Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
File:                     7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json)
Hash identifier:          Oy1nsksjmmxc1qjvOQsabaWlXl5V2LiGOZnsTJEAVqk=
Subject key identifier:   4F:B9:99:F1:A6:AD:B0:B0:40:C2:01:BE:5E:3B:9A:B1:77:6B:32:B8
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Certificate issuer:       /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial:       08A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
Manifest number:          0897
Signing time:             Sun 20 Sep 2026 20:35:02 +0000
Manifest this update:     Sun 20 Sep 2026 20:35:01 +0000
Manifest next update:     Sun 27 Sep 2026 20:35:01 +0000
Files and hashes:         1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: yFaccQitEjYfSwP0uawby++cfAwMlUgBO3zNMvsT+r0=)
                          2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: 2EY7R7tVDdd7hDu3kyFJDxK/DA0IkkvmNGWO1GOsC/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
                          rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2208 (0x8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
        Validity
            Not Before: Sep 20 20:35:01 2026 GMT
            Not After : Sep 27 20:35:01 2026 GMT
        Subject: CN=6ab04376-b0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:9c:64:a6:83:11:76:d6:54:71:a6:cd:da:
                    fc:87:a2:5c:82:af:cd:61:6c:0d:d6:cf:46:45:6d:
                    f5:46:09:2f:47:7b:9e:87:96:6a:01:d3:2f:27:b6:
                    dc:d5:88:5c:0d:43:6d:37:a9:e5:b6:7c:d8:41:74:
                    4c:0e:71:e2:fb:e6:66:a4:85:4d:bd:54:0d:7c:56:
                    54:95:5a:bc:75:b3:cb:83:17:ae:ad:0a:6d:b4:be:
                    40:23:87:ae:5d:61:ed:27:ac:6b:7a:f9:aa:a4:f5:
                    41:6d:57:9b:82:2f:83:18:37:97:f1:2e:75:10:46:
                    cd:42:af:e7:91:c9:dc:c9:08:f5:73:ca:91:57:d0:
                    59:b8:93:0b:4a:fa:6c:dc:6f:cf:2a:3d:8e:fb:cf:
                    d8:4e:e3:a4:5d:0d:ec:e0:16:64:92:8a:6e:e2:97:
                    2e:80:54:42:5d:55:1c:25:37:fe:3b:68:33:f8:04:
                    46:de:8d:3e:9b:e1:18:56:ae:d6:3e:3d:d2:b7:fd:
                    dd:2a:ca:d4:f7:cb:bc:ae:1d:1b:64:d6:91:c5:ad:
                    f4:bc:4d:47:5e:b7:ef:ec:6e:cb:d3:af:3f:da:ec:
                    e5:88:54:e7:52:74:2d:44:4f:9d:15:c5:0e:42:95:
                    42:c4:da:04:9e:6a:15:6e:33:2d:01:f9:ff:f0:2e:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B9:99:F1:A6:AD:B0:B0:40:C2:01:BE:5E:3B:9A:B1:77:6B:32:B8
            X509v3 Authority Key Identifier:
                keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:e3:37:38:59:c2:0b:76:09:ec:d8:e9:6c:5a:45:71:2a:
         ab:96:53:c0:4d:65:5e:51:1c:10:27:fb:d7:67:23:e2:26:a0:
         1c:1b:0c:8c:65:23:1e:fa:91:a1:b1:d6:bb:3d:ff:90:4b:f3:
         1c:de:5d:e6:55:26:3e:86:53:d4:d4:13:47:ae:dc:e2:63:93:
         c6:88:24:d1:ab:4c:b3:af:ac:c7:09:11:77:e0:40:76:e4:ec:
         d8:b4:40:bd:0c:03:a2:27:bb:b9:bf:66:76:c7:65:e8:b1:6d:
         8e:9b:19:aa:aa:85:27:1e:22:c5:0e:81:77:9a:6d:a7:1a:e1:
         7a:24:bb:98:84:6a:53:ce:84:77:5c:e9:97:e3:b1:fe:1b:91:
         68:ab:c9:f3:0a:0e:d1:dd:cd:30:1e:c3:56:1c:e8:b1:4c:13:
         ab:ff:c6:0d:d0:58:31:91:6c:0a:ca:82:ce:79:d6:bd:4c:c5:
         6a:a0:9f:42:ab:a4:a4:ba:18:22:87:69:89:7d:0f:63:42:c6:
         a4:21:cf:63:7d:1b:9e:3f:2b:50:83:66:43:ae:b2:86:90:1f:
         d0:6d:51:e7:72:27:39:fb:a6:0e:09:6a:82:52:39:80:dc:fa:
         17:61:04:eb:04:22:97:7f:7d:c7:4b:b4:66:0a:80:ea:e8:e0:
         28:ac:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:54:38 2026 by rpki-client