Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
File:                     Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json)
Hash identifier:          7HhYJMj0GPlmhQvSKpT7x4jYsdKrNN9lF9GXMB5xqxA=
Subject key identifier:   F1:42:78:72:C4:8F:2A:DD:6B:5C:85:BF:6E:B5:C4:2D:66:28:C6:CB
Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
Certificate issuer:       /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Certificate serial:       0915
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
Manifest number:          1611
Signing time:             Tue 18 Aug 2026 18:34:48 +0000
Manifest this update:     Tue 18 Aug 2026 18:34:48 +0000
Manifest next update:     Tue 25 Aug 2026 18:34:48 +0000
Files and hashes:         1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: ZHNYUIjmoGUTMT7c5SZL1dVIen1JCSd9yvZZUOx9AMg=)
                          2: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (hash: uRyY95McYIcKyBbdYHA3Uc6sW+tgHG7zbgSz0a8bwDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl
                          rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325 (0x915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
        Validity
            Not Before: Aug 18 18:34:48 2026 GMT
            Not After : Aug 25 18:34:48 2026 GMT
        Subject: CN=6a84a5c8-5fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:5e:28:d0:69:77:9c:f5:08:9e:6c:d6:48:
                    07:56:f3:7d:56:ec:98:8c:b2:ca:c2:3d:6c:eb:47:
                    7f:8c:d4:73:ab:78:c8:6c:72:31:9f:03:9f:f4:b3:
                    c1:87:80:50:3f:70:b5:a1:c7:31:03:56:63:e4:bb:
                    e5:49:73:27:2c:b5:13:57:5b:b6:5c:9e:8c:26:cb:
                    a0:8b:49:49:58:1e:cc:ef:eb:fc:2c:0f:d3:81:13:
                    ca:a1:18:b1:cb:86:2f:43:e1:5d:e0:4a:6a:9c:0a:
                    24:da:16:06:44:c4:62:ae:90:de:68:ae:0d:01:20:
                    91:e3:91:15:75:30:5a:5e:62:8d:2c:51:70:84:e8:
                    cd:3f:ed:ca:f5:7f:7e:6e:4f:12:21:b1:5a:b5:26:
                    50:3a:b5:bd:80:a5:3c:af:c6:2d:ed:08:79:45:9e:
                    64:b1:c2:c2:d0:3e:1f:cb:ad:23:c2:35:8c:b2:a7:
                    97:58:14:d7:1a:62:d9:4a:1f:f5:cd:92:63:ae:2e:
                    25:e8:f5:01:02:0d:08:28:d2:95:35:c2:d4:e0:f8:
                    77:e9:12:2c:1f:72:87:d7:7a:b7:29:a8:01:b2:4b:
                    62:ad:b0:71:94:16:0b:08:6c:b6:88:39:92:f6:4e:
                    3a:5d:d4:b9:1d:f8:3f:ed:d2:f6:98:1e:27:50:1f:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:42:78:72:C4:8F:2A:DD:6B:5C:85:BF:6E:B5:C4:2D:66:28:C6:CB
            X509v3 Authority Key Identifier:
                keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b6:b7:7a:03:26:71:0e:ad:31:71:5b:42:aa:8f:03:db:78:
         79:d6:c8:34:d7:e4:74:c0:79:63:45:08:88:72:ae:f4:0f:68:
         0f:10:36:b4:72:4a:2b:ea:ce:73:78:6f:36:8a:89:1b:cb:b9:
         9e:b0:cc:b9:1b:6a:db:e8:26:0e:a9:1a:3d:c2:dc:b9:0d:74:
         73:53:b7:0f:b5:4d:6f:ce:f4:e7:7f:5c:a3:d1:4b:1a:8f:18:
         5c:7b:6f:48:b3:07:19:e0:41:26:f1:7a:12:79:ec:0d:4e:a3:
         03:98:7e:b7:13:df:39:fa:b7:31:8f:2f:e9:ba:91:0d:e8:ac:
         93:cb:20:c3:e5:14:9d:ed:21:4e:4d:6a:39:32:08:20:53:aa:
         cf:9d:7a:de:33:18:6d:1f:94:06:5c:7d:43:52:75:0f:a7:4c:
         f1:e7:14:db:d0:3f:2e:60:dd:aa:88:73:67:9c:8c:ef:91:d8:
         12:e8:b6:07:d1:cf:23:3d:47:f6:99:53:e6:42:84:bf:14:0a:
         b5:4a:a4:31:18:e3:ab:5f:a9:47:43:89:43:5a:a6:86:e3:03:
         31:58:60:a3:a2:b0:c2:e4:82:2d:49:ad:1a:a5:fe:ce:a7:01:
         b3:42:28:1b:5a:e3:90:85:27:1e:49:6e:3b:b1:60:ef:36:b9:
         58:ab:b4:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5
OUJFMDBENDIwHhcNMjYwODE4MTgzNDQ4WhcNMjYwODI1MTgzNDQ4WjAYMRYwFAYD
VQQDEw02YTg0YTVjOC01ZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxIVeKNBpd5z1CJ5s1kgHVvN9VuyYjLLKwj1s60d/jNRzq3jIbHIxnwOf9LPB
h4BQP3C1occxA1Zj5LvlSXMnLLUTV1u2XJ6MJsugi0lJWB7M7+v8LA/TgRPKoRix
y4YvQ+Fd4EpqnAok2hYGRMRirpDeaK4NASCR45EVdTBaXmKNLFFwhOjNP+3K9X9+
bk8SIbFatSZQOrW9gKU8r8Yt7Qh5RZ5kscLC0D4fy60jwjWMsqeXWBTXGmLZSh/1
zZJjri4l6PUBAg0IKNKVNcLU4Ph36RIsH3KH13q3KagBsktirbBxlBYLCGy2iDmS
9k46XdS5Hfg/7dL2mB4nUB+ZIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFCeHLE
jyrda1yFv261xC1mKMbLMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC
NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZE
bTNGNGtsbFkzLTZadmdEVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASba3egMmcQ6tMXFbQqqPA9t4edbINNfkdMB5Y0UIiHKu9A9oDxA2tHJKK+rO
c3hvNoqJG8u5nrDMuRtq2+gmDqkaPcLcuQ10c1O3D7VNb870539co9FLGo8YXHtv
SLMHGeBBJvF6EnnsDU6jA5h+txPfOfq3MY8v6bqRDeisk8sgw+UUne0hTk1qOTII
IFOqz5163jMYbR+UBlx9Q1J1D6dM8ecU29A/LmDdqohzZ5yM75HYEui2B9HPIz1H
9plT5kKEvxQKtUqkMRjjq1+pR0OJQ1qmhuMDMVhgo6KwwuSCLUmtGqX+zqcBs0Io
G1rjkIUnHkluO7Fg7za5WKu0YA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:16 2026 by rpki-client