Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft
File:                     7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft (raw, json)
Hash identifier:          tP879x8foIFPV3Hq6Cf5htd6RvqfuuQz2Ha3veLBkvQ=
Subject key identifier:   7C:CC:90:46:92:4C:CC:4E:76:A7:76:F4:0F:76:1A:15:A8:29:8D:3A
Authority key identifier: EF:E2:2D:CB:07:DD:5E:F3:CD:80:25:FA:B3:F5:58:A6:7C:18:08:54
Certificate issuer:       /CN=A916B5CE/serialNumber=EFE22DCB07DD5EF3CD8025FAB3F558A67C180854
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7-ItywfdXvPNgCX6s_VYpnwYCFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft
Manifest number:          0B
Signing time:             Wed 23 Sep 2026 08:56:40 +0000
Manifest this update:     Wed 23 Sep 2026 08:56:39 +0000
Manifest next update:     Wed 30 Sep 2026 08:56:39 +0000
Files and hashes:         1: 7-ItywfdXvPNgCX6s_VYpnwYCFQ.crl (hash: 9glrp6D5V2diR2TPeDVDvv3ebNqwEU+9Xlra64xDZ6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.crl
                          rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7-ItywfdXvPNgCX6s_VYpnwYCFQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B5CE, serialNumber=EFE22DCB07DD5EF3CD8025FAB3F558A67C180854
        Validity
            Not Before: Sep 23 08:56:39 2026 GMT
            Not After : Sep 30 08:56:39 2026 GMT
        Subject: CN=6ab39448-571e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:f9:a4:2a:20:73:d3:e2:84:9a:b3:56:2b:
                    e4:d3:40:b6:a5:77:07:bc:98:a1:0f:e1:2a:1d:f4:
                    e8:d0:c6:85:f7:35:4f:39:8a:0d:99:5f:2d:23:a6:
                    76:2f:06:90:29:55:a2:0f:97:fe:3d:62:1a:c6:f1:
                    d1:68:7f:cd:b6:d4:dd:b1:a3:2b:64:92:17:d5:30:
                    a5:43:bf:cc:25:1b:49:26:30:9f:8d:dc:94:2c:e9:
                    81:33:64:f3:f5:84:3d:da:7f:e5:48:ac:e5:d7:49:
                    1f:36:fb:6a:40:74:9c:3e:d6:62:23:29:8a:01:e7:
                    39:41:fb:eb:c4:62:dd:03:1f:d5:e6:f9:c2:33:8e:
                    e6:ee:f6:f6:e9:69:b3:d6:bc:74:54:6d:7a:7e:e4:
                    dd:74:c2:01:0b:64:4f:5b:20:13:a9:04:da:c4:68:
                    fb:57:7d:a5:40:3c:fc:40:6a:e1:28:cd:13:7d:fb:
                    54:6e:52:00:47:d8:7e:74:82:70:e8:0c:6d:5e:61:
                    f8:b2:7b:dd:ed:96:7b:e2:f8:49:ea:e9:cd:06:50:
                    c0:51:bf:6e:dc:d7:bd:1b:0e:9a:b4:63:ea:cd:44:
                    81:de:dd:ef:e8:35:b4:eb:e9:e5:b9:b1:bd:de:a0:
                    35:32:99:b7:c0:12:d3:36:93:75:e6:4b:93:4b:1f:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CC:90:46:92:4C:CC:4E:76:A7:76:F4:0F:76:1A:15:A8:29:8D:3A
            X509v3 Authority Key Identifier:
                keyid:EF:E2:2D:CB:07:DD:5E:F3:CD:80:25:FA:B3:F5:58:A6:7C:18:08:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7-ItywfdXvPNgCX6s_VYpnwYCFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:61:d4:ca:1e:55:2e:b7:2c:ca:59:e7:07:5e:8a:68:1e:
         9b:4a:6a:93:b3:13:93:55:ff:32:b3:fe:7b:00:dc:db:77:23:
         51:c8:ff:ab:08:cf:b2:7c:21:62:b3:20:d5:af:c2:8c:c0:be:
         92:3a:55:b7:86:8b:41:c1:8e:91:fe:70:0f:aa:e1:f7:ec:1e:
         4d:7d:4b:92:3c:2f:60:28:e5:b4:85:30:c5:50:d3:69:c8:bc:
         ef:0c:11:a9:cb:bc:bb:f0:bd:70:4d:83:c1:31:68:7c:3e:13:
         7d:ea:0d:d2:7f:73:a9:b8:65:76:03:cc:93:1a:2d:c8:8a:c7:
         55:11:b6:a9:a1:9c:ba:13:52:0d:23:eb:fa:18:35:46:3d:7c:
         26:53:54:f5:09:0b:37:f3:56:70:a7:c0:c6:e0:2f:33:04:57:
         6c:fc:b1:9b:7d:6d:71:45:e5:77:35:65:e2:43:a9:70:f9:ed:
         e9:c5:18:53:29:36:20:2b:2f:76:98:80:76:dc:94:a4:8b:65:
         63:52:67:36:61:28:66:c4:c7:a0:97:17:e1:68:21:c6:03:15:
         39:08:78:db:0f:68:c0:1d:fe:92:af:87:1e:ba:7f:6c:c6:a8:
         e3:37:00:89:ff:a1:0b:6b:13:10:e8:79:80:5a:88:fe:64:fd:
         af:03:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:38:38 2026 by rpki-client