Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
File:                     cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json)
Hash identifier:          vlwEpmjt/deUJr2XFAlIMK0Oi9L6zYwLKTa8fM0mNOU=
Subject key identifier:   A7:42:D9:F9:2D:8F:A7:14:AA:B5:1C:25:5A:53:F7:51:91:9C:AD:25
Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
Certificate issuer:       /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
Manifest number:          0215
Signing time:             Wed 07 Oct 2026 03:23:04 +0000
Manifest this update:     Wed 07 Oct 2026 03:23:04 +0000
Manifest next update:     Wed 14 Oct 2026 03:23:04 +0000
Files and hashes:         1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: CV01N9g4wdczUJZ1MIvEw+SSVX547mfZnfsOpZ7ORbA=)
                          2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: 00LuaUNmIyPdgmkhjWdXCJt4yLwtEm0sc7JiqhVSo/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
                          rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
        Validity
            Not Before: Oct  7 03:23:04 2026 GMT
            Not After : Oct 14 03:23:04 2026 GMT
        Subject: CN=6ac5bb18-6360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:25:61:21:7a:73:73:28:c1:1b:cb:17:67:
                    35:ec:65:e0:e7:ef:8d:80:32:46:30:65:b4:e2:02:
                    16:dc:53:fa:71:ab:5f:08:92:4f:02:da:f3:d7:a0:
                    f6:1f:9c:95:d4:96:3b:18:bd:d3:c8:6c:61:c4:88:
                    5d:21:f5:51:5c:2c:d8:d2:66:d4:45:a4:6c:f4:94:
                    49:e7:c8:40:7d:87:3e:a6:9d:f8:db:98:22:8b:14:
                    ea:20:58:33:5a:56:7a:a8:74:7b:3b:90:46:13:d9:
                    8d:93:75:a9:a7:7c:86:88:7e:24:f5:2d:66:cd:75:
                    d1:fc:be:30:a8:ca:52:c5:f0:c5:2a:45:43:c6:b3:
                    b0:5e:1a:f6:35:72:48:62:e4:76:c0:18:26:32:24:
                    38:4a:8d:c9:44:fe:90:76:f0:28:11:8a:d2:ee:01:
                    b3:76:bd:80:2a:02:61:ca:ab:d9:aa:19:6a:d8:5e:
                    55:bc:c2:e2:5f:72:f5:31:97:21:ad:4b:f1:33:f9:
                    96:b9:12:cb:44:fb:e8:44:d2:2f:2a:06:28:d0:4c:
                    7d:5e:a4:da:1b:d5:25:94:dd:fa:18:7a:71:39:1f:
                    66:a9:39:7c:da:7d:7e:3c:52:1f:c2:ef:9d:6c:e4:
                    2e:24:3c:01:17:88:5e:e2:1f:1d:7b:61:9f:6e:95:
                    4a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:42:D9:F9:2D:8F:A7:14:AA:B5:1C:25:5A:53:F7:51:91:9C:AD:25
            X509v3 Authority Key Identifier:
                keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:7e:91:06:0b:81:1c:e6:61:7a:7b:9f:b7:0a:4c:5f:06:
         11:84:cb:6a:ec:b7:46:0b:12:4b:67:01:93:14:25:70:09:30:
         08:37:0c:b1:b3:a6:aa:0b:50:39:70:d5:3a:cb:65:ed:d6:97:
         8e:22:68:cc:eb:5d:3f:45:cd:7b:00:71:ce:61:07:29:29:d6:
         c8:4f:2f:64:3a:6a:04:3d:9f:da:3f:81:60:82:81:c9:1f:ff:
         77:12:ac:75:3b:7b:ca:2e:54:0c:5b:1e:37:c6:f7:00:11:38:
         80:7a:e3:52:4b:1b:d7:eb:66:f6:4b:57:21:9a:70:73:44:1c:
         28:6e:14:07:1a:35:60:a0:33:fc:99:2d:2b:21:1b:42:76:92:
         f3:90:de:0d:d1:6d:83:22:7b:2b:78:5c:8a:22:1d:d1:7f:0d:
         7d:58:5f:83:21:82:80:1b:65:37:f6:af:3d:e8:ab:95:98:8d:
         00:ae:1b:80:06:f4:a6:7e:41:93:ff:a7:d2:da:08:5b:f7:06:
         92:12:ba:7c:da:4d:be:89:b5:c8:0c:bc:e6:1e:11:ae:1d:a9:
         6b:67:8c:23:8b:f2:26:dc:1d:7d:99:62:03:d1:e8:32:48:23:
         c2:11:ff:c2:ea:a0:21:aa:35:2e:9f:1c:c4:7e:63:2c:70:1b:
         74:9a:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:02:44 2026 by rpki-client