Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
File:                     7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json)
Hash identifier:          HAvKiKNnliv1FqTqZG9v41mPuWKrHg+OJoz0rtjHskM=
Subject key identifier:   09:67:E1:E4:88:D5:06:F4:75:18:02:10:2D:18:D5:EC:0A:4A:75:DC
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Certificate issuer:       /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial:       0B17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
Manifest number:          0AC7
Signing time:             Wed 14 Oct 2026 19:46:48 +0000
Manifest this update:     Wed 14 Oct 2026 19:46:47 +0000
Manifest next update:     Wed 21 Oct 2026 19:46:47 +0000
Files and hashes:         1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: YBxWhPr54ad0jpaxKn/JPzfcJs2DWyPUQYNnKEF27eM=)
                          2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: /MynAjOlsPDDrLH0ofjr2IcwJe85uR/Yh/gIQF7Gksg=)
                          3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: Yak8zAvp+zCmTFiqBb7JfPxw1OHM+UY0jPPh/BPCu6I=)
                          4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: Z4njT+LfGD0hhTdG6fH7Bq3vm9YCgyhIlI8vWteffgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 19:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2839 (0xb17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
        Validity
            Not Before: Oct 14 19:46:47 2026 GMT
            Not After : Oct 21 19:46:47 2026 GMT
        Subject: CN=6acfdc28-3873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:bf:47:1e:37:66:e9:4b:e0:67:65:18:34:
                    1b:38:14:e5:c4:3e:fc:ee:f0:9f:ba:1f:8f:42:08:
                    48:80:ae:37:8c:37:40:47:45:05:87:ae:e6:65:34:
                    5b:52:55:60:3a:29:55:a3:41:2e:32:0f:8e:30:6f:
                    1d:df:49:45:da:f2:f3:d8:c1:cd:f3:40:9c:8a:fd:
                    6e:ac:0b:ca:6f:30:58:e8:3a:de:20:10:ce:8b:c2:
                    cc:aa:5e:89:68:d6:e1:e8:6c:6e:1c:40:37:48:a2:
                    8c:85:3f:91:4c:14:d5:d0:2c:61:79:fb:00:e3:6e:
                    db:2c:fb:10:da:8b:81:b9:cb:9c:7a:12:cc:8d:92:
                    fa:b4:f0:0d:09:ba:fd:d8:53:15:45:d4:f6:b9:35:
                    e8:7f:35:b8:4b:97:6e:40:41:e5:44:6d:a7:02:d8:
                    b0:9f:1a:e2:2c:93:8b:2f:70:83:ee:01:b3:03:43:
                    cb:ad:c8:b1:be:bc:80:63:99:a7:d4:de:4c:ec:33:
                    24:f7:6c:46:31:64:ac:fd:ff:32:da:d1:00:03:3d:
                    2b:e9:68:b2:51:31:6f:e1:d3:db:c6:45:bc:1c:68:
                    1b:c3:c7:90:59:8d:7b:05:cb:31:0f:c4:e8:97:a9:
                    ed:2c:fc:3d:5f:f4:bc:6b:ca:80:6f:57:e2:0d:81:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:67:E1:E4:88:D5:06:F4:75:18:02:10:2D:18:D5:EC:0A:4A:75:DC
            X509v3 Authority Key Identifier:
                keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:06:9d:79:e8:0f:35:8b:6f:5b:db:41:d0:b7:54:5d:bf:
         a2:9a:9e:51:bf:56:17:87:93:48:46:b0:57:88:f3:25:9e:25:
         c7:ba:41:ec:3d:cf:1e:c1:5c:40:dc:3d:0f:d9:ac:8d:91:a9:
         fe:71:2c:c4:a0:c9:48:2b:f6:71:d1:59:f4:a0:ff:66:94:d6:
         da:40:fe:77:6e:bd:f4:ec:15:5f:3b:b2:db:b1:1c:22:c4:50:
         0d:bf:50:57:f2:09:3b:76:e4:c7:15:8e:cf:8b:5d:1a:b2:96:
         1d:58:aa:14:ee:e7:95:fc:ca:e9:3d:1c:46:70:b5:b7:a6:da:
         9a:41:57:77:5b:af:de:30:5a:5d:28:d4:92:12:d1:d2:96:82:
         2c:b0:3c:ac:e3:94:30:01:8b:63:cf:7d:96:bf:06:c4:9e:1a:
         7d:c7:05:e4:27:ee:3a:8e:b3:9a:db:e0:c0:1b:8a:77:07:3e:
         e8:a7:95:43:02:35:ad:5e:97:33:f0:40:e9:1f:20:e9:5d:6a:
         7c:b9:9c:b2:79:e1:61:31:74:99:bb:0a:95:ef:25:15:4e:95:
         96:51:be:17:da:d5:dd:a5:5c:30:c2:5c:20:1a:61:03:e2:87:
         6e:a9:e1:b0:0a:91:ea:f1:b9:8e:50:76:73:ad:1b:7a:04:7e:
         c5:10:df:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF
NjIwRUY5RjQwHhcNMjYxMDE0MTk0NjQ3WhcNMjYxMDIxMTk0NjQ3WjAYMRYwFAYD
VQQDEw02YWNmZGMyOC0zODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9y/Rx43ZulL4GdlGDQbOBTlxD787vCfuh+PQghIgK43jDdAR0UFh67mZTRb
UlVgOilVo0EuMg+OMG8d30lF2vLz2MHN80Cciv1urAvKbzBY6DreIBDOi8LMql6J
aNbh6GxuHEA3SKKMhT+RTBTV0CxhefsA427bLPsQ2ouBucucehLMjZL6tPANCbr9
2FMVRdT2uTXofzW4S5duQEHlRG2nAtiwnxriLJOLL3CD7gGzA0PLrcixvryAY5mn
1N5M7DMk92xGMWSs/f8y2tEAAz0r6WiyUTFv4dPbxkW8HGgbw8eQWY17BcsxD8To
l6ntLPw9X/S8a8qAb1fiDYFryQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAln4eSI
1Qb0dRgCEC0Y1ewKSnXcMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF
OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY
Ym9JaFMwenp6QV9tSU8tZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALCcGnXnoDzWLb1vbQdC3VF2/opqeUb9WF4eTSEawV4jzJZ4lx7pB7D3PHsFc
QNw9D9msjZGp/nEsxKDJSCv2cdFZ9KD/ZpTW2kD+d2699OwVXzuy27EcIsRQDb9Q
V/IJO3bkxxWOz4tdGrKWHViqFO7nlfzK6T0cRnC1t6bamkFXd1uv3jBaXSjUkhLR
0paCLLA8rOOUMAGLY899lr8GxJ4afccF5CfuOo6zmtvgwBuKdwc+6KeVQwI1rV6X
M/BA6R8g6V1qfLmcsnnhYTF0mbsKle8lFU6VllG+F9rV3aVcMMJcIBphA+KHbqnh
sAqR6vG5jlB2c60begR+xRDffA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:03:39 2026 by rpki-client