Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File:                     49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier:          6Ks5nT/JL6UvGYuJz1ljeqz+h6y5C3c2ARREL+OXe6I=
Subject key identifier:   19:15:1E:36:A9:3C:70:EB:A4:CD:62:6C:82:C4:D3:83:75:DE:DF:67
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer:       /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial:       122F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number:          1215
Signing time:             Fri 02 Oct 2026 17:18:24 +0000
Manifest this update:     Fri 02 Oct 2026 17:18:24 +0000
Manifest next update:     Fri 09 Oct 2026 17:18:24 +0000
Files and hashes:         1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: c+321WzPIby0Sxz4bGjtN3spwVZraDFtR5q4KbphXSA=)
                          2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: dJ40ZvkvEtXP02NZp3lyJfj9qvrbjW3gvJFMNBqnO1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
                          rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4655 (0x122f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
        Validity
            Not Before: Oct  2 17:18:24 2026 GMT
            Not After : Oct  9 17:18:24 2026 GMT
        Subject: CN=6abfe760-dca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:12:4d:ea:f5:f2:ce:ac:8e:2c:0b:ca:4d:
                    4b:4d:df:2c:c8:8e:15:15:18:04:68:cb:13:90:e9:
                    11:21:af:00:4e:f4:84:e2:75:49:19:2f:c2:cd:9e:
                    d6:28:25:a9:68:d0:4b:c5:8a:3f:76:58:e9:31:23:
                    1e:e1:ea:3f:a3:d9:d9:a7:0a:a2:70:ef:f5:a5:ff:
                    d5:2b:25:01:53:bc:45:1a:d9:26:81:f2:3a:ef:43:
                    31:eb:db:f0:07:33:89:35:a4:2c:c0:c8:4e:53:ec:
                    0d:59:76:61:2b:4a:7c:48:06:73:5e:38:1f:bf:31:
                    a7:64:8b:35:25:a1:f5:3c:b9:86:66:cb:ed:15:8e:
                    c3:cf:c2:41:b3:25:07:25:c5:bc:44:60:ea:e5:9a:
                    10:cf:5a:2a:fe:9e:35:63:2a:4f:94:e8:08:5a:38:
                    db:0e:85:2a:f6:dc:ec:6a:b7:87:83:51:67:95:1e:
                    c2:d8:13:48:f5:3c:9c:64:60:77:30:8b:00:7a:dc:
                    a8:bd:f0:f1:72:94:fe:28:f0:46:cc:3c:84:f8:1e:
                    90:93:fb:89:93:b7:bb:1c:0b:bd:be:59:45:76:e5:
                    1c:b5:88:23:25:4c:fe:03:86:26:f3:a9:b0:75:b4:
                    12:95:f8:0a:5c:f7:d0:9c:01:69:a2:90:0b:48:ee:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:15:1E:36:A9:3C:70:EB:A4:CD:62:6C:82:C4:D3:83:75:DE:DF:67
            X509v3 Authority Key Identifier:
                keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0d:3b:e9:be:b3:aa:54:d5:9f:48:60:2f:a6:45:9d:d7:e5:
         79:1f:16:77:b4:7d:1c:37:8c:17:cc:77:8c:46:b5:46:7e:42:
         a8:b4:d0:d9:32:43:0d:a6:a7:ad:30:ca:87:8f:6a:36:a5:e0:
         2a:b0:ac:74:10:02:75:c3:4c:f8:f4:15:64:92:04:7b:f5:b9:
         de:4e:3f:66:c5:5b:59:ee:c0:b4:dd:17:42:71:2c:0b:ae:ec:
         3c:87:aa:6c:9b:2d:64:8d:1b:5e:df:3b:da:b9:19:49:e9:be:
         f0:8d:10:2d:ec:af:5f:2c:17:c3:b8:90:b8:b3:e4:99:80:94:
         8d:f0:e6:a3:76:33:2c:7a:46:38:af:65:75:9f:5d:3c:0c:97:
         66:9d:95:08:a5:f6:2b:da:00:ad:f2:3a:cf:39:60:22:88:3e:
         f4:cc:d2:bc:5b:5d:73:fc:b9:5d:d7:fc:3b:62:62:08:39:78:
         76:71:83:7f:b7:1d:0f:40:e5:e5:10:8c:d5:f6:9a:82:db:9f:
         65:73:10:a0:29:50:85:a3:a9:7a:13:9e:84:c7:29:83:79:36:
         92:16:ad:f3:87:30:40:5b:bf:a1:64:08:73:3d:01:ee:f7:e5:
         05:57:40:af:85:9a:64:31:7f:10:70:c2:01:a9:1d:88:d5:dc:
         1a:74:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:03:10 2026 by rpki-client