Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File:                     7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier:          rHX+B13RA25RiDxGxDZ0I1S4ZD6w2w9fFvvu89oypmc=
Subject key identifier:   A5:7E:2C:39:30:A9:D6:5C:D9:86:D6:4D:36:D0:30:E4:DB:E8:04:E6
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer:       /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number:          0143
Signing time:             Wed 23 Sep 2026 05:12:05 +0000
Manifest this update:     Wed 23 Sep 2026 05:12:04 +0000
Manifest next update:     Wed 30 Sep 2026 05:12:04 +0000
Files and hashes:         1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: I5Mn+x6fVD1dDiv6vheV7TFCXsDB3ytM+s4HhS4wYQE=)
                          2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: zNeCIz79QyLjKaLa6KZk2f88rwvGe93u3cvB8Yfkn+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
        Validity
            Not Before: Sep 23 05:12:04 2026 GMT
            Not After : Sep 30 05:12:04 2026 GMT
        Subject: CN=6ab35fa5-0f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:b9:48:de:51:b1:a7:5d:6a:ad:d8:eb:15:
                    93:94:a1:1c:46:ec:bb:49:32:d9:83:79:af:f2:4a:
                    db:9a:5f:ad:bc:d2:f4:7d:b4:fb:16:c9:a9:f9:93:
                    27:68:85:0e:ab:08:04:0f:2f:ae:41:45:d0:2c:6a:
                    89:f6:ae:b5:6d:f9:db:c0:0b:58:76:a3:35:a4:58:
                    d8:a5:38:8e:9b:21:c1:40:7d:95:9d:b2:63:5a:00:
                    bf:7e:bc:b4:4b:a7:3c:9f:b5:35:e8:29:75:f9:b7:
                    f2:f8:8d:fd:8b:b9:6e:2b:7c:6d:9c:0f:ec:96:81:
                    b4:3d:0a:87:25:cb:f0:3b:5d:84:8c:91:fb:fc:d5:
                    26:a8:15:1b:98:6c:bf:47:74:d1:5f:b8:e2:fc:5d:
                    53:2b:1d:89:23:4c:23:82:0a:2b:b7:e3:30:be:39:
                    e6:24:b4:97:43:8e:d3:55:fd:d8:83:6d:eb:f5:d6:
                    41:19:4e:b8:2e:5c:83:be:82:d1:ab:9a:5b:a0:30:
                    c9:5c:db:55:ac:f9:d7:a8:7c:c1:fd:e8:11:af:db:
                    fe:3b:46:c2:c9:73:6a:48:8b:6a:8d:34:20:42:c5:
                    f6:4b:98:ac:d0:81:4d:de:f1:e4:84:f1:48:35:83:
                    e0:e7:ce:81:e0:8e:53:08:ed:49:29:1b:d5:7d:2e:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7E:2C:39:30:A9:D6:5C:D9:86:D6:4D:36:D0:30:E4:DB:E8:04:E6
            X509v3 Authority Key Identifier:
                keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:cb:53:d9:80:7c:0f:f1:9c:36:cf:ad:f1:dd:14:88:42:
         18:9d:fa:08:d3:0b:ab:da:4a:3b:7e:3c:6d:e0:f7:43:ac:0a:
         c0:1a:1d:fa:e8:96:d5:a3:97:8c:4d:0f:48:fa:b9:6b:f9:c0:
         3c:6a:ae:fa:1d:cd:9d:c8:04:99:a0:ca:70:1d:85:ab:34:d9:
         56:b8:42:84:fa:e8:24:cc:57:f5:9e:44:8d:c8:19:cb:5e:57:
         e2:f4:4a:8a:da:b8:30:98:ea:f8:71:c8:df:23:81:e2:eb:69:
         f7:8d:71:6e:1a:93:ff:e4:6e:a5:a5:c2:e2:26:79:eb:07:8a:
         c1:cf:99:82:bc:09:3d:45:c6:40:f5:2a:10:53:fa:b8:67:35:
         5c:2b:54:e1:d0:6c:eb:95:8f:c7:f0:79:2f:7c:19:a8:0d:92:
         65:c7:57:fb:48:04:27:17:4e:6a:99:3e:5f:9e:33:09:c8:1c:
         79:d5:49:0b:3b:ff:dd:77:c0:70:53:0d:b5:e5:e4:67:c8:6f:
         19:2f:49:65:b4:cb:2b:b7:79:96:49:5c:5b:18:a3:c9:c3:b7:
         bb:1f:2e:86:70:81:82:4c:fe:91:52:5a:f2:26:a6:38:aa:e8:
         10:10:4e:d7:68:c8:06:9c:6d:ca:17:ed:13:50:de:67:30:dc:
         20:92:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:02:24 2026 by rpki-client