Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
File:                     c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json)
Hash identifier:          AHsdE0xFsVGstzuB3m8v6dvRTPKImkHzhCipF0oixng=
Subject key identifier:   FE:65:F2:0D:74:8C:67:86:71:94:D7:3C:F2:BA:C8:41:47:0D:59:0F
Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
Certificate issuer:       /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Certificate serial:       0C30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
Manifest number:          0C23
Signing time:             Thu 24 Sep 2026 18:45:11 +0000
Manifest this update:     Thu 24 Sep 2026 18:45:11 +0000
Manifest next update:     Thu 01 Oct 2026 18:45:11 +0000
Files and hashes:         1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: 39aJlMOJCTnNjLPtqWjv2qbZQxiVpmP3HLR2KPCx4og=)
                          2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: oSu7opmD3HBYoBwJbIsmMaGXMM1R4NMeIhfp2irZM0Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3120 (0xc30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
        Validity
            Not Before: Sep 24 18:45:11 2026 GMT
            Not After : Oct  1 18:45:11 2026 GMT
        Subject: CN=6ab56fb7-454a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:d3:01:98:67:c7:19:27:08:d9:6b:56:85:
                    b5:0c:d0:50:11:da:17:77:07:4d:55:63:6b:12:96:
                    50:d6:b6:b6:78:26:26:fd:46:ff:2e:d3:08:9a:c8:
                    55:f9:0b:1d:c5:74:c7:55:25:ec:1c:6a:3c:a8:41:
                    0e:a3:91:ed:19:7b:07:62:16:3f:6a:d6:94:1e:ec:
                    3f:d1:22:6f:e3:8a:a2:57:2f:a0:20:12:f7:aa:64:
                    e4:ab:7d:6d:19:1b:de:ab:fd:f4:06:18:82:3e:55:
                    53:3f:52:96:8e:10:ae:06:1e:72:b0:4e:ed:1d:08:
                    ac:94:f8:1d:86:a7:04:13:95:36:c1:6e:25:31:1e:
                    39:4b:2f:bc:5c:8a:9e:dd:32:2e:78:f6:5e:28:69:
                    77:99:c9:b1:89:7a:ad:4f:95:f6:fd:da:df:71:ba:
                    1e:ec:32:56:e8:36:c5:76:c3:d9:50:76:c9:32:e1:
                    a9:3e:ef:94:58:c7:ed:c5:e7:20:99:b8:a3:f5:e9:
                    61:bd:c8:8b:08:60:5f:a4:03:fb:70:cc:a3:cc:aa:
                    b8:1f:50:52:af:14:d4:72:4c:ed:b5:6b:a4:13:10:
                    a5:a8:1f:2e:d8:8a:ee:c8:4e:02:3c:c1:df:14:e8:
                    13:5b:66:6b:91:fc:85:08:9d:90:79:e9:2f:d1:c4:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:65:F2:0D:74:8C:67:86:71:94:D7:3C:F2:BA:C8:41:47:0D:59:0F
            X509v3 Authority Key Identifier:
                keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:b4:7a:0c:76:45:80:c2:06:e7:6f:51:f7:7f:1a:94:d5:
         0e:ca:32:a1:0e:ed:1c:91:95:47:75:ce:67:3a:7b:79:89:0a:
         b8:1e:ce:9e:ea:e3:02:60:b6:54:45:60:5f:55:40:74:85:4e:
         31:9d:e5:3b:2f:20:a7:d2:16:cf:72:30:9a:19:4d:d8:8f:5b:
         31:2e:9a:1d:48:ca:8b:4d:0a:e6:75:91:00:d6:e6:71:b4:70:
         76:73:a0:87:3e:8d:6f:48:82:e2:38:91:f6:d6:9c:6e:70:23:
         ed:3c:04:96:91:bf:89:9b:3f:5e:e9:96:9f:d2:19:b2:4c:94:
         bd:a8:e3:71:3f:d1:e4:25:42:17:14:2b:2b:eb:99:9a:1e:62:
         b4:e7:04:24:dc:35:b6:bd:90:3a:0b:b7:09:e7:c5:e7:ee:8b:
         28:16:e3:50:5f:46:b5:61:9e:b9:22:18:e1:9d:57:8a:bd:7a:
         38:b4:2d:18:f0:2f:8d:6b:a8:89:13:6d:25:89:ba:7f:82:39:
         5f:3c:4c:a4:71:ea:a9:2d:bc:e0:84:0b:6a:01:31:e2:f7:e8:
         64:7d:fc:4b:6e:c4:3a:29:af:7a:e4:b3:33:92:2a:f6:fa:32:
         a3:7a:bb:43:28:ae:62:82:11:2f:e8:b1:73:63:03:50:fe:f5:
         ea:14:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:45:19 2026 by rpki-client