:C6:4E
            X509v3 Authority Key Identifier:
                keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:43:7c:ea:76:ec:41:93:44:25:59:c2:ba:c9:16:80:cb:0d:
         74:e7:c5:36:c9:20:0e:c7:6a:ba:58:f5:b3:95:98:d9:88:ac:
         ce:e6:ee:a3:43:73:92:a0:5f:ea:a5:f9:de:70:8d:ab:53:f6:
         69:ea:91:66:60:9c:bd:84:9b:38:ee:20:0c:ee:cd:fb:08:c9:
         b2:b1:c5:1b:bb:71:c5:e8:fb:9a:d4:19:e4:ca:76:a8:b2:4e:
         7f:05:4c:fa:b1:ab:ee:71:a5:e4:a8:5e:e6:d9:28:7a:a7:94:
         16:02:78:d9:95:5a:0f:2e:ea:0e:c6:7e:2d:41:a0:0d:ac:0f:
         3d:80:d1:2d:f8:49:a0:d7:bd:8a:fd:d3:78:6b:60:c8:47:c2:
         bc:5a:1f:90:55:a7:9d:ad:33:70:91:2f:77:86:ca:3b:be:92:
         58:6b:ff:83:1d:b8:06:21:13:9b:d0:49:a3:25:f5:f6:cf:0a:
         41:69:85:f5:89:8f:48:18:aa:4e:b2:d6:74:2a:00:38:0b:e7:
         77:ab:9d:b7:4a:b3:33:5f:69:59:32:b6:8a:d7:e0:40:16:e9:
         82:13:73:f1:4a:68:e5:5c:a3:0f:5d:31:a8:12:df:cf:e9:68:
         d0:d2:d2:77:fb:c7:6b:25:c1:f1:4f:f5:d4:e0:15:8d:d8:59:
         72:f7:0d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:46:27 2026 by rpki-client