Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
File:                     -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json)
Hash identifier:          ks9jl8U+gcvyTeuH2Cdsu5gA3dr503jroxVTdpe/yl8=
Subject key identifier:   86:76:7A:DD:46:34:2B:CA:F1:66:BA:30:97:5F:14:16:A3:D5:1F:61
Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
Certificate issuer:       /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Certificate serial:       106B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
Manifest number:          1057
Signing time:             Mon 12 Oct 2026 17:29:05 +0000
Manifest this update:     Mon 12 Oct 2026 17:29:04 +0000
Manifest next update:     Mon 19 Oct 2026 17:29:04 +0000
Files and hashes:         1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: Q8OhYb7xyvZaT/gzNRpogyEFK99fp56MXUaAGASElU0=)
                          2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: bVRUHoyN7g0/Ud6S1Lfm+QQ0GqpNveNCn0i1VnMWX7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
                          rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 17:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4203 (0x106b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
        Validity
            Not Before: Oct 12 17:29:04 2026 GMT
            Not After : Oct 19 17:29:04 2026 GMT
        Subject: CN=6acd18e0-553b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:b6:21:23:fc:cb:de:17:d0:d1:a5:4e:de:
                    ce:1a:cf:ab:75:16:1b:c9:e5:13:d4:2b:86:86:5a:
                    04:d1:b7:86:72:9d:f0:61:33:be:a4:a2:be:72:56:
                    02:19:5c:24:49:54:bd:6d:e6:45:88:09:c7:5c:65:
                    82:d7:ca:3e:d1:33:6d:4d:8a:ea:0d:67:40:69:bc:
                    b7:8c:f4:09:77:83:53:bd:d8:bf:61:42:76:61:29:
                    c8:56:a7:89:5a:30:ae:79:8c:c7:3b:fa:69:c8:5b:
                    c9:ec:76:b5:c7:5a:33:89:42:53:be:39:08:a5:1c:
                    58:40:fc:6a:b2:7f:3d:a5:4b:cf:ee:e9:99:04:78:
                    f2:49:a2:72:71:9e:87:34:07:eb:71:d8:e8:51:38:
                    ae:53:fb:25:e8:ff:a1:06:6e:7e:38:00:cf:49:25:
                    ae:d7:0b:e5:6d:32:7c:a5:eb:c4:b9:e3:a8:04:45:
                    52:dd:e3:5f:58:e2:40:43:21:4e:f7:d1:6d:2a:c5:
                    a7:36:99:f3:34:e7:c2:1d:0b:30:50:4b:f7:07:63:
                    9f:f3:9a:b5:ef:a2:02:a9:f1:71:ab:63:0c:56:0e:
                    8c:32:da:64:7a:e6:35:38:46:a9:dd:e4:90:d9:6d:
                    85:55:fe:5b:54:a1:24:95:2e:57:ce:be:71:33:72:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:76:7A:DD:46:34:2B:CA:F1:66:BA:30:97:5F:14:16:A3:D5:1F:61
            X509v3 Authority Key Identifier:
                keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7b:d8:69:a5:0f:3e:9b:e4:91:de:df:7d:ae:98:b3:4e:1e:
         7c:a1:df:5f:01:45:3b:ee:e0:24:18:91:ba:1d:c0:e6:17:33:
         e5:59:5c:c7:15:6a:b1:fc:b5:a8:51:e0:52:4c:29:41:0d:b2:
         76:61:f1:d3:98:b2:26:2f:60:a3:39:6a:cc:27:d5:da:7b:c8:
         ac:fb:08:78:b7:03:0d:0f:b0:e1:91:16:32:46:ce:c8:22:35:
         1a:04:a6:aa:00:d8:83:0d:8d:b7:e6:21:3d:3b:3c:c9:9f:93:
         ff:2c:63:94:28:5b:ff:45:8f:9a:b8:c8:b1:bb:e6:ef:14:9a:
         4e:f7:b0:08:fc:2c:bd:19:88:b9:51:68:89:eb:0e:5e:fb:36:
         c0:85:d1:2b:46:44:b8:6e:6f:72:38:ff:86:40:9c:a4:55:5f:
         2a:0e:d0:16:18:10:bb:a0:41:b7:04:77:f4:3d:a5:e1:53:49:
         9f:1f:45:5c:6c:16:dc:45:0e:d4:97:b3:91:ca:dc:07:f4:92:
         b0:1d:78:01:f6:01:09:8e:5f:27:87:57:d2:d4:e5:99:10:eb:
         e2:0c:fd:3b:17:45:87:9d:32:16:ef:18:01:ec:33:e9:21:65:
         ea:4f:49:95:6d:1b:eb:7f:27:fd:52:10:1a:b1:1d:2e:61:d5:
         21:68:9e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:07:16 2026 by rpki-client