Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File:                     78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier:          mIWOscxy1q5wFjBprT2XNyJXytjxDptO8CLUCMJPzk4=
Subject key identifier:   25:C3:FE:33:F2:25:91:0B:F6:7C:F3:28:79:8B:18:1B:C7:8F:95:70
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer:       /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number:          01B3
Signing time:             Wed 23 Sep 2026 03:50:16 +0000
Manifest this update:     Wed 23 Sep 2026 03:50:16 +0000
Manifest next update:     Wed 30 Sep 2026 03:50:16 +0000
Files and hashes:         1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: Pow4lg0sGHB1DdqjG65vX7q5uQ/ZvB/811S0pWrYddk=)
                          2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: MdOZTC8gpcPZCiwvzVVuxWOX/YON9CbP3KqKS9V1nVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
                          rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
        Validity
            Not Before: Sep 23 03:50:16 2026 GMT
            Not After : Sep 30 03:50:16 2026 GMT
        Subject: CN=6ab34c78-8ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:3f:3e:b9:2f:b7:4d:99:be:fa:10:ff:09:
                    cc:34:21:54:b6:f7:f7:9c:93:c0:5e:fb:85:6f:40:
                    b8:74:83:a7:c0:37:ac:50:3f:2b:c9:a7:bb:0d:9d:
                    2c:a9:bd:af:ab:cd:ac:ae:34:37:92:27:92:c7:8c:
                    7e:48:78:df:c7:ec:0e:d0:3f:72:2e:a1:4e:7d:4a:
                    5f:e7:97:a8:e7:5c:22:6c:c9:4e:6e:a4:e1:b7:24:
                    e0:54:aa:b3:4a:33:2d:34:86:c1:f9:21:f4:04:73:
                    a9:b1:c7:a3:e0:a3:d4:41:67:07:45:39:0b:1e:d3:
                    12:a4:79:fc:bc:92:86:2c:bf:3c:10:e4:67:27:c5:
                    9a:5d:bf:fa:1d:72:88:41:8e:73:bc:9a:25:48:29:
                    16:33:8c:6c:5a:12:a3:63:31:33:d5:f1:68:6c:bd:
                    0a:d6:8d:1e:db:90:db:ba:b5:56:d5:35:2f:85:6e:
                    7d:2b:ea:b4:4b:07:1f:17:6b:e6:1b:94:bd:76:68:
                    a7:be:66:f9:fc:0a:c4:6f:02:3f:2f:1f:6e:f6:58:
                    e2:4b:c4:70:10:f8:e7:61:3d:5e:02:a2:e4:ef:e0:
                    fb:27:d4:8d:d9:e1:d5:8d:5f:29:e2:34:bc:4d:07:
                    63:b5:4b:84:4c:a4:5c:cd:62:51:3a:63:0a:2a:ef:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C3:FE:33:F2:25:91:0B:F6:7C:F3:28:79:8B:18:1B:C7:8F:95:70
            X509v3 Authority Key Identifier:
                keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:91:a4:25:fa:7e:5f:04:fc:39:f4:10:59:f2:3a:f2:da:
         b5:93:30:ff:2c:7e:9a:9a:63:39:4b:b8:80:a7:c0:3b:fb:55:
         75:89:92:b6:5d:bd:63:6a:82:12:f1:29:4a:7c:f1:b7:3d:1b:
         c1:9e:e9:49:5d:76:4a:14:ee:8d:7b:31:93:50:d5:4a:c1:39:
         2c:49:2d:d6:86:62:e7:9e:3f:f7:c6:b7:9a:32:98:4f:e9:4e:
         27:74:23:57:a0:bf:c4:09:fc:fc:19:79:43:74:d6:01:5d:8d:
         b9:9b:6b:46:07:dc:de:85:85:b0:49:87:49:06:15:50:68:66:
         a4:9f:c1:3b:45:76:a3:06:1d:17:02:55:81:e6:be:9e:77:53:
         f7:fd:f4:55:58:10:55:7a:e9:82:d3:36:1d:75:78:a5:ec:e8:
         3a:dd:84:aa:21:6c:dd:be:c8:4d:90:72:df:d4:98:7d:36:d3:
         0d:f9:a6:51:eb:01:b3:e3:a3:4d:36:c7:97:7e:55:75:d3:ba:
         2d:f5:3a:01:33:a7:6e:94:6c:9c:5a:40:e1:68:f0:b6:d8:33:
         9e:af:2d:6a:1d:2e:88:07:26:31:56:37:f8:fa:2f:f5:63:9c:
         45:42:c2:90:22:c5:31:db:4c:88:6f:f0:8d:71:53:91:3a:c7:
         a1:76:81:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:23:22 2026 by rpki-client