Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          jznn3j5NRsmBzLSa/OcyDc6uWzc+Djl5XzTa7Zoqmqc=
Subject key identifier:   1C:E1:8B:B5:37:71:6B:4C:33:A7:53:7A:74:C6:B8:8D:F6:D8:7E:66
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0E8B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0E5C
Signing time:             Mon 20 Jul 2026 14:23:24 +0000
Manifest this update:     Mon 20 Jul 2026 14:23:24 +0000
Manifest next update:     Mon 27 Jul 2026 14:23:24 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: M1xgluIOTDNCB4SpueIdpATsv0mGh37h1coPOmhgQbI=)
                          2: A2DC8C9A4F7B11F1A3D5282FCC833773.roa (hash: YUtSjt3WoGXo+IxfCpIihU+kCKwTBNB8WP+VlFPoQho=)
                          3: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: BgJh4zD4wVA6vueDCVPTNC8t5x//InfjVE6PnSk4dVs=)
                          4: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: w0JJZrGQyv8oK5rum9hMEp7rzJrhOm8IUGzDQDqo468=)
                          5: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: d203/4qzc9h+hSrcLL8nLeuaomn8Z28uEnCu3k7Q+eU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3723 (0xe8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Jul 20 14:23:24 2026 GMT
            Not After : Jul 27 14:23:24 2026 GMT
        Subject: CN=6a5e2f5c-e212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:1c:8f:e1:e6:41:8d:1e:de:07:e5:82:62:
                    0f:c6:94:b8:53:94:03:53:89:29:61:ed:2f:b2:e7:
                    4f:ad:7b:a3:51:69:46:55:ce:dd:37:49:0c:69:e3:
                    61:d3:77:c1:ad:5a:ae:e1:c8:04:1c:a5:13:61:f3:
                    ac:d9:18:2b:e0:bd:70:0b:7a:ff:04:af:1d:d9:b2:
                    8f:7b:c1:3b:2b:7f:6b:68:e3:92:07:16:1e:4d:a1:
                    fc:f9:d8:87:67:80:c0:6d:ce:38:9a:77:c6:1b:db:
                    c6:af:6d:10:e2:a4:3e:6b:67:aa:42:ab:e4:38:8a:
                    c5:47:9f:df:cc:b8:22:63:a9:4a:83:0e:ce:04:47:
                    c4:cf:93:27:a8:0f:5b:ed:c5:4b:be:b0:54:0a:73:
                    92:3e:52:52:90:15:fe:53:c9:49:69:2d:fe:e4:92:
                    88:e9:63:4e:c9:76:e6:c2:f7:2f:fb:fb:16:90:7f:
                    f2:e3:55:82:af:c3:62:61:e4:cf:33:66:a3:a1:0d:
                    68:7a:2b:31:24:cf:57:7d:ec:e2:37:1c:1c:ee:49:
                    de:15:1f:64:f4:f9:fb:fd:59:30:f5:da:0e:39:13:
                    c1:b6:76:49:02:8d:cb:e2:f9:1c:39:2c:bd:38:9d:
                    24:cb:6f:2f:28:b0:63:63:dc:78:89:47:27:5d:42:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E1:8B:B5:37:71:6B:4C:33:A7:53:7A:74:C6:B8:8D:F6:D8:7E:66
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4b:28:03:be:3d:7f:7d:0e:1e:b5:d4:4b:80:f5:a9:a2:36:
         ec:e0:19:76:cd:39:d1:12:9f:d7:df:ad:48:10:99:9b:5d:ba:
         b8:e2:9b:52:47:b6:3a:5f:a0:71:74:3a:c6:34:76:a9:fb:5b:
         4c:19:b4:d8:3b:09:6b:18:51:6f:bd:b2:05:56:06:29:89:ab:
         0e:96:95:3b:03:0d:4e:29:28:6f:4d:45:d9:82:c3:7b:b4:82:
         91:44:09:bf:aa:2d:65:23:e4:3a:dc:4d:67:2d:f8:85:3d:0d:
         de:d4:b2:7d:bd:c9:ce:9a:d7:e0:3f:9d:2b:80:6b:c0:3a:bf:
         ba:11:1f:ae:55:04:4e:4d:ba:3b:94:ef:44:b2:77:b5:84:33:
         7a:84:4c:9c:c6:1c:71:52:01:a2:e7:9c:81:0d:91:55:0e:b8:
         d8:11:a1:78:05:1c:c4:44:74:4d:d8:8b:c7:10:85:07:42:b8:
         17:5b:10:8a:9b:40:e8:bf:28:c6:4f:98:c5:58:b8:da:10:31:
         b4:f6:8d:03:bb:45:7b:ac:c1:89:ac:b6:bc:70:cd:37:14:d7:
         84:79:1d:5e:24:e0:a4:3f:f5:8b:97:6c:15:dc:df:71:50:26:
         21:f1:6a:83:c8:56:cf:2b:94:b7:b4:4d:a0:f6:6f:f7:62:56:
         db:1f:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:49:33 2026 by rpki-client