Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File:                     f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier:          bmBAzZ/+tAHSS4JiMdP6mrFh7pslkupuUmEEqa1tf34=
Subject key identifier:   B2:3E:BF:CE:2A:19:B6:4E:0B:EC:B0:0F:3A:76:53:09:BC:79:4C:C5
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer:       /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial:       06C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number:          06B7
Signing time:             Tue 22 Sep 2026 22:07:52 +0000
Manifest this update:     Tue 22 Sep 2026 22:07:52 +0000
Manifest next update:     Tue 29 Sep 2026 22:07:52 +0000
Files and hashes:         1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: MrDlhIUxTZDxo652z8X8iQ0pKizcyA9gJwjqdOXG788=)
                          2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: 6cK1WB9mwOOoOwp+cGbSDlz8j71ro5RXPTbIMXDPpjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
        Validity
            Not Before: Sep 22 22:07:52 2026 GMT
            Not After : Sep 29 22:07:52 2026 GMT
        Subject: CN=6ab2fc38-a6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:23:ca:af:a9:88:1c:75:75:23:5e:e6:05:ca:
                    5a:5c:39:e7:ac:1d:66:72:b3:5b:e8:83:ba:63:66:
                    21:83:5f:d0:a9:14:0e:9d:6e:d0:d0:c0:76:4d:50:
                    11:f8:ea:c8:95:42:88:6c:7d:20:4d:b0:51:a5:37:
                    e3:ce:79:62:0b:11:c2:d2:07:36:d3:05:9b:18:28:
                    99:b6:00:13:a6:e5:bb:c7:f3:34:77:f0:8a:bc:2d:
                    41:3e:e6:fd:5c:56:ac:7d:e3:27:d6:ad:b4:50:72:
                    b2:04:44:57:fb:6f:da:df:38:c4:0c:ca:87:bb:09:
                    c4:82:31:82:3c:95:98:c4:48:17:fb:2e:cd:7d:da:
                    58:a7:23:f5:32:d0:04:fe:14:47:02:17:8f:0c:55:
                    fc:ac:cd:3e:b1:1b:3d:23:13:c4:79:3f:d5:e6:db:
                    4e:26:2d:88:2b:6d:d6:dc:ed:5a:fd:18:82:01:18:
                    0b:e1:0f:b2:50:72:20:28:97:08:aa:aa:ea:8c:d9:
                    1a:b5:0e:c6:d5:04:61:88:33:0f:44:3c:88:c6:1d:
                    f5:59:0c:fa:87:9e:67:45:32:b5:53:ed:5f:6d:45:
                    f0:b4:de:46:5d:c8:0f:60:4b:0b:0a:b7:d2:e7:cf:
                    00:b5:b6:ba:54:dc:5e:11:65:35:a4:07:21:74:1e:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3E:BF:CE:2A:19:B6:4E:0B:EC:B0:0F:3A:76:53:09:BC:79:4C:C5
            X509v3 Authority Key Identifier:
                keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:58:98:07:0e:cd:c7:59:d3:c7:08:5c:ab:4a:0d:f3:b8:
         cc:a9:8d:e4:49:56:a0:12:8c:be:07:c3:83:c3:9d:07:1c:f7:
         d7:09:5d:1c:28:ce:7b:42:03:ce:27:c6:80:70:fd:bd:3a:56:
         8b:59:43:43:d5:f2:16:71:db:87:56:ff:6b:69:1b:fb:07:9e:
         e6:12:7e:92:65:61:9f:d0:92:37:ce:21:0d:c9:4c:92:99:ed:
         97:cb:fa:ce:89:03:52:1a:73:9c:76:8c:8d:5d:67:1e:78:bd:
         c3:b8:46:8e:4b:8f:8e:38:36:39:c4:ef:e0:cf:85:01:64:03:
         63:e2:e1:36:5f:d5:25:3f:d0:c9:6e:31:18:80:2a:13:a8:87:
         eb:e8:bd:ca:f6:35:00:ab:c0:63:44:6f:cd:f1:08:84:17:e5:
         91:dd:ed:de:da:4d:5e:0a:37:5c:8d:c1:4d:4d:44:3f:6a:2c:
         85:e1:04:dd:5a:27:16:e4:47:e9:c2:de:6f:5c:47:bf:72:d7:
         18:81:43:8e:6f:4d:a2:98:9d:f6:c0:c2:ad:ed:dd:7b:22:f8:
         69:0d:ca:94:92:98:1b:f4:c1:53:5c:05:cb:f8:4f:7e:7e:a2:
         5e:29:51:3c:fb:0a:52:f2:65:73:e1:92:8b:d2:93:86:4c:ef:
         5b:e2:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:22:06 2026 by rpki-client