Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
File:                     CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json)
Hash identifier:          nBO3B8wR/+fRpFgdAAqUIO8kQll4wKR/V+ZdeLjm2iQ=
Subject key identifier:   9A:6E:D2:A1:66:F3:4E:BF:B3:CC:59:B5:96:51:54:34:F9:71:6A:1A
Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
Certificate issuer:       /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Certificate serial:       06F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
Manifest number:          06EA
Signing time:             Sun 20 Sep 2026 22:06:19 +0000
Manifest this update:     Sun 20 Sep 2026 22:06:19 +0000
Manifest next update:     Sun 27 Sep 2026 22:06:19 +0000
Files and hashes:         1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: l4JaEU4Nt/sFui/3fFgwk4caxEDfVGOttb+9QjjHvDU=)
                          2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 3xq5p3AVGt409aSIRk2oci21u6gbUU5aFa+YoaSFvTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
                          rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
        Validity
            Not Before: Sep 20 22:06:19 2026 GMT
            Not After : Sep 27 22:06:19 2026 GMT
        Subject: CN=6ab058db-42f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:81:f6:b3:01:e4:8f:d0:38:fc:8a:4a:76:
                    13:2f:8d:56:54:6e:7f:5d:50:ac:34:f2:c3:5c:38:
                    7b:d3:20:d9:b9:35:3e:2a:56:2e:6f:57:35:1f:01:
                    46:ea:4d:31:b0:6d:5a:7b:1b:a3:6e:3c:96:af:dd:
                    8b:39:b6:12:bb:c9:7e:d1:91:28:9a:99:a5:95:59:
                    8b:13:f9:bb:59:82:9f:f9:35:cf:cd:e4:b9:f8:5d:
                    90:35:20:b0:75:23:76:d8:9a:e6:82:35:e4:23:10:
                    74:f7:a3:6c:d3:5f:c3:b4:6d:bb:5a:b3:4f:97:85:
                    19:73:86:ec:d4:2c:17:01:c3:3e:24:f3:3b:90:fa:
                    3b:75:07:86:c7:d0:d5:50:74:e7:6a:c3:39:80:d9:
                    62:af:9c:9d:ac:13:2e:39:fc:24:f7:0e:16:cc:07:
                    f0:27:d3:3a:82:74:8f:1c:4d:95:fc:3f:a1:b4:3e:
                    a3:0a:f3:60:aa:b7:69:6c:38:79:ab:99:61:e2:a3:
                    8b:93:52:1e:73:1c:00:02:ac:78:9d:52:f0:80:9d:
                    36:ba:b8:c8:1d:e4:b8:c7:26:97:07:06:a9:46:1e:
                    56:c0:86:dd:61:b1:ac:e9:a5:3c:74:14:5d:a7:fd:
                    50:ac:3d:25:19:2c:6c:17:89:4d:f1:7d:c3:8e:72:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6E:D2:A1:66:F3:4E:BF:B3:CC:59:B5:96:51:54:34:F9:71:6A:1A
            X509v3 Authority Key Identifier:
                keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:87:df:86:47:24:c8:cd:7b:0f:22:ab:95:b5:d8:13:36:21:
         82:9f:cd:b5:e2:2a:6d:61:d4:c0:e4:21:d4:9f:98:44:37:ca:
         bf:12:69:c7:76:20:9c:c0:eb:16:4a:d6:f2:af:1a:28:7a:c2:
         ea:62:fb:95:25:49:45:f3:8a:87:5d:95:5f:15:0c:db:1d:6c:
         68:5a:0b:c0:6e:0c:5f:b9:64:b2:2a:95:b9:3c:16:32:8a:7a:
         7e:a0:b1:41:74:da:f3:47:50:48:5d:7e:c5:9b:e1:0c:36:17:
         f6:3b:c3:cd:f6:a8:90:c4:a7:36:8a:b9:ca:b0:45:00:80:e8:
         87:f5:4a:a1:46:5b:f7:c8:14:a5:3a:c8:05:7b:b7:9c:66:9e:
         56:2e:cd:c0:09:7e:44:83:90:7b:b4:19:c0:f7:2c:23:27:b0:
         56:c8:3a:d5:68:a3:97:35:68:d6:5b:34:9d:1d:5a:46:f6:58:
         88:d9:1d:6e:a2:04:6a:02:66:7e:11:cd:e9:ab:59:cc:bd:d9:
         b3:74:95:24:7c:32:bc:ab:39:77:b1:07:55:16:1c:ad:c1:5e:
         71:a7:eb:3c:48:49:1e:16:d6:26:a4:57:d0:19:67:7b:2b:cc:
         ac:4f:95:d8:0e:45:49:e4:4c:5e:f6:fa:5d:52:f3:aa:9d:c2:
         6e:9d:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:35:06 2026 by rpki-client