Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
File:                     rHwA15xPocI9OeJl5UPWJa-xcZE.mft (raw, json)
Hash identifier:          eFlSTO/Rya3Qnxou6AzYMQeH/yK+KPk25k/LFdnbrjI=
Subject key identifier:   75:D9:2C:EB:03:22:7A:10:8F:7C:47:67:AF:54:CA:29:38:30:A1:1C
Authority key identifier: AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91
Certificate issuer:       /CN=A917C876/serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
Manifest number:          7C
Signing time:             Sat 17 Oct 2026 08:29:56 +0000
Manifest this update:     Sat 17 Oct 2026 08:29:56 +0000
Manifest next update:     Sat 24 Oct 2026 08:29:56 +0000
Files and hashes:         1: rHwA15xPocI9OeJl5UPWJa-xcZE.crl (hash: 7GliOPrQwRiZLxnTGHDAuJFfHMfMlo0RqJaKm71TaB8=)
                          2: AA5A77DE109211F1ADAE0457353D8C67.roa (hash: jc5OClYgMksYJNVDPr4GTz5NxRC+DAHLWpkP7eRJs/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.crl
                          rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 08:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C876, serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191
        Validity
            Not Before: Oct 17 08:29:56 2026 GMT
            Not After : Oct 24 08:29:56 2026 GMT
        Subject: CN=6ad33204-f03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:f6:c9:4c:53:c3:cf:7d:7a:f5:01:f1:b7:
                    64:a6:a6:f8:15:9b:fa:f5:21:fb:69:8f:20:72:d0:
                    1a:08:e8:13:3c:ba:98:7b:a3:52:96:88:44:2c:c3:
                    03:40:11:eb:a7:20:f6:b2:1c:02:a7:c5:c8:85:5f:
                    44:0d:9a:7c:5c:c5:ce:46:fd:95:3b:c6:8b:54:e4:
                    18:72:4d:2d:44:0e:7b:52:fe:43:72:c8:cb:ff:37:
                    54:3a:6b:1f:40:ee:0c:11:46:45:f3:c7:09:b1:49:
                    ec:d7:3a:48:a0:4b:d3:3f:2c:a4:5a:42:57:95:61:
                    14:85:e4:81:88:93:5c:63:c9:35:05:dc:e3:46:a2:
                    02:fe:fa:79:88:ce:96:8b:53:8d:4c:c1:68:ca:5b:
                    5c:1d:e5:bf:57:60:98:54:11:fb:14:3b:d7:05:56:
                    40:ff:d2:56:89:3c:f9:65:4f:66:0d:36:3a:fe:f1:
                    be:45:f9:68:9e:3f:dd:f6:40:5a:7e:00:33:45:07:
                    5e:50:86:a6:cd:2f:4a:57:73:74:14:d2:b8:d3:54:
                    d5:d0:24:44:74:ce:29:79:86:7a:f2:44:40:b6:b2:
                    f9:88:3e:3f:1d:16:ed:9d:3d:cb:1e:01:1c:fa:59:
                    2d:c6:d9:16:66:5d:8a:77:33:94:7d:30:df:81:ac:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D9:2C:EB:03:22:7A:10:8F:7C:47:67:AF:54:CA:29:38:30:A1:1C
            X509v3 Authority Key Identifier:
                keyid:AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:50:61:f5:f0:cd:6e:b6:7d:c6:27:6a:e6:33:37:dc:17:4f:
         04:85:16:68:64:cc:d5:08:75:d6:d2:ed:4b:78:46:f8:e0:f2:
         8c:6f:1b:8b:a1:fa:b9:6d:c9:b3:76:4c:87:85:bb:5e:ea:82:
         ae:60:ac:b2:83:63:dc:8c:15:34:9f:1c:b0:78:a6:b6:a8:a5:
         0f:4c:6a:52:98:df:a4:6f:bf:ba:f6:29:ab:b6:e7:ad:8e:f9:
         ce:23:6a:86:cf:a5:eb:d7:29:8b:3b:db:db:b7:d6:20:c6:54:
         b3:52:61:4c:69:e0:5f:b4:72:06:53:f6:cc:d5:ad:90:dd:f7:
         b4:0e:5a:93:09:5d:1e:80:27:64:e2:1d:bb:f4:1e:3c:54:d3:
         20:25:39:ca:8b:1e:d5:6d:68:f3:c5:de:c0:fb:e2:32:77:1d:
         c8:c6:dd:44:1b:a5:fe:9d:f9:41:03:7f:f7:fe:81:99:3d:23:
         91:88:4c:76:a2:f7:ac:49:ca:e5:99:07:7d:52:35:7a:35:e7:
         ed:df:7f:2c:43:a1:8d:cb:a3:6f:4a:aa:a8:78:27:77:5c:72:
         09:8b:1e:13:cc:ab:bf:ae:09:d1:b0:c5:4a:0e:fc:60:d5:2a:
         33:f0:5f:0d:f9:3b:e9:0b:db:bc:9b:10:9e:dc:cd:02:38:6c:
         cc:cd:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:15:05 2026 by rpki-client