Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
File:                     idaQRux8ca1__5jk_Zu5iB8pnIk.mft (raw, json)
Hash identifier:          wtnU6HFLA0+JYbpkXKobs2AzpfKLDnYVlU8/nznn8Ow=
Subject key identifier:   32:4A:99:33:9C:B5:CC:41:E0:47:95:73:AF:3B:27:DB:E1:80:AF:FB
Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
Certificate issuer:       /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
Manifest number:          7B
Signing time:             Mon 21 Sep 2026 07:48:07 +0000
Manifest this update:     Mon 21 Sep 2026 07:48:07 +0000
Manifest next update:     Mon 28 Sep 2026 07:48:07 +0000
Files and hashes:         1: idaQRux8ca1__5jk_Zu5iB8pnIk.crl (hash: K0QVoiBA1vzUIVjrlXrI1ey3DCK0eWejCbkaJZrwpcg=)
                          2: 4A5A1A32001211F1BC55B3C9406F56BC.roa (hash: yCCSOKLm19MpEiNQt1HNvusaS66zOK2dLX4/U/YPzqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
                          rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
        Validity
            Not Before: Sep 21 07:48:07 2026 GMT
            Not After : Sep 28 07:48:07 2026 GMT
        Subject: CN=6ab0e137-47b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:5a:3b:b8:0e:ed:7d:6a:aa:45:ee:ad:de:
                    60:6e:da:33:ea:33:b5:fd:1f:3a:51:07:b6:77:c3:
                    84:15:ae:3b:9b:c7:c9:bb:93:55:95:d9:64:49:82:
                    6b:cb:ea:86:e3:1f:5f:33:ce:c2:4c:73:a9:f7:98:
                    30:58:68:48:60:e3:67:b1:44:ce:63:86:2f:96:44:
                    0f:93:92:d7:63:51:21:10:bf:7b:ad:c3:cb:d2:f3:
                    c4:c7:a1:1d:5d:37:34:f4:c5:66:a2:1b:3a:24:e2:
                    41:c2:f4:cc:64:83:0d:0b:eb:b5:ab:29:76:cb:f3:
                    24:43:bc:44:4c:84:86:d6:87:b6:31:47:68:4a:ec:
                    fa:ce:54:ba:2b:b3:51:99:a4:73:06:81:79:ca:90:
                    da:83:e4:d7:c7:e9:d3:98:e8:87:16:b9:77:4d:89:
                    93:b6:fb:29:a3:2f:ff:5b:b2:67:06:79:47:85:6e:
                    4c:96:0c:db:5b:d3:1a:d2:c5:92:bb:40:6a:2b:fd:
                    93:56:b2:78:2f:47:89:f1:4b:71:c3:38:ec:6f:9e:
                    33:86:36:99:ab:e0:b8:61:66:45:a0:69:b9:69:2e:
                    2c:8a:65:1f:c6:8a:55:ba:44:ab:94:33:97:b6:6a:
                    e9:b5:35:56:8c:2f:30:1c:29:42:41:fb:5d:47:ad:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4A:99:33:9C:B5:CC:41:E0:47:95:73:AF:3B:27:DB:E1:80:AF:FB
            X509v3 Authority Key Identifier:
                keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cf:87:e8:ce:21:da:bc:20:3d:e2:fa:b1:a0:bb:93:0b:6c:
         11:a0:68:bc:4f:3a:c4:03:f1:1d:aa:42:d4:39:9e:ba:58:d1:
         20:d4:18:82:84:b3:73:89:f8:a7:b5:73:01:7c:76:6c:30:14:
         29:2b:72:34:d2:02:f0:2c:53:0d:53:9a:e6:d6:7d:6a:65:85:
         a1:41:d4:72:86:44:e5:d4:e1:2f:b5:93:bd:16:c5:3a:d5:05:
         ef:d1:60:22:d0:55:9f:91:52:6a:67:ea:8f:09:8c:dd:f4:7b:
         e0:c0:0c:bd:99:38:b6:3c:79:19:d0:d7:95:77:a1:b9:a2:3e:
         19:97:cb:c1:f7:e5:bc:ec:e4:90:cd:7b:7d:7e:13:48:65:ae:
         8d:8c:c7:59:7a:4a:c0:52:81:a5:a6:ec:c6:2f:87:01:d7:b4:
         01:5f:32:60:62:25:7f:cc:eb:69:8f:84:e8:03:6b:71:15:d2:
         ea:66:71:68:9f:6a:82:f6:fe:7d:b1:b1:8f:9c:21:14:a2:92:
         a7:52:d9:f3:48:70:2b:44:8b:db:bd:89:e2:35:c4:e8:de:77:
         40:b8:c0:1b:18:40:24:4c:fa:b8:55:2c:dc:a5:f5:c9:3c:14:
         44:ac:84:e6:d8:34:7b:8b:b4:ad:b6:e4:18:00:b4:73:6b:d7:
         10:e0:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:18:31 2026 by rpki-client