Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
File:                     7a8emnnZ_ssQeIOv03V_qPcKMtc.mft (raw, json)
Hash identifier:          anpvOTnIR3Cbl/qjWIuc8wLcTEXl1mc4pXSI6FH25Lc=
Subject key identifier:   A7:CD:75:94:C2:47:29:81:4B:98:91:BD:30:13:76:54:DC:FA:0C:31
Authority key identifier: ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7
Certificate issuer:       /CN=A91A2F6C/serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
Certificate serial:       0A9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
Manifest number:          0A95
Signing time:             Tue 22 Sep 2026 19:23:38 +0000
Manifest this update:     Tue 22 Sep 2026 19:23:38 +0000
Manifest next update:     Tue 29 Sep 2026 19:23:38 +0000
Files and hashes:         1: 7a8emnnZ_ssQeIOv03V_qPcKMtc.crl (hash: Rrtcb+a3LwU8Xbh91Gyh5yXQKNT6k+UYjHVTKA/k6Ho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl
                          rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2716 (0xa9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2F6C, serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
        Validity
            Not Before: Sep 22 19:23:38 2026 GMT
            Not After : Sep 29 19:23:38 2026 GMT
        Subject: CN=6ab2d5ba-de4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:ac:b0:09:c4:bc:50:0f:d2:b3:14:04:7d:
                    c7:f8:1f:8f:d0:49:42:70:01:f8:3d:f2:23:4a:15:
                    20:6b:07:ee:bf:f5:27:fb:26:47:5f:37:0d:27:9c:
                    c5:7f:fa:69:37:a3:3e:cc:80:d1:74:38:5c:b5:4e:
                    74:ab:83:c7:a9:68:6b:05:99:f5:e3:9a:9b:c9:98:
                    4e:2f:5d:d7:bd:ee:32:90:f1:3e:4f:68:0a:e5:14:
                    f7:c4:30:34:0f:46:0b:ce:d1:bf:49:81:92:cb:7b:
                    10:98:a7:9b:97:9c:9a:b9:b5:99:27:e2:4c:a6:be:
                    25:8c:27:66:44:01:d6:d4:64:61:1a:2c:90:ad:e2:
                    85:d8:ab:cc:76:2d:da:9e:3d:b5:65:60:b9:5a:a6:
                    fc:a1:ea:0c:20:ad:dd:99:11:47:56:78:0d:64:4c:
                    b2:96:d5:7d:35:cf:de:ec:d3:2b:7c:ea:6b:3e:48:
                    79:61:e4:fa:db:88:9f:88:41:2c:49:80:fe:e7:fc:
                    5e:f7:9a:7d:eb:38:cb:e4:91:91:3b:04:70:c3:9e:
                    6a:0c:7c:66:ad:7b:4b:be:58:d5:28:3e:90:65:aa:
                    84:4e:25:03:2a:95:83:fd:fc:ca:a3:9c:e4:54:d4:
                    61:df:c3:9f:4e:c2:b0:a6:d0:dc:59:4d:45:de:a9:
                    4f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CD:75:94:C2:47:29:81:4B:98:91:BD:30:13:76:54:DC:FA:0C:31
            X509v3 Authority Key Identifier:
                keyid:ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4c:b7:16:75:d2:8c:90:b8:83:df:22:70:d9:5f:e2:46:ec:
         6d:c7:88:39:d3:22:5b:e4:8b:2f:19:83:a4:ba:ca:65:36:3d:
         b8:67:c9:ea:f0:14:f6:3e:5c:eb:cc:83:3c:7b:c6:e3:23:87:
         97:92:27:9f:a0:1b:dc:40:25:4b:f5:e9:d6:03:93:d2:4c:da:
         14:25:c6:d9:77:ba:64:f1:8a:2f:6c:d7:6f:75:d6:b0:1e:f6:
         a2:04:ac:e5:49:30:e3:10:01:c4:b2:b0:ba:f0:10:33:90:f5:
         d1:45:ec:62:ef:48:3e:9e:6f:81:84:c0:89:be:26:14:db:16:
         53:db:d9:56:a4:61:a1:ef:64:fc:92:58:09:46:61:ce:5b:82:
         e1:26:db:b3:a1:9c:a0:ad:7b:b5:8c:8a:07:0d:bf:b9:90:52:
         60:19:bf:83:38:07:31:1f:df:94:d4:6c:70:62:95:f8:38:1d:
         b0:40:8c:b3:49:29:d7:6c:e0:f8:b6:d0:85:9d:29:fb:1e:2a:
         d3:df:de:d9:ee:58:7f:2c:12:88:fe:33:c7:24:d8:53:92:02:
         f7:a4:cd:f2:26:17:29:96:9f:cd:c9:ca:85:33:75:88:58:f0:
         b9:f8:66:70:6b:74:a5:9a:e2:47:13:53:76:71:eb:76:bc:aa:
         45:ed:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:41:13 2026 by rpki-client