Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          ed6G8sRS032vVvQQQljdM99BDiDWiyvf1V2yurXo5a4=
Subject key identifier:   10:B9:B7:18:EC:3F:DA:A9:7A:EA:CE:71:25:E9:72:5D:BE:B2:48:F6
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0EBC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0E8D
Signing time:             Sat 24 Oct 2026 14:22:47 +0000
Manifest this update:     Sat 24 Oct 2026 14:22:46 +0000
Manifest next update:     Sat 31 Oct 2026 14:22:46 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: QQVNqsU6PDAu3hr4e5FHyuyvaoSSuTiYe2j70Zys00Q=)
                          2: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: BgJh4zD4wVA6vueDCVPTNC8t5x//InfjVE6PnSk4dVs=)
                          3: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: d203/4qzc9h+hSrcLL8nLeuaomn8Z28uEnCu3k7Q+eU=)
                          4: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: w0JJZrGQyv8oK5rum9hMEp7rzJrhOm8IUGzDQDqo468=)
                          5: A2DC8C9A4F7B11F1A3D5282FCC833773.roa (hash: YUtSjt3WoGXo+IxfCpIihU+kCKwTBNB8WP+VlFPoQho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3772 (0xebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Oct 24 14:22:46 2026 GMT
            Not After : Oct 31 14:22:46 2026 GMT
        Subject: CN=6adcbf37-400f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:34:e7:31:4a:ad:36:3a:0b:bd:92:68:de:f1:
                    37:29:4a:4c:e4:1f:6b:72:2c:21:7d:1e:20:08:ea:
                    0d:e2:3d:eb:20:eb:32:e0:c4:f1:a8:c2:d7:bc:da:
                    85:e2:61:48:da:ec:43:29:d7:6f:82:98:03:13:46:
                    ac:a0:99:33:b0:1e:2a:79:30:7d:e5:31:17:f5:94:
                    06:fe:56:e3:35:3b:8e:5a:96:81:b0:df:28:3d:68:
                    ca:da:22:ef:21:dc:20:5c:1d:bd:ba:05:a2:08:81:
                    a9:74:a7:6e:23:8a:fc:47:40:f9:df:08:55:9b:37:
                    c1:c3:58:4e:91:fb:e2:16:af:00:10:f5:b6:80:3e:
                    07:5b:3d:77:bd:8a:a9:97:5c:56:3f:85:71:76:58:
                    a5:bc:89:b1:b0:25:de:63:4f:54:61:4b:30:0c:1d:
                    d5:60:0b:12:35:38:2a:03:64:69:0c:6c:c0:03:07:
                    f3:64:88:8f:84:19:83:32:33:5a:f5:4a:b7:a8:7e:
                    82:94:3b:e6:b1:53:49:5a:49:7c:fc:0d:08:59:d6:
                    6c:cf:a8:8e:26:ee:2f:73:b6:21:16:bb:f5:45:0c:
                    31:83:e3:da:15:75:2a:69:b1:0f:ca:b0:7f:4a:3c:
                    d1:9d:c7:aa:ea:1b:48:68:08:ab:e5:0c:1f:3e:68:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B9:B7:18:EC:3F:DA:A9:7A:EA:CE:71:25:E9:72:5D:BE:B2:48:F6
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4a:1d:20:d2:1a:c7:3a:ab:82:e3:96:ea:ff:2a:d5:24:88:
         1d:a7:01:93:59:1b:ee:a6:01:4e:30:17:cc:12:cb:da:a0:57:
         a8:99:65:aa:21:96:f7:01:b5:fb:86:f1:97:1a:0e:61:1c:dd:
         e1:be:84:68:b9:b2:81:d2:c6:a1:26:58:5c:ba:05:2d:57:e7:
         9e:45:7c:98:08:c4:68:69:ce:7c:50:a4:6e:2c:75:82:e4:f6:
         18:28:39:b5:55:61:a4:65:44:f2:e0:02:6b:3d:1e:3e:2d:c3:
         09:30:fb:57:bf:a6:bb:8e:58:96:d9:f8:01:fc:d6:88:43:7c:
         45:2e:00:7b:1a:58:3c:17:4b:4c:37:1c:3c:c4:d1:09:36:0a:
         fc:9d:57:63:91:e1:cc:ea:ee:79:a7:44:fa:2c:7c:23:04:b2:
         7b:cf:73:e4:46:f5:c4:4a:8a:db:9d:e0:89:46:7c:30:e6:8b:
         90:d2:62:c4:7e:6c:cb:1a:15:25:ed:23:ba:68:64:47:20:7d:
         c0:62:21:e4:6c:3e:e2:b1:57:7a:5e:4c:8b:41:97:de:43:ff:
         33:f6:65:e0:70:82:f4:25:83:b6:3d:e1:d2:5a:f0:7e:74:93:
         0e:94:55:a6:a4:48:43:1f:05:a2:25:e9:49:bf:0e:c2:c7:03:
         47:43:43:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:50:01 2026 by rpki-client