Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
File:                     x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json)
Hash identifier:          HrUeo9vPcxLqzZcLejnQTg8unNPoSlMPyRG+2G85viw=
Subject key identifier:   2F:7D:19:DE:64:9C:AC:09:2E:A8:72:11:77:67:BA:30:52:55:78:51
Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
Certificate issuer:       /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Certificate serial:       17EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
Manifest number:          17BD
Signing time:             Tue 06 Oct 2026 16:36:59 +0000
Manifest this update:     Tue 06 Oct 2026 16:36:59 +0000
Manifest next update:     Tue 13 Oct 2026 16:36:59 +0000
Files and hashes:         1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: TT4YrAwhBbatKB80+ltSobSxcxzOHaMyNvgxu4x95Tc=)
                          2: 211910241E9E11F1A28347ED0E3D8C67.roa (hash: ZSTWW9qrTYokmi90xJvxyauGPHUOECGBx3bhI8hlBGM=)
                          3: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: puJkWVITf2df7u3Qj+93ztEl+0qqlVGDPJp1OeHAKxQ=)
                          4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: WA8xCRlxR3rKk8ClNGxGNEmsKJNt1HuKBEMk6slXSYM=)
                          5: 0897E314434811EF8E76757AC4F9AE02.roa (hash: hPIaiMSBFYLOvrueCE00fDgAwAADdWAf1f9rpZpgG+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6127 (0x17ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
        Validity
            Not Before: Oct  6 16:36:59 2026 GMT
            Not After : Oct 13 16:36:59 2026 GMT
        Subject: CN=6ac523ab-2771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:4e:a4:68:9d:23:cc:1d:ac:91:0e:a7:70:
                    70:16:0a:00:80:2b:78:f3:e4:19:3b:f3:88:2a:4d:
                    16:00:77:c9:08:ce:c6:2d:c1:ae:fc:d4:2c:de:1e:
                    3b:f8:19:54:90:0b:19:b6:6b:8a:a0:9c:24:d9:8e:
                    9d:ab:b1:fc:6b:32:e5:82:ea:9f:8f:8f:59:8a:f3:
                    98:5b:e7:57:d4:a2:60:18:73:27:3a:2f:69:26:25:
                    31:0a:87:a5:38:f8:64:8b:59:83:79:5e:9d:d9:cd:
                    96:f9:a4:0f:2d:02:36:89:fa:b1:c7:cf:fb:6e:c2:
                    08:8e:30:8d:4d:19:49:d4:fd:5b:5d:f9:02:53:b8:
                    a5:26:34:3d:1f:be:2a:00:42:6a:10:ac:a8:01:e9:
                    98:6f:1f:a0:22:c3:42:67:d4:eb:ed:9d:b7:55:e2:
                    2f:f3:85:fc:a7:66:e8:d0:2d:f2:8e:50:16:1c:fc:
                    96:a4:2d:4b:a4:56:0c:40:fa:de:7d:0c:1d:9f:7a:
                    0a:49:f4:ed:17:58:9d:59:3f:d5:82:46:e1:fa:c4:
                    b8:e6:10:9d:66:59:46:68:75:75:0e:e0:d9:a3:40:
                    f5:e3:21:e9:6b:e0:8a:32:e5:d6:94:1f:d9:d4:51:
                    e0:60:cd:88:20:b0:41:80:fb:b2:b9:5e:bb:ef:14:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7D:19:DE:64:9C:AC:09:2E:A8:72:11:77:67:BA:30:52:55:78:51
            X509v3 Authority Key Identifier:
                keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:97:12:02:ba:25:8c:0f:48:c6:9a:8a:92:a4:e1:69:d3:a5:
         69:28:1a:a8:5e:27:ac:c6:97:bb:73:fa:44:2a:cd:64:a3:fd:
         c8:35:51:90:fe:f1:d7:58:c8:14:e4:6a:e0:23:ba:13:3c:29:
         78:51:a1:70:cd:39:82:d4:d8:77:01:17:25:04:5b:b9:b5:5d:
         91:fd:16:d0:39:3e:31:3d:48:f3:01:25:0f:0f:db:5a:c2:16:
         30:01:5d:3a:59:73:78:ca:15:f6:b1:68:fd:37:cc:c0:ed:88:
         7c:6c:1a:c4:53:48:d1:95:09:d1:a5:23:92:07:37:22:dd:e8:
         ba:3f:0f:90:0c:25:49:fb:6e:c3:67:e4:8c:e3:a5:4f:9e:5b:
         a4:c5:2b:8d:cd:68:19:01:37:56:0d:4d:7d:3b:f2:30:42:66:
         46:7d:93:b4:72:60:4f:65:17:1e:1b:11:b2:a5:0c:a8:48:7e:
         8c:e5:37:19:47:cd:c5:eb:66:8c:a1:23:08:c3:a3:72:ae:f9:
         6c:bd:e8:91:ba:7c:a0:24:74:b7:92:97:e6:bd:cc:a8:1a:90:
         75:9d:36:37:35:ba:01:dc:63:15:13:1e:95:07:31:e5:f7:94:
         70:70:18:84:3d:29:c7:e1:e3:bd:d3:70:00:41:3e:ae:3c:e4:
         cb:89:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:07:49 2026 by rpki-client