Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File:                     7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier:          4V8ZHREK9NNSmpW0P+u/yuMck4mDZPt8IEVqaR0NHfI=
Subject key identifier:   4B:3B:5E:02:D1:AC:11:A9:29:34:D9:0E:0A:48:32:DA:D6:41:06:B1
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer:       /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial:       1A5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number:          1A3F
Signing time:             Sat 10 Oct 2026 16:21:22 +0000
Manifest this update:     Sat 10 Oct 2026 16:21:22 +0000
Manifest next update:     Sat 17 Oct 2026 16:21:22 +0000
Files and hashes:         1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: Irisqp1qYuzzzhD68HQoFkIX02piQ0fym3RLAasibwI=)
                          2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: k6JasZ6qDQky92WYRiIlqMqoQzsCwvXop3AMU2lxOjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
                          rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 16:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6750 (0x1a5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
        Validity
            Not Before: Oct 10 16:21:22 2026 GMT
            Not After : Oct 17 16:21:22 2026 GMT
        Subject: CN=6aca6602-708b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:ba:f9:d7:11:ed:1d:f3:dc:b7:ed:1a:c4:
                    46:32:ca:da:b8:77:03:97:cd:a1:5a:57:f7:5c:1c:
                    b3:68:85:fa:f5:dc:bd:67:9a:e0:e9:79:bc:0c:08:
                    06:c0:82:2e:8e:8d:ea:e5:63:8c:aa:2c:18:74:f3:
                    ce:52:7f:a4:7e:06:a6:9e:01:d4:a6:0b:dd:30:20:
                    c4:7d:25:c6:ff:09:f8:55:9c:37:fd:50:34:43:67:
                    7f:fe:e6:10:c1:99:8c:04:bd:a0:03:86:5b:24:a8:
                    bd:ff:56:bc:17:93:39:f7:28:81:0b:56:74:9a:d1:
                    f1:59:88:12:03:8e:ce:bc:14:79:01:be:82:88:cf:
                    00:54:ad:89:0f:e4:21:ed:56:e2:7e:6a:22:72:9a:
                    92:9d:97:ee:72:f1:24:cd:f2:26:20:8f:73:7a:74:
                    34:cf:c9:d4:e6:c5:f2:6c:b9:92:47:88:b1:25:14:
                    06:a1:6b:ba:f1:e3:9c:ef:a7:43:58:27:4f:8c:2e:
                    79:04:20:ec:fe:94:11:c4:20:82:73:e2:5d:b5:95:
                    be:58:1d:ca:3b:dc:77:0e:b3:86:c5:c5:50:1c:fd:
                    b7:a7:0c:de:e2:c8:2d:f2:28:ed:9c:33:43:cf:23:
                    07:2d:a9:23:d5:ac:5e:f2:56:10:86:75:a4:d4:c2:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3B:5E:02:D1:AC:11:A9:29:34:D9:0E:0A:48:32:DA:D6:41:06:B1
            X509v3 Authority Key Identifier:
                keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ba:ca:94:28:17:17:22:9a:85:fb:e1:2d:f1:12:f9:e9:f8:
         15:86:33:60:69:7f:de:f7:f6:59:e0:3a:be:b0:ac:3b:3d:48:
         a4:7c:cb:35:5a:67:8d:1f:e1:21:95:92:70:f8:c9:d2:7e:1f:
         9b:c5:3e:8a:ec:39:d9:9e:c9:2f:b1:d0:c1:a7:0f:b2:06:71:
         b6:c5:5e:ba:8d:40:fe:cc:72:9c:ef:be:53:24:9c:ee:56:7c:
         2b:22:65:3d:dc:b2:ca:cc:e8:94:e4:07:32:b7:68:30:dd:87:
         55:dd:13:f3:47:b0:70:9b:00:7e:e3:88:80:1f:53:f3:16:80:
         22:53:9a:17:04:73:5d:b8:1b:9e:8f:c3:7a:be:a3:51:a9:61:
         93:29:28:1e:ba:2a:2c:a0:f7:3e:01:e2:43:ca:8b:89:cb:cf:
         33:ac:76:dd:4a:a0:eb:c2:44:20:b0:72:db:cc:f9:73:c3:08:
         e0:e7:e3:a9:ca:d7:0e:53:22:57:7a:d5:db:88:c7:20:a7:b9:
         36:ca:53:b5:a1:84:3c:bb:3a:e6:9b:9a:9f:a2:57:e7:48:3e:
         af:0c:1a:b4:dc:4b:c3:6d:d1:c1:28:05:86:be:2b:75:e3:d6:
         42:b5:4a:f3:47:2c:b6:99:06:6c:72:52:41:da:ba:9a:e2:9f:
         d3:4e:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:05:00 2026 by rpki-client