Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
File:                     7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json)
Hash identifier:          bMUCKLkAueNnjdUsdUtiKIFgHO68xbtBBI42/Htbm3Y=
Subject key identifier:   2C:52:EB:FF:31:AE:92:91:0C:8C:A9:60:3A:7A:3B:C7:4C:6F:61:71
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Certificate issuer:       /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial:       0BEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
Manifest number:          0BCC
Signing time:             Mon 12 Oct 2026 19:10:58 +0000
Manifest this update:     Mon 12 Oct 2026 19:10:58 +0000
Manifest next update:     Mon 19 Oct 2026 19:10:58 +0000
Files and hashes:         1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: sx5pSp8MoOR8s7w5NG0hZQ5rq+0ZE7dcH900UNrnqU8=)
                          2: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: OKEj9HXa1f9g4uR6sVBPFlkPnTkz7D9Cnlvm3kiY8Tw=)
                          3: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: /1SCEQVpr9moafPfMLqizcxn36EGeIZ1g7YGNLkjf1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
                          rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 19:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3054 (0xbee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
        Validity
            Not Before: Oct 12 19:10:58 2026 GMT
            Not After : Oct 19 19:10:58 2026 GMT
        Subject: CN=6acd30c2-b26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:3e:ec:27:b7:2a:f3:c9:74:c9:40:28:0a:
                    c7:09:59:ac:fc:32:f8:d5:81:aa:13:c5:d7:c6:ca:
                    3e:7d:f2:37:24:a1:9f:4e:51:98:18:d4:ac:bb:3b:
                    ae:d2:61:4b:3e:01:99:23:5c:de:f8:38:c2:a5:c4:
                    ab:d1:0f:93:17:b2:65:b3:4e:3f:4a:1d:9f:9e:5f:
                    34:c7:38:c4:cf:31:c8:85:64:04:05:3e:4c:24:4a:
                    7e:ea:03:d0:b5:cc:d2:2a:34:47:f6:4b:32:61:59:
                    72:80:94:96:df:38:73:35:df:85:6e:ef:0a:96:a8:
                    c8:ce:1b:6c:52:db:de:ff:83:25:6f:67:d8:ee:e9:
                    85:01:ae:52:3b:9e:79:01:25:db:a3:17:90:0c:92:
                    3d:c3:38:0e:61:43:3e:3d:7f:03:08:a2:ee:e7:a2:
                    7e:55:94:c4:5d:a4:98:89:5c:c2:35:9e:2f:80:4a:
                    46:57:e4:1d:48:2b:f4:d9:ae:6f:3e:d1:7e:74:2f:
                    b5:f5:b2:bd:00:36:32:43:a0:6b:fe:e3:95:5c:41:
                    d5:7c:69:5c:83:12:fb:91:98:e3:ba:43:99:b1:a8:
                    f6:98:f3:f7:e8:70:22:f3:ed:9b:06:d3:66:b8:cb:
                    07:9e:e6:1a:d9:26:56:5d:a9:23:ba:a8:52:d8:a0:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:52:EB:FF:31:AE:92:91:0C:8C:A9:60:3A:7A:3B:C7:4C:6F:61:71
            X509v3 Authority Key Identifier:
                keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:82:7d:4f:e0:f3:df:73:c4:83:1a:45:80:60:ff:0d:18:1e:
         cf:a9:de:8a:fa:69:8f:d7:48:40:fc:c5:61:5d:50:9b:9c:b8:
         45:06:1e:06:31:7f:86:63:14:0d:f6:81:ef:fe:85:fe:3b:10:
         e6:c9:bc:c0:f8:dc:38:3d:01:a1:93:48:21:0e:98:3d:c8:b7:
         84:1a:5e:4b:7b:31:75:ca:dc:ff:17:6d:e5:80:62:38:bb:dc:
         f9:3d:28:93:99:f3:eb:e8:df:d9:00:b6:57:de:cf:fb:61:14:
         2a:83:48:22:6c:f3:58:3f:94:33:45:0c:7c:61:1a:39:98:2b:
         2c:8c:9f:78:83:21:d2:bd:fb:7f:2e:b8:d7:8b:e7:52:c6:6c:
         0d:a9:b8:3d:77:64:a1:5c:10:55:ea:80:68:fb:d8:0b:46:6b:
         ec:73:53:3e:84:64:b0:83:15:d6:6a:63:4e:49:92:22:24:51:
         39:60:6d:07:a6:d3:96:61:18:03:4c:2a:f8:65:05:9c:bc:f8:
         47:4a:9b:1f:09:63:1d:e8:31:b4:90:b8:0a:27:a1:25:30:47:
         d3:a5:78:88:37:44:3c:6b:3c:8f:51:c9:c8:06:6e:bc:87:00:
         07:d2:7d:55:36:93:47:eb:16:ce:cd:60:53:60:94:bb:dc:49:
         e3:3f:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:17:52 2026 by rpki-client