Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
File:                     MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json)
Hash identifier:          swGLyPJR83R5zvH+coJ6aUV/ZbSlUwyFOgBbzELnPwI=
Subject key identifier:   A2:6C:0E:53:96:45:FC:45:69:0A:CB:24:AA:81:0F:42:2D:A0:0E:73
Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
Certificate issuer:       /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
Manifest number:          E7
Signing time:             Mon 21 Sep 2026 06:28:10 +0000
Manifest this update:     Mon 21 Sep 2026 06:28:10 +0000
Manifest next update:     Mon 28 Sep 2026 06:28:10 +0000
Files and hashes:         1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: lvjjKntRboX7A/tqmYURGvfJxmSQYUnOWEf7bmjlxOo=)
                          2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
                          rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
        Validity
            Not Before: Sep 21 06:28:10 2026 GMT
            Not After : Sep 28 06:28:10 2026 GMT
        Subject: CN=6ab0ce7a-7d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:9a:fe:4c:6a:cd:79:3d:26:a2:66:f5:c6:
                    f7:5d:81:8f:31:b5:5c:e8:16:cf:60:42:bf:b4:71:
                    1f:89:4f:de:ba:70:0b:c4:fa:f9:98:2b:12:e8:6c:
                    da:36:26:ae:d0:69:b1:db:78:43:28:dd:04:66:9a:
                    37:ae:cd:57:9e:30:0b:04:21:7c:80:09:5a:19:a7:
                    b5:a5:dd:b3:ab:46:27:60:b1:9a:3d:12:53:8b:ad:
                    b3:44:6d:f8:16:0a:77:e4:5a:a8:a2:c7:e2:b9:a2:
                    21:ea:db:74:34:c8:d9:a5:55:34:c0:9d:f9:24:a2:
                    99:29:83:d5:0a:a5:52:c4:cf:54:e6:17:3f:70:da:
                    47:34:e8:06:3c:42:a7:1b:9c:ae:ad:28:b1:c8:0e:
                    ab:32:6a:d0:a9:6f:aa:3b:67:52:58:37:02:88:bc:
                    36:74:14:d8:4e:54:c4:a6:05:29:86:98:98:89:7c:
                    da:0b:f5:b5:b8:2d:92:f4:1e:4d:aa:23:c1:38:3b:
                    d6:ac:18:1c:42:bb:d1:7f:16:e4:04:ed:14:dd:cd:
                    59:07:02:d5:49:c1:a0:51:dc:c9:d2:dd:ac:cd:78:
                    08:b3:75:95:34:c6:d8:12:93:af:95:0b:98:ed:91:
                    e8:ce:fc:82:68:88:bc:9b:de:9c:17:d7:d7:f8:f8:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6C:0E:53:96:45:FC:45:69:0A:CB:24:AA:81:0F:42:2D:A0:0E:73
            X509v3 Authority Key Identifier:
                keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:6e:2b:2a:90:03:9e:20:92:a2:a9:74:26:77:39:62:22:
         30:d7:c3:3c:6f:2b:f5:32:a7:ed:e2:81:d3:6b:18:c3:67:99:
         bc:76:77:13:d6:f2:d6:3a:73:3b:13:19:e1:6f:1c:fe:05:28:
         d3:7e:36:cf:54:a1:57:e4:6c:5d:3e:d2:0c:e3:1a:30:f4:f5:
         87:8d:32:d9:34:d5:62:03:49:69:d4:26:2a:73:a8:fd:be:c0:
         92:19:89:f3:26:c4:38:5b:e6:73:25:50:45:e3:55:e2:8c:1a:
         5c:38:92:9f:87:a0:00:f1:da:25:81:72:e3:e7:26:99:cd:d2:
         42:cd:4c:d0:3e:f7:1c:c8:80:a9:6c:80:c0:05:5c:5b:3c:55:
         80:7d:76:f3:3f:c6:ec:05:c1:70:22:41:e2:b3:67:97:b7:2e:
         87:ed:c9:76:3d:2c:37:7a:c3:b2:e2:b1:5e:f6:04:ba:93:57:
         32:3d:54:66:63:eb:8b:5a:66:e9:3b:8f:80:a4:4a:7e:d4:68:
         b5:15:e5:32:e3:27:5b:5c:c7:75:bd:8c:75:d4:83:36:49:42:
         b8:4a:93:6d:f1:9b:8f:8a:97:70:7f:11:74:34:c8:d8:18:18:
         dc:4c:e5:51:8c:86:9f:75:55:67:00:98:57:fc:7f:15:d7:76:
         bf:f4:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:24:03 2026 by rpki-client