Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File:                     ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier:          fYzV1Znf8qPNDyf3LDF9Gj1PtUpHM9SKMB+gnenrHGs=
Subject key identifier:   39:9C:55:4B:7B:C3:B5:81:EA:22:34:93:EA:6A:3B:ED:E8:E3:82:29
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer:       /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial:       048E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number:          047C
Signing time:             Sun 25 Oct 2026 00:01:20 +0000
Manifest this update:     Sun 25 Oct 2026 00:01:19 +0000
Manifest next update:     Sun 01 Nov 2026 00:01:19 +0000
Files and hashes:         1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: jljFIA4VeH4kjwPqZ0Z1wkZbiBy89bEj3zYm/me3EZ0=)
                          2: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: rnGgn8k/c8Zid4oEdERz/qcES9MxLTZSwdtdf5qqEqg=)
                          3: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: EDtbFOZ30qxpy27dyAdV7M2WWSG7NvMRonEndm53RCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
                          rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 00:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
        Validity
            Not Before: Oct 25 00:01:19 2026 GMT
            Not After : Nov  1 00:01:19 2026 GMT
        Subject: CN=6add46d0-3a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d6:19:d6:05:34:be:21:69:c6:ef:29:1d:7e:
                    dc:54:96:24:91:61:e8:e6:87:c9:a8:0f:2f:bc:13:
                    6e:f7:2a:ef:3f:83:ca:68:90:51:b9:16:1d:02:a2:
                    82:72:69:60:84:7a:40:0a:d5:03:ea:6f:38:28:2c:
                    a0:24:86:cf:7a:1f:dd:1a:a3:6d:d7:01:9e:27:92:
                    72:dc:cc:ed:72:31:ad:48:b5:6c:a2:27:b4:36:07:
                    4f:e7:ab:30:bd:ff:c4:ab:98:6e:7c:d0:41:0d:ca:
                    b7:c6:24:66:6b:66:fe:76:3e:d5:a0:0e:84:b9:53:
                    ba:5f:ba:c6:c6:12:54:26:8f:cf:3b:3f:69:7f:28:
                    b0:6c:1e:0b:3b:f8:c5:67:79:63:84:cd:97:8f:d9:
                    d3:5f:24:62:c2:36:d1:74:67:92:97:57:fc:09:81:
                    ab:11:25:d1:9d:53:12:53:91:6a:ce:f7:c7:29:0f:
                    3e:63:0a:7b:9a:a8:cd:52:00:20:42:e3:0d:ae:54:
                    fd:48:69:f5:50:ec:dd:75:0a:4d:84:20:3f:98:25:
                    45:4e:d5:11:01:54:b9:b8:e0:f2:79:56:3b:07:13:
                    47:76:6e:33:c1:43:fb:6d:85:0c:f0:43:0f:a1:db:
                    6b:c5:96:69:9e:27:1d:66:fa:16:3d:29:17:6e:fe:
                    95:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9C:55:4B:7B:C3:B5:81:EA:22:34:93:EA:6A:3B:ED:E8:E3:82:29
            X509v3 Authority Key Identifier:
                keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:45:25:1d:8d:7b:5c:fc:eb:ba:b5:a9:6e:14:9e:51:12:aa:
         a5:79:8d:f4:da:e2:a7:3a:9a:84:e6:45:fd:6e:06:9e:6d:ba:
         b4:76:a8:4f:71:63:f9:e4:fb:08:09:0a:a3:8b:8f:69:32:ba:
         c1:e9:77:c5:18:51:e0:61:bf:7c:b7:77:26:5e:69:4a:37:a7:
         ee:43:2a:c3:70:c2:63:53:a6:c4:75:fe:1c:be:89:4d:ba:37:
         a7:c7:07:41:93:d3:71:26:f9:6c:d7:79:11:a8:cc:ac:f4:8b:
         e4:f3:50:77:1c:59:1d:f4:4a:65:f0:07:4b:04:70:f2:ad:54:
         49:bf:59:57:97:e2:1e:53:70:5f:63:4c:d1:9c:95:e1:3c:3d:
         d0:f0:01:50:3a:d5:34:93:66:7f:fd:65:a7:70:e6:cd:8f:d1:
         43:07:9a:79:39:c2:5c:91:b2:e3:20:56:0f:94:d5:fd:4e:21:
         9e:8b:f4:3d:e6:1b:ca:37:08:29:94:e0:9a:ac:2e:3f:59:5a:
         2c:9e:84:f6:d9:a6:34:70:99:1c:2a:a9:85:84:e1:12:a2:53:
         7f:5c:ea:b7:7e:b3:22:9b:72:c9:dd:ee:a5:dd:9e:fc:ba:86:
         bb:68:10:32:02:e0:d7:9b:37:4c:b7:e9:32:a6:a6:0f:a7:98:
         d8:a1:b0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:05 2026 by rpki-client