Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
File:                     7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json)
Hash identifier:          Atkey7W3kV96jB6C/NWdR8D7n+H/7hjLXvlqSkiBGig=
Subject key identifier:   D0:0D:3E:8D:B1:C3:EE:75:16:15:5F:98:D9:0B:90:0D:54:1A:24:CE
Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
Certificate issuer:       /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Certificate serial:       0A69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
Manifest number:          0A5F
Signing time:             Tue 22 Sep 2026 19:28:50 +0000
Manifest this update:     Tue 22 Sep 2026 19:28:50 +0000
Manifest next update:     Tue 29 Sep 2026 19:28:50 +0000
Files and hashes:         1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: inFdzc7fgmVLgcGuLy9DpKruYR38neRnjdXpcWyf/n0=)
                          2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: C5fV75a8UUAFlsfjrW7ofnI1EJVxNwJDDKqV7jbbm0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
                          rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2665 (0xa69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
        Validity
            Not Before: Sep 22 19:28:50 2026 GMT
            Not After : Sep 29 19:28:50 2026 GMT
        Subject: CN=6ab2d6f2-acbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:a2:53:8e:ad:e7:17:35:a3:62:58:31:45:
                    bd:35:32:92:34:2d:b4:75:e1:d9:41:9e:d2:de:56:
                    d9:93:ed:83:2b:66:0e:cb:f5:88:c1:7b:9a:da:3f:
                    9d:bc:57:00:57:31:0a:fd:de:b3:15:6d:95:a3:9c:
                    06:1e:56:9b:67:91:d3:e7:51:4f:af:13:fb:4b:ad:
                    ef:e2:3e:58:75:b5:47:63:9e:3c:62:c0:b7:f2:d8:
                    4c:4a:df:15:36:ea:2a:d5:2e:eb:4e:a4:96:e7:92:
                    d8:28:cf:2d:a6:25:93:d2:d4:e8:74:95:bf:d6:ef:
                    e8:13:ec:56:e3:7f:f9:28:90:d3:a2:ab:a2:2f:30:
                    e7:32:ec:13:3b:44:4a:6c:d6:3f:a2:08:a0:cd:a3:
                    e7:35:05:e6:15:5f:ea:ad:32:b9:c5:cd:21:6f:e3:
                    11:42:87:70:02:cb:c1:b9:53:de:2d:8a:e8:44:91:
                    11:d6:95:9b:26:3d:3a:f3:d0:bd:34:cd:2c:64:26:
                    1f:ea:9c:99:43:f4:f2:73:8d:b0:f0:c8:46:79:7a:
                    56:4e:23:d4:8f:6e:75:4a:85:d6:b3:0b:20:0e:c8:
                    74:47:21:b7:10:03:d7:9e:35:cf:12:d5:17:b6:d1:
                    6b:42:33:c6:b0:3e:57:07:f5:f5:54:1e:d3:e6:10:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0D:3E:8D:B1:C3:EE:75:16:15:5F:98:D9:0B:90:0D:54:1A:24:CE
            X509v3 Authority Key Identifier:
                keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ee:58:32:c8:39:5f:ec:f1:9a:c6:e7:a1:31:ec:2e:38:c5:
         a7:e5:c1:13:fe:53:d5:b6:c4:18:8d:d1:cc:36:d4:c1:47:62:
         71:82:f8:26:30:8a:bc:72:d0:ca:86:25:46:0d:82:c0:17:f7:
         48:3e:6f:ee:cd:9d:d8:a1:43:df:2b:0f:b6:25:23:38:d9:fe:
         93:f3:c8:f3:b6:1d:d9:1a:bb:09:ca:df:8a:e9:bf:97:e4:e2:
         b9:0b:22:12:a1:86:82:bd:2d:37:24:4f:8b:0b:a0:ca:1b:b4:
         13:37:5e:47:84:32:f1:c9:35:6e:ef:a8:a9:e8:63:f6:9d:ef:
         2c:80:39:5d:80:c0:79:7f:d8:35:72:46:c8:79:1f:2a:6a:6f:
         4f:57:bc:25:ac:33:b1:cd:f3:dd:b7:73:8f:97:92:81:41:34:
         ce:d5:0c:9a:95:8b:5c:35:cd:68:64:42:ba:32:08:f2:2d:15:
         27:4a:3a:1f:27:95:2d:ec:90:15:f1:2a:9e:2b:8f:0c:76:d4:
         dc:66:5e:8b:4c:d9:03:ae:65:3d:c5:92:7a:e6:4a:c7:44:e7:
         af:40:fa:d4:61:0d:4b:25:be:18:4e:2f:0e:08:3c:fb:fc:e8:
         2e:cb:15:64:f0:82:83:0a:4b:44:c1:bf:89:6e:71:72:f0:1a:
         b0:e1:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:45:24 2026 by rpki-client