Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File:                     7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier:          zpBsE4duFib50iLLckmJrb4GIcDvLSjszLkspWn6uFg=
Subject key identifier:   AA:AB:58:BF:49:81:4E:A1:37:EC:5D:A6:6A:45:37:03:DB:5E:E7:E6
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer:       /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial:       0D4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number:          163E
Signing time:             Thu 24 Sep 2026 18:01:17 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:17 +0000
Manifest next update:     Thu 01 Oct 2026 18:01:17 +0000
Files and hashes:         1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: o2V/6vgMSSh8g1zIz2aeX5UdR2zxX8hX/ojheIkftuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3405 (0xd4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
        Validity
            Not Before: Sep 24 18:01:17 2026 GMT
            Not After : Oct  1 18:01:17 2026 GMT
        Subject: CN=6ab5656d-aed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:ae:9f:1d:50:3d:38:14:9b:b9:b5:25:df:
                    c9:00:4e:95:ee:f2:2f:92:47:89:78:e5:17:bf:6c:
                    d3:3a:28:c6:16:e9:9d:2f:86:8e:76:14:60:37:56:
                    97:48:7b:55:85:f6:55:d6:12:16:29:7b:49:1e:c5:
                    9c:9d:ba:8b:44:eb:94:ee:f4:59:34:5f:50:6f:82:
                    ad:f1:21:c0:c3:2e:5f:29:16:ca:f9:a1:8e:bb:d5:
                    bb:77:37:f0:6b:51:75:2f:8f:84:db:b7:a7:46:75:
                    5b:81:5c:a6:aa:f8:3c:6c:86:46:81:6f:ee:f8:e9:
                    ac:34:b0:f1:a6:37:ea:73:a4:76:1e:df:72:d6:14:
                    4c:7b:29:2e:8b:ea:94:cd:5f:da:c7:47:c1:3d:0f:
                    90:ac:e5:da:0d:6c:96:cc:69:d5:27:98:50:91:ae:
                    76:b8:ef:6c:83:0c:91:28:56:f3:f5:a5:de:c0:b1:
                    6d:25:42:fd:96:a5:60:bb:4d:22:62:c7:b2:81:09:
                    6a:1f:76:e8:d3:b9:f8:0b:2b:e2:42:bb:4f:18:be:
                    c7:40:fa:ed:21:fe:b2:d3:5d:01:21:39:59:0e:59:
                    96:6d:5a:15:f9:89:71:12:35:a5:60:39:7b:09:f7:
                    9c:11:b8:b8:9b:82:35:96:46:ed:15:33:56:46:22:
                    d1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AB:58:BF:49:81:4E:A1:37:EC:5D:A6:6A:45:37:03:DB:5E:E7:E6
            X509v3 Authority Key Identifier:
                keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:37:27:8f:32:3e:c1:bf:4d:70:db:84:65:b1:1d:b3:07:df:
         f4:99:9f:b3:82:9c:98:a1:e2:19:1b:29:c0:28:23:b2:c9:10:
         30:0b:59:58:d0:7f:8e:f7:78:40:33:e2:39:07:4d:fa:92:46:
         55:6d:ed:e8:df:90:0f:ae:ed:aa:1f:28:a8:c6:a7:9c:5e:6d:
         25:3b:13:04:74:2a:5c:7b:8c:07:d8:63:51:f8:30:3f:a0:01:
         f2:46:6a:6c:ce:06:9a:21:e4:54:3e:5a:f6:e4:b3:79:c8:67:
         38:c3:35:06:06:75:b4:51:91:c4:a9:fd:0f:2b:59:86:be:09:
         d6:87:de:31:df:c8:ad:12:38:cf:51:d9:f3:2e:9a:ee:46:27:
         28:49:3a:2e:7b:35:5e:1b:2c:c4:7f:fa:d1:58:36:d7:c7:08:
         8f:16:e1:60:f5:4e:fa:87:3d:83:cb:0b:7c:0d:c7:bc:98:41:
         49:29:c0:b2:28:4e:86:2a:3e:66:5b:bb:83:e6:ad:1c:69:67:
         b7:8e:7c:5b:38:39:37:b6:b4:35:27:df:5f:db:9f:bd:b9:57:
         f1:ca:6f:12:fb:de:5b:08:90:41:f8:1e:a4:f5:67:98:98:c0:
         aa:44:29:b8:82:14:f4:17:0f:0b:4b:14:c9:dd:2c:76:cd:47:
         3c:65:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:41:15 2026 by rpki-client