Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
File:                     a7IptQZEL6BIpPedPLRPoOAEeUE.mft (raw, json)
Hash identifier:          g/wyAMayRHvyYO0KEYCRH488kEgkKBPxtmxlRuAwKb0=
Subject key identifier:   A9:66:44:78:F1:B4:12:2A:8B:20:56:97:3F:BF:6D:23:6A:0E:BE:80
Authority key identifier: 6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41
Certificate issuer:       /CN=A913C928/serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
Certificate serial:       0845
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
Manifest number:          083C
Signing time:             Tue 22 Sep 2026 20:50:35 +0000
Manifest this update:     Tue 22 Sep 2026 20:50:34 +0000
Manifest next update:     Tue 29 Sep 2026 20:50:34 +0000
Files and hashes:         1: a7IptQZEL6BIpPedPLRPoOAEeUE.crl (hash: IxhhR3DhTL9CE/Myik/wRsLsOhR700PiyRzwbyN0SsU=)
                          2: 08D6D5122A4511EBA2903755C4F9AE02.roa (hash: m4dk1K+WWOtebN67fEZ/Rpy7CEAi/9tqXla7KqXBJoQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl
                          rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117 (0x845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C928, serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
        Validity
            Not Before: Sep 22 20:50:34 2026 GMT
            Not After : Sep 29 20:50:34 2026 GMT
        Subject: CN=6ab2ea1b-c0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:c1:ad:8a:0d:8e:a1:98:4d:f5:5a:bb:86:
                    9d:04:22:8c:b5:d1:98:48:72:a6:a2:66:b8:77:fc:
                    9c:5c:47:9e:1b:bd:b0:19:22:2e:24:a6:59:94:78:
                    e3:3c:d0:2f:d3:49:b5:13:6b:e9:95:f6:a6:e7:d0:
                    31:ca:4e:33:64:5f:0d:ae:31:67:5c:27:4c:2f:9c:
                    62:20:0a:5c:87:69:87:d5:99:33:8e:0f:7a:84:c2:
                    24:b7:9e:c6:f0:47:f1:d6:fa:54:cc:f9:72:6b:8a:
                    c2:c1:5e:e5:2d:ff:46:20:50:67:eb:1d:49:95:01:
                    7a:dd:63:a2:9c:b7:fe:ba:67:66:41:ce:77:7a:5c:
                    2d:bc:73:67:20:70:fc:7c:14:9c:f3:d5:d1:78:39:
                    71:b1:84:98:b3:3b:61:e9:dc:6d:cd:45:82:36:c5:
                    bd:13:a0:06:07:6d:2f:9c:2d:63:9e:f4:a2:84:cd:
                    58:7a:58:0c:e1:7b:f3:3a:ae:6f:b9:d8:16:be:35:
                    bb:f4:f5:cb:3f:98:83:7e:05:b8:00:cf:fe:f7:e5:
                    f9:e5:d6:d5:15:52:91:27:42:c3:e8:e8:df:46:8e:
                    3d:fa:a8:51:a5:34:da:f9:ec:9b:12:38:6e:7c:b2:
                    d5:42:a4:81:e7:86:c5:84:4f:5f:b1:c9:9e:dc:f4:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:66:44:78:F1:B4:12:2A:8B:20:56:97:3F:BF:6D:23:6A:0E:BE:80
            X509v3 Authority Key Identifier:
                keyid:6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ec:fa:8a:4a:93:be:93:e9:fe:4a:eb:98:1c:b9:8b:bc:6d:
         f3:0b:c4:0c:9e:cf:56:77:6a:86:52:8e:80:56:bb:e6:87:39:
         2a:b6:14:80:77:c9:14:b0:3f:36:86:85:65:ea:01:8b:76:02:
         48:ba:10:be:d1:01:4f:06:58:96:5e:94:49:85:8c:b9:5c:29:
         b9:53:4f:a4:11:ff:17:e3:2b:0d:40:f6:df:a6:4e:c3:5c:9a:
         57:15:db:45:16:d4:67:95:91:dc:94:e9:8d:ff:61:3e:f9:37:
         84:b5:35:11:23:d4:92:46:2c:08:a2:08:50:be:ed:c4:d3:39:
         ea:7b:33:00:3c:6e:5d:3e:77:16:47:13:3c:e4:42:c6:e0:0e:
         57:71:98:2d:e8:9d:32:4f:bb:8c:cf:d0:ac:71:60:b4:78:f6:
         f3:d9:ba:ae:16:0a:24:41:31:4f:ea:5d:00:97:8c:a6:93:54:
         b3:30:2a:fc:35:7a:29:fb:c6:55:d6:3a:52:8e:45:a3:3e:c1:
         d6:db:5a:be:78:8f:35:ca:80:71:fd:fc:6c:cd:a8:56:0c:b3:
         6b:c8:5d:3d:5e:66:62:57:80:83:3c:12:1e:67:39:c9:dd:87:
         9c:08:77:21:9a:32:ef:92:19:e8:97:ca:ae:ec:37:f8:9c:a9:
         e4:29:8c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:16:07 2026 by rpki-client