Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
File:                     C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json)
Hash identifier:          RjTMSwU2w5ATAeIIc98v+asmoR3RtLm+is5Vowy3Knc=
Subject key identifier:   DB:B4:35:06:51:7F:CF:94:17:75:60:64:9D:DB:54:94:4F:D5:11:A3
Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F
Certificate issuer:       /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
Certificate serial:       064B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
Manifest number:          0637
Signing time:             Thu 24 Sep 2026 22:37:15 +0000
Manifest this update:     Thu 24 Sep 2026 22:37:14 +0000
Manifest next update:     Thu 01 Oct 2026 22:37:14 +0000
Files and hashes:         1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: SA5jGRmyvIU/eNboga4KLNAU6y0g6QoG8zVZN0G15UE=)
                          2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: brrWyiXDAT96zPwT9YFF9H7HSt3GNNOYu7ZR6/bGT4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
        Validity
            Not Before: Sep 24 22:37:14 2026 GMT
            Not After : Oct  1 22:37:14 2026 GMT
        Subject: CN=6ab5a61b-8742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:d4:a6:68:3f:c5:6a:eb:b8:42:04:7c:11:
                    73:e3:08:c2:cf:5d:42:92:b8:06:16:98:c0:41:7e:
                    be:58:b2:ac:7c:2b:d1:d1:01:e8:f0:1d:fe:bf:86:
                    51:80:8b:f6:fa:05:71:7f:bd:eb:cb:ab:d8:2a:a3:
                    18:5b:29:68:3d:8c:0d:c5:c5:c8:a4:b6:c0:aa:5f:
                    e4:35:90:a5:3d:6d:28:8a:6c:3b:45:c8:fd:0e:c3:
                    cb:f5:8b:a6:b4:e6:3e:6e:5d:da:6c:0f:28:ac:f6:
                    21:85:e6:61:9d:68:01:6f:86:5a:f7:0c:c4:d9:c0:
                    c4:68:fd:ec:f8:16:8e:e5:4e:8e:ec:b2:3b:79:6e:
                    54:30:79:f6:a5:b7:99:7f:4b:08:81:92:2b:ac:f0:
                    f2:20:02:87:c8:99:cc:f6:b9:1b:69:bc:6a:b5:3e:
                    d7:5f:b6:07:50:02:c2:84:0a:48:90:fb:92:f7:ff:
                    10:b3:79:ba:40:0a:11:cc:d8:2c:55:53:a0:5a:f5:
                    67:08:02:94:96:ca:17:8f:9d:9a:f8:0e:1f:93:60:
                    2f:01:97:3f:08:91:00:b5:37:56:dc:c1:9e:46:d5:
                    72:29:4d:45:08:b4:12:23:c7:20:81:dd:e8:b3:f5:
                    ef:64:46:b6:79:56:32:30:62:b5:23:8d:16:35:b6:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B4:35:06:51:7F:CF:94:17:75:60:64:9D:DB:54:94:4F:D5:11:A3
            X509v3 Authority Key Identifier:
                keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5e:94:c2:da:2e:fb:1e:f3:81:01:68:69:7e:99:74:11:92:
         67:c9:37:36:0d:89:e8:f4:8a:a8:77:bf:e9:ae:41:6f:07:80:
         b4:58:64:e5:ee:17:70:19:3e:80:e7:41:f6:c3:c1:a7:a7:ed:
         f6:9a:74:d8:21:74:f3:b5:2c:61:e2:cf:c8:27:a5:2b:a3:65:
         1e:f4:3e:87:f7:2a:e4:c1:04:fb:28:26:54:0f:e0:b9:0f:b9:
         bf:d1:0b:db:55:41:36:9a:d9:49:ec:82:0d:09:e6:9f:33:e2:
         c5:fa:22:9f:f7:3f:90:02:22:f6:42:65:ae:fe:4a:22:29:71:
         fe:e7:d1:f2:5d:62:3c:a4:2d:b8:f9:3f:c4:bf:00:80:76:ce:
         56:ae:aa:d8:b1:32:b9:1a:8c:df:80:5e:c5:a4:14:86:39:23:
         58:68:b1:5f:97:c3:cb:81:57:a9:0f:e4:25:85:a3:8d:4e:09:
         65:b6:a3:6f:d5:94:9e:48:6c:f5:68:a1:ff:3c:71:a1:d4:4e:
         00:ea:93:7f:9a:a9:11:3e:e0:21:4d:ad:31:21:22:5e:0a:be:
         7d:b4:a0:da:df:7d:3d:fb:01:5d:3b:62:4f:e7:98:01:81:46:
         76:72:16:58:5f:ac:a8:5f:cd:e1:48:77:6a:75:f3:01:19:30:
         ac:30:0f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:34:35 2026 by rpki-client