Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
File:                     N7DwEA07w97mXZvrCuzEzuH7NlU.mft (raw, json)
Hash identifier:          7RdMCAVry0TuU6rkB4e4I89ndXG14rfbGZDxFxDRwd4=
Subject key identifier:   2E:8C:B7:A0:FA:34:70:32:9D:03:B3:85:20:C1:02:6E:24:07:00:C2
Authority key identifier: 37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55
Certificate issuer:       /CN=A911F587/serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
Manifest number:          7D
Signing time:             Sun 11 Oct 2026 08:27:12 +0000
Manifest this update:     Sun 11 Oct 2026 08:27:11 +0000
Manifest next update:     Sun 18 Oct 2026 08:27:11 +0000
Files and hashes:         1: N7DwEA07w97mXZvrCuzEzuH7NlU.crl (hash: CiTNlIf1726l9XlLofSN8ieTSra+u3pN5hvMLxck4EI=)
                          2: CD7290AA136F11F1982A4804323D8C67.roa (hash: qDyZwBwrqthySOB52fs7wXlt74iPUc5q4sz33hWCJXw=)
                          3: 24A691EAA4E911F18E8000426A11F970.roa (hash: aqIC7cEjxikxYBSUGYod7Mkk4JXeHKhdEfKHZGO4EJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl
                          rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 08:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F587, serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655
        Validity
            Not Before: Oct 11 08:27:11 2026 GMT
            Not After : Oct 18 08:27:11 2026 GMT
        Subject: CN=6acb485f-3bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b2:81:f5:1b:17:2c:ee:bb:64:fe:9c:94:06:
                    64:c0:81:36:b9:5b:1b:5a:64:10:fe:4a:95:de:76:
                    40:48:22:af:ad:f3:c2:03:21:1d:e3:73:26:3f:f8:
                    79:41:f5:1a:01:3c:f5:0b:d4:6e:ae:04:e9:08:35:
                    43:67:0a:e3:a1:bd:b0:3d:a8:62:c7:02:5e:0a:d1:
                    97:2a:e8:92:dc:e6:d1:5c:e4:37:e5:c3:59:d8:b6:
                    72:18:6c:61:6b:2b:47:9e:d1:82:f9:ba:be:96:55:
                    5b:23:4d:dc:d7:8e:36:91:98:eb:4a:29:c2:e0:9b:
                    e2:fc:ae:d1:88:a4:eb:bd:db:5f:1f:35:1a:ea:d4:
                    a7:26:bb:2d:79:aa:3d:3e:4a:c3:97:2b:5b:f2:1a:
                    38:93:80:c7:46:74:12:c5:97:f8:e6:f1:f9:c7:08:
                    70:ad:07:1b:71:da:b4:73:af:00:ab:11:91:ae:c2:
                    91:83:2b:fe:70:d6:35:1d:ac:7a:d1:04:23:b2:6d:
                    b2:4b:2c:7e:93:84:b2:16:5e:04:18:2d:55:61:77:
                    60:22:ee:55:6a:08:4f:45:28:2f:61:04:0e:62:8b:
                    ca:7b:fc:f6:7d:fc:35:8c:cc:b8:20:39:56:9c:7b:
                    7e:ff:97:a6:19:d1:12:85:17:dc:e6:46:33:de:62:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8C:B7:A0:FA:34:70:32:9D:03:B3:85:20:C1:02:6E:24:07:00:C2
            X509v3 Authority Key Identifier:
                keyid:37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:df:95:d1:e6:ef:68:17:2b:28:b6:10:1d:f3:df:0e:24:7e:
         73:f5:3c:db:b7:a4:93:bd:fc:37:93:73:29:1e:d5:91:5d:4c:
         3e:7d:47:68:be:0c:78:13:47:eb:6d:05:55:67:ec:08:3c:82:
         42:18:46:6e:59:8a:d0:5b:b2:04:0d:62:e6:44:4f:b3:e2:9b:
         6e:cf:10:44:d0:47:b0:44:23:d8:e9:b2:d9:db:a8:cd:0b:80:
         35:85:5b:79:4c:32:fe:6c:bc:b9:29:7a:10:b4:b6:01:3f:6c:
         44:16:30:4d:ef:3a:41:77:a5:29:fc:f9:19:79:fd:a4:e8:80:
         5b:b2:92:ef:3c:5a:b7:7d:78:55:99:d1:eb:3f:43:14:a6:0c:
         4b:8f:07:19:15:b0:f8:b7:8e:8e:dc:6d:21:63:77:f7:1f:1e:
         b3:1f:f9:bf:97:34:60:e7:73:fc:cc:d0:b6:48:46:58:30:0f:
         6f:4d:1d:7c:73:3f:ce:c3:84:65:f2:79:80:e4:f1:55:ba:1b:
         a1:0e:4c:a5:0b:05:4f:b8:54:be:17:b3:8a:d3:27:d0:9e:b0:
         d8:27:44:72:09:4a:0d:13:92:e0:91:9e:34:aa:a4:83:2b:8b:
         22:37:32:9f:81:cd:e1:4c:5f:4e:28:75:33:e9:c4:6a:49:10:
         fb:f8:fa:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1ODcxMTAvBgNVBAUTKDM3QjBGMDEwMEQzQkMzREVFNjVEOUJFQjBBRUNDNENF
RTFGQjM2NTUwHhcNMjYxMDExMDgyNzExWhcNMjYxMDE4MDgyNzExWjAYMRYwFAYD
VQQDEw02YWNiNDg1Zi0zYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3LKB9RsXLO67ZP6clAZkwIE2uVsbWmQQ/kqV3nZASCKvrfPCAyEd43MmP/h5
QfUaATz1C9RurgTpCDVDZwrjob2wPahixwJeCtGXKuiS3ObRXOQ35cNZ2LZyGGxh
aytHntGC+bq+llVbI03c1442kZjrSinC4Jvi/K7RiKTrvdtfHzUa6tSnJrsteao9
PkrDlytb8ho4k4DHRnQSxZf45vH5xwhwrQcbcdq0c68AqxGRrsKRgyv+cNY1Hax6
0QQjsm2ySyx+k4SyFl4EGC1VYXdgIu5VaghPRSgvYQQOYovKe/z2ffw1jMy4IDlW
nHt+/5emGdEShRfc5kYz3mKuTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6Mt6D6
NHAynQOzhSDBAm4kBwDCMB8GA1UdIwQYMBaAFDew8BANO8Pe5l2b6wrsxM7h+zZV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU4Ny9CODQwRUQ4NjEz
NkUxMUYxQUQ3OTFCQTMzMTNEOEM2Ny9ON0R3RUEwN3c5N21YWnZyQ3V6RXp1SDdO
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL043RHdFQTA3dzk3bVhadnJDdXpFenVIN05sVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjU4Ny9CODQwRUQ4NjEzNkUxMUYxQUQ3OTFCQTMzMTNEOEM2Ny9ON0R3RUEwN3c5
N21YWnZyQ3V6RXp1SDdObFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHd+V0ebvaBcrKLYQHfPfDiR+c/U827ekk738N5NzKR7VkV1MPn1HaL4MeBNH
620FVWfsCDyCQhhGblmK0FuyBA1i5kRPs+Kbbs8QRNBHsEQj2Omy2duozQuANYVb
eUwy/my8uSl6ELS2AT9sRBYwTe86QXelKfz5GXn9pOiAW7KS7zxat314VZnR6z9D
FKYMS48HGRWw+LeOjtxtIWN39x8esx/5v5c0YOdz/MzQtkhGWDAPb00dfHM/zsOE
ZfJ5gOTxVboboQ5MpQsFT7hUvhezitMn0J6w2CdEcglKDROS4JGeNKqkgyuLIjcy
n4HN4UxfTih1M+nEakkQ+/j6yg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:43:54 2026 by rpki-client