Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File:                     7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier:          Iu5bWxgFP1AuR3zNcFngwC6kW3aFfSOvhxSFgt4pNTY=
Subject key identifier:   BB:F0:A4:84:C2:35:44:C8:B3:8D:23:11:F6:86:0F:51:9C:61:BB:AE
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       03D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number:          03AB
Signing time:             Fri 25 Sep 2026 00:31:42 +0000
Manifest this update:     Fri 25 Sep 2026 00:31:41 +0000
Manifest next update:     Fri 02 Oct 2026 00:31:41 +0000
Files and hashes:         1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: PkgORzRByDlO1gfdIDkDInbrM+PDfv+ouuoynVUQP+0=)
                          2: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 3rz3y2F3aVzj5O9phACfchAMbGqJwRa3oLDOUx3l7LI=)
                          3: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: igM78oSfeB942BNkl42YqKy+vOSBmm/qF44KEq3SfEc=)
                          4: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: ZWhBeU6y3g8qTKiuOtQLL6VcfczNqvmkhr8Yqi5VXlY=)
                          5: 8BB438729C5311F19090C9214211F970.roa (hash: 4P3QCMBtXIARu2oRAALfV+4dtZEhy98vYnb2SXz40aM=)
                          6: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: IT6sjqgyeU7yL3F+eCEVuRIF5QZib/FjkDzd9+imaPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
                          rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981 (0x3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Sep 25 00:31:41 2026 GMT
            Not After : Oct  2 00:31:41 2026 GMT
        Subject: CN=6ab5c0ee-b444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f1:29:3f:7e:b6:cd:9e:b6:da:5f:dc:f4:78:
                    2c:53:65:27:1e:e9:08:4a:d4:a4:69:09:9d:74:7a:
                    68:92:95:d4:54:ce:a8:c1:08:c9:01:42:49:90:b1:
                    fd:1f:12:55:4e:65:03:80:68:b9:40:8b:ea:b9:78:
                    78:ec:ee:59:ad:90:08:03:62:06:9f:eb:8d:51:7a:
                    f3:12:0d:ba:06:17:02:7c:81:12:06:5f:f9:4f:73:
                    3c:0b:c6:30:40:4e:eb:0d:1d:f6:2a:62:8f:d0:a9:
                    d7:3b:a1:de:32:d9:4b:00:95:b9:fd:34:2c:db:22:
                    3c:20:3a:e1:52:02:21:78:5d:47:d5:d7:88:c3:32:
                    09:4d:7a:ab:50:53:bb:46:bc:be:e4:d3:9f:c4:b4:
                    94:cd:6e:c6:c6:77:f9:53:2c:01:18:e3:a1:94:c5:
                    82:8e:a0:19:58:b1:4b:b4:59:31:8b:09:01:cd:cd:
                    66:ed:6a:a0:72:05:6e:24:b8:ec:1b:44:62:0c:ff:
                    db:42:c1:6d:47:12:98:57:d1:44:74:11:d6:2d:e0:
                    df:ac:a0:a7:7b:de:6b:ce:78:e4:04:eb:a2:2a:ac:
                    ca:f5:23:79:14:46:27:a3:e5:6c:45:e7:ac:16:b0:
                    0a:d2:cc:f5:cb:48:36:96:a1:c1:68:04:f7:95:b9:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:A4:84:C2:35:44:C8:B3:8D:23:11:F6:86:0F:51:9C:61:BB:AE
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:aa:f4:16:b0:0b:b6:ce:bc:06:27:58:e4:6c:a7:a3:33:af:
         b8:b2:f9:e6:e8:6e:ef:35:03:7f:f1:77:ba:0c:98:b7:54:c8:
         fc:a6:3a:02:29:df:2d:1e:99:45:87:19:55:ce:a7:f0:e0:b9:
         31:4b:2d:9e:5a:a9:b7:d8:97:48:f2:6c:16:0d:1f:36:a5:1a:
         4a:98:fd:71:15:01:2f:3f:f6:b6:bd:49:d0:ad:fa:76:04:28:
         db:5b:f4:e9:b3:61:53:0e:c0:19:96:32:a8:b7:ab:a1:34:c0:
         a6:39:f3:0c:74:d4:18:42:32:7a:0b:59:08:cd:4d:52:9b:29:
         56:51:93:66:c9:b7:bd:78:b2:d1:83:05:9e:b4:04:80:61:bf:
         d9:e7:de:d1:ff:4b:be:8a:64:e2:5b:d9:c3:89:e3:08:db:13:
         1e:77:51:94:89:2e:db:1c:16:9e:64:1b:0e:ca:70:30:ce:4c:
         13:56:19:35:6d:80:d4:30:58:61:34:fa:13:f4:84:ce:8e:d4:
         a0:da:33:f9:68:d6:ef:7b:63:af:f1:05:ec:a8:72:69:c9:57:
         ea:d4:44:54:9d:88:7f:e1:58:34:d3:5d:b0:21:0c:a3:bf:8d:
         0a:12:0c:70:be:30:e7:38:c2:02:a4:a3:d2:d8:2d:22:e5:e4:
         e8:c4:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:57:53 2026 by rpki-client