Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File:                     7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier:          x/9OXAPQtM7txq3HYqfTiyg7IvZneR7ebF2hyzXYMN8=
Subject key identifier:   65:4F:D3:9A:88:89:99:48:72:F7:7A:6D:A6:FD:95:11:64:E7:3A:86
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer:       /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number:          0158
Signing time:             Fri 25 Sep 2026 05:14:15 +0000
Manifest this update:     Fri 25 Sep 2026 05:14:14 +0000
Manifest next update:     Fri 02 Oct 2026 05:14:14 +0000
Files and hashes:         1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: nzXQW369yys4L6jFMZIs9UHOwI+RqGcWeYTMtZtb6UY=)
                          2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 1MNrxKgQIdnkp7DGKWCKsge4/v205nBecHy5tmcmZDU=)
                          3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: hENFINj2b9wOIFxjK3nr2DrkTGbz4MTQ9pqxVPQHBxY=)
                          4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: WDWRrI/KRtPcAbR2bWOuMpgztLrYoQZ12yzCIYDgRAs=)
                          5: C41B6A98396E11F1992DA1BA96833773.roa (hash: BPXuBuSemYn/E+9Uo6D+b9G7/Ig6Oc1u1YHeb89/AEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
        Validity
            Not Before: Sep 25 05:14:14 2026 GMT
            Not After : Oct  2 05:14:14 2026 GMT
        Subject: CN=6ab60326-de13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3f:d6:ba:12:45:c0:1a:2e:9c:db:ca:ef:ed:
                    8d:a7:57:46:3c:30:20:dd:ce:7f:9e:d4:04:43:98:
                    b7:37:32:7b:5b:e1:a6:21:f9:5f:37:2d:ba:26:6f:
                    b6:ce:69:9f:f4:07:11:72:af:3f:29:23:94:2a:85:
                    cf:14:a9:37:0f:e8:46:1d:61:4f:28:7e:4e:29:fe:
                    2f:d6:ab:0e:74:b4:a4:32:a3:18:37:88:b1:03:eb:
                    2b:15:37:6b:96:2d:f5:a3:69:e9:e0:63:a1:f8:05:
                    96:49:6f:28:f1:44:bb:07:ad:7b:aa:1a:bb:e3:40:
                    1d:dc:57:99:ad:99:cc:c9:0b:e4:29:93:da:14:60:
                    e4:eb:6c:e4:e8:84:9c:fc:60:27:fa:6d:e4:54:c7:
                    09:9e:e8:04:c0:4c:56:74:04:47:6d:02:51:72:c5:
                    cb:d7:80:b8:f0:db:5f:f1:3b:06:a1:7f:57:df:6e:
                    be:3f:85:0e:d0:71:aa:09:d0:76:cd:db:00:49:c0:
                    83:dd:f7:01:ce:66:7b:09:5e:09:ce:50:b1:ba:83:
                    51:12:7a:c0:c1:f2:ef:92:49:a1:af:05:dc:5b:0f:
                    dc:8d:5b:a8:96:32:8c:16:8e:e2:9e:95:b4:e9:b1:
                    ef:2a:ab:0e:2a:29:dd:ad:10:13:cb:f7:73:81:b3:
                    94:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4F:D3:9A:88:89:99:48:72:F7:7A:6D:A6:FD:95:11:64:E7:3A:86
            X509v3 Authority Key Identifier:
                keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e2:66:e7:d8:f1:6f:a0:5b:fe:e5:25:5a:a5:df:17:c7:9f:
         61:e5:ed:8c:4a:c9:72:01:0c:27:dd:e6:3b:56:b6:09:47:59:
         3f:f5:4a:50:aa:79:3d:ab:42:17:43:74:cf:be:0b:f8:19:43:
         16:97:e5:4a:98:09:af:af:3b:27:bd:c1:e4:10:11:76:e9:39:
         fd:ad:6c:01:d5:63:5a:e1:26:63:f6:e4:09:75:64:67:4f:ff:
         8e:90:27:1c:0a:ae:1a:df:ac:98:cb:ed:67:27:e2:a0:33:87:
         c6:5a:9c:13:2a:c7:00:82:d9:9b:40:2c:3a:c6:6a:29:f4:57:
         c8:fb:6d:29:8a:4b:fd:8a:22:61:81:f6:5b:15:5e:b1:b6:42:
         25:cb:b8:f0:c2:96:40:b8:59:68:9c:a1:7b:48:f0:d0:1a:35:
         d4:86:ad:06:98:6c:cc:71:9c:fa:e8:51:60:3b:bd:d6:4d:68:
         4a:f1:e1:3c:ce:2d:a7:42:f9:b4:46:03:29:d7:cd:13:52:d9:
         93:fd:96:e5:d4:b4:6c:88:b5:b9:43:90:7a:6d:cc:36:91:e7:
         70:3c:45:f5:c0:79:12:93:d4:04:e7:99:53:94:05:dd:a5:5c:
         5e:70:de:ec:df:a7:5f:0f:f7:90:33:cc:58:c2:c2:8f:70:8d:
         41:2d:5b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:47:54 2026 by rpki-client