Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
File:                     788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json)
Hash identifier:          QJa5VvxUt9QcxTG9sJsJJX1PGk5L3+Jw4yQP22UANVg=
Subject key identifier:   E1:EF:5E:DB:12:1B:04:AE:87:93:80:C5:0C:08:C4:A9:18:45:13:83
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Certificate issuer:       /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial:       0927
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
Manifest number:          0918
Signing time:             Wed 14 Oct 2026 20:28:41 +0000
Manifest this update:     Wed 14 Oct 2026 20:28:41 +0000
Manifest next update:     Wed 21 Oct 2026 20:28:41 +0000
Files and hashes:         1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: R6K5KBsqwQ+EvUOo7KaSMGL96N6SuXxd7/OojUZNm5c=)
                          2: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: zxnU04Q4bb1lJGkT9VOzuX1RdTtK4DGbDTsvDe9EOa8=)
                          3: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: yZtWfMF7pmNFTR+kKQnF17mRloCfv5aI0+tF3Sx3gqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
                          rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 18:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343 (0x927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
        Validity
            Not Before: Oct 14 20:28:41 2026 GMT
            Not After : Oct 21 20:28:41 2026 GMT
        Subject: CN=6acfe5f9-bab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:65:b0:ec:89:d2:62:e8:ac:00:95:8d:1e:0a:
                    1b:64:d3:d4:13:2d:4c:9a:95:e7:31:d4:4c:2a:7c:
                    e7:02:3c:a1:bc:b2:48:99:7b:92:36:dd:00:ae:2b:
                    eb:e6:de:ac:e2:d0:b7:fd:6e:68:0c:7d:36:66:62:
                    ca:36:06:3e:0f:79:a2:b9:cc:97:b8:52:be:7c:55:
                    73:a3:20:46:c6:d0:a0:66:4d:78:a1:50:70:cb:65:
                    84:f9:06:7f:d3:a6:1a:b0:dc:90:46:22:9e:86:16:
                    00:1b:c6:bb:ce:f0:37:69:3a:13:63:aa:de:28:d2:
                    d7:c3:dd:eb:69:2b:92:94:07:42:b0:28:03:ad:36:
                    ac:18:08:e9:1d:d1:53:55:3a:80:b9:18:1b:50:85:
                    c1:5b:c2:c9:92:f7:95:04:79:53:dd:cc:7a:17:5b:
                    36:2a:93:db:8c:f5:53:e2:91:94:c3:81:49:f0:a5:
                    04:24:f9:02:4b:16:25:2d:5f:d6:17:5e:2e:b6:f8:
                    1c:a4:33:84:27:b6:67:03:5d:7c:6a:5d:dc:73:e5:
                    3f:cc:ea:aa:ca:1c:7a:92:35:65:37:bf:7d:56:19:
                    c3:45:00:20:86:45:86:e4:f0:7b:28:91:04:ab:4f:
                    77:a0:f3:09:fc:83:fa:f5:6e:f3:55:bb:3d:94:78:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EF:5E:DB:12:1B:04:AE:87:93:80:C5:0C:08:C4:A9:18:45:13:83
            X509v3 Authority Key Identifier:
                keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:df:03:0e:bd:ee:a1:be:af:6f:26:13:f2:f6:be:45:bb:e7:
         19:74:57:28:c2:78:59:ac:2f:74:df:fd:bc:68:bb:dd:ea:66:
         15:4e:b0:92:b3:fb:ec:76:71:00:f4:b9:fc:d6:07:03:b8:3d:
         ac:2d:6a:3a:8c:06:e1:09:6e:bd:53:0c:47:5c:8e:6c:10:f8:
         9c:18:dd:f5:2a:ab:f1:ea:e7:c1:8c:20:2c:87:6f:54:67:f4:
         66:6d:12:ce:04:ac:52:db:47:1c:12:e6:49:c6:ab:7d:a8:95:
         6a:f1:44:a9:c8:d2:de:bc:4d:67:8b:89:fd:82:c1:57:1e:b4:
         2b:fe:4f:87:64:0e:ff:4d:9e:39:09:cc:00:58:f9:0b:94:03:
         14:d2:e1:17:4d:dc:29:4e:da:34:c4:b9:4c:b1:70:47:46:e9:
         37:7f:04:50:5f:53:09:19:21:48:08:f3:0c:ab:35:05:ba:b3:
         79:26:66:60:a6:a6:56:2b:63:5b:55:2a:da:65:66:36:02:8c:
         7a:27:c8:30:45:76:37:22:d6:39:bc:cf:9c:a4:bf:98:a5:c0:
         8b:a4:1d:8c:ad:41:5c:78:32:1b:66:f0:af:10:50:51:9f:b6:
         cc:b8:20:8d:e3:e5:f7:2d:5f:94:1f:b2:38:59:16:c4:82:a9:
         0d:9c:fd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:17:28 2026 by rpki-client