Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
File:                     gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json)
Hash identifier:          d/lpahTvDU0lYpXuRe4G+n8cvsDhEo4BKQjTrKI/+bw=
Subject key identifier:   4E:47:45:EA:C7:51:E4:9B:03:92:0E:1A:94:C3:F7:48:52:5C:4B:9F
Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
Certificate issuer:       /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Certificate serial:       0713
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
Manifest number:          070B
Signing time:             Tue 22 Sep 2026 21:50:19 +0000
Manifest this update:     Tue 22 Sep 2026 21:50:19 +0000
Manifest next update:     Tue 29 Sep 2026 21:50:19 +0000
Files and hashes:         1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: e5wND+G1otFL2NnE9H+kirPvZOnz9OesV13YN1TUG4M=)
                          2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: M577gprOgopViMBlM2br8rPqwyVug+teBZ5+ccpEPA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
                          rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1811 (0x713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
        Validity
            Not Before: Sep 22 21:50:19 2026 GMT
            Not After : Sep 29 21:50:19 2026 GMT
        Subject: CN=6ab2f81b-bcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:2e:7e:d5:e3:a6:30:d0:eb:ce:40:d5:02:
                    44:92:e7:df:d0:95:e4:5f:91:bc:06:f1:da:8a:da:
                    90:2c:a4:2a:d6:6e:12:d1:31:3c:83:e4:60:e3:4c:
                    3c:6c:9f:b7:7c:7f:e8:df:02:d9:9e:2b:9b:da:46:
                    3e:58:4a:90:a6:f4:d3:f5:82:3a:8e:56:7f:8b:a8:
                    1a:45:48:ab:47:c7:e4:b8:d4:eb:b2:f5:0b:87:b1:
                    53:fd:f8:02:cd:3c:54:88:a1:13:19:e2:02:bb:a1:
                    c1:d7:80:89:04:c8:e9:3e:8f:3f:b8:6e:b8:83:87:
                    bb:98:10:78:eb:cc:8c:30:10:aa:75:e9:ea:f4:a0:
                    a3:a8:2f:67:e7:1e:bc:c0:14:79:db:36:94:36:a3:
                    cd:41:59:0d:82:1b:9d:c0:fd:59:69:f9:57:83:21:
                    52:68:04:17:30:a3:2b:60:b9:57:4c:d2:78:99:79:
                    d4:ae:3c:71:95:23:60:f9:0c:6e:b2:1a:28:16:ca:
                    d3:e5:a5:47:86:91:24:89:a6:32:93:d1:d9:40:db:
                    0e:cd:b8:15:83:82:03:b5:2d:f4:a6:e9:b2:c1:81:
                    94:04:7d:09:2a:d4:fa:13:b5:b0:2e:65:46:4b:70:
                    3c:15:d9:71:74:0e:14:ca:a6:be:f5:48:26:1c:1a:
                    ae:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:47:45:EA:C7:51:E4:9B:03:92:0E:1A:94:C3:F7:48:52:5C:4B:9F
            X509v3 Authority Key Identifier:
                keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b3:8f:b1:c0:a9:ef:0f:f1:50:f5:9c:25:3b:4d:34:49:2d:
         26:11:a4:09:f8:d0:f7:95:48:40:8a:31:8b:ce:1f:db:8c:78:
         ae:19:a8:77:0c:26:e2:5b:ed:d0:b9:c4:78:6c:c7:b5:65:5d:
         78:1c:9c:a8:dc:db:97:68:6b:15:24:33:39:bc:c6:ea:79:92:
         5e:2a:68:21:92:c9:bb:98:9b:dd:12:b3:c7:af:2a:52:27:ab:
         27:14:18:3a:32:6b:52:62:05:94:7c:56:ee:ec:f0:7d:13:b4:
         b6:58:cd:aa:1c:75:fc:ff:b1:3d:08:cd:11:07:fe:8c:82:b1:
         b8:32:c1:12:08:63:16:4d:06:5a:99:35:b3:eb:da:fb:d1:ed:
         44:c9:1f:db:2c:06:a8:45:2d:db:c2:ce:ac:b4:8b:fd:3d:6d:
         72:1b:f8:5c:dd:8c:13:7f:87:d8:25:e2:58:2c:60:6a:57:e6:
         82:39:0a:f1:7c:7a:f0:19:cc:00:8d:02:b6:75:53:db:25:3c:
         4f:f2:eb:9b:75:a6:ba:92:ee:89:d5:b8:27:a8:1b:df:e2:b5:
         08:8b:c6:b3:21:ea:2d:6c:52:64:23:bc:1b:b6:09:05:76:ba:
         56:46:39:aa:16:01:22:e9:e2:90:26:7f:9e:e5:75:60:54:63:
         c7:1b:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:14:42 2026 by rpki-client