Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          at9sdgU8+B1Mwwt+QdeBv9tg9hiKJqX6zkQLCBOMhxw=
Subject key identifier:   9A:8E:BA:AE:AA:BC:80:D7:DD:FE:B0:20:E0:BC:34:79:E1:C9:13:97
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       02F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          02E1
Signing time:             Wed 07 Oct 2026 01:26:01 +0000
Manifest this update:     Wed 07 Oct 2026 01:26:00 +0000
Manifest next update:     Wed 14 Oct 2026 01:26:00 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: IEbvfoEUQDXtMWbA8yWxbyMnOP6UxPkx3cscxn5+XKY=)
                          2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: Gb6Sv2PR2ZxyHabUMBcrUJFirPirEWwtzztzYQgXRmw=)
                          3: 71E6B7F48BDB11F1A5F20D8F3311F970.roa (hash: Y5v3FjIPvdcusoX29pBxfg1nvFUkAyu6SvOVbkZcVQ4=)
                          4: GxgucsSUgosAU3XrEdg2VAHcZ1A.asa (hash: u7R/ikCvSd4wV0dZOX8iGJTL3SOAHexzFM4JmSKBwvw=)
                          5: JeO3CtxkzPAcVMCreayejidrFVo.asa (hash: 51oWaKu0sYjZS07/IFjH1aIk6mMJDCGbung40phF1rs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: Oct  7 01:26:00 2026 GMT
            Not After : Oct 14 01:26:00 2026 GMT
        Subject: CN=6ac59fa8-ea50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:cd:04:90:cd:21:5b:28:8b:90:c3:41:9b:
                    0f:ff:ac:9b:61:ca:d5:7d:7e:1a:8d:a6:60:a6:3a:
                    cc:2c:3a:9c:b9:ab:d2:a7:1a:f5:91:5b:fd:e9:0a:
                    00:e0:52:69:10:43:2c:76:83:2f:47:82:91:89:77:
                    c3:e4:ae:bb:5f:fe:52:78:4e:c6:e2:fd:79:dd:1a:
                    ac:28:2c:87:fe:8f:4a:47:fc:ca:97:bb:31:01:1b:
                    a5:54:52:e6:42:ca:89:96:5e:a2:3b:0f:cb:b3:cb:
                    e2:ce:1e:ce:95:fb:4b:dc:64:55:c1:b1:e7:2e:5c:
                    75:e0:fa:85:36:25:75:a6:1b:71:08:fe:80:36:6b:
                    9d:18:3a:b9:12:10:57:62:fc:83:68:5a:61:9c:16:
                    00:71:1a:dc:76:03:50:8e:8f:04:70:da:73:e8:07:
                    56:65:64:b4:80:1c:81:c2:16:ae:0f:c1:2d:c6:e4:
                    65:15:48:08:f4:1e:92:1b:d3:0e:49:6c:e9:f4:45:
                    c7:f1:fb:1e:76:c5:c4:d8:5e:40:3d:59:e5:24:98:
                    c6:1b:24:cf:37:35:a9:3f:07:3c:86:01:ae:50:e4:
                    ff:55:cb:3c:31:d6:90:7a:5f:9a:e4:e7:89:af:55:
                    33:eb:53:8b:25:2c:5a:86:9f:7f:b9:f7:ea:39:a0:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8E:BA:AE:AA:BC:80:D7:DD:FE:B0:20:E0:BC:34:79:E1:C9:13:97
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:36:29:15:2a:7d:a8:88:f0:64:40:cb:47:d0:f6:50:6d:e1:
         9b:a5:e2:9a:bb:7d:c6:ac:82:fe:65:c1:f1:88:10:17:d5:ba:
         1e:d2:e6:19:88:22:59:ef:c3:dd:ac:61:a3:b6:47:7f:4b:47:
         7c:e8:f2:a1:19:f1:78:ac:21:8e:83:8f:ab:8a:be:cb:1e:15:
         27:4f:ad:a5:0c:f8:7a:85:aa:01:66:ae:08:02:f4:19:06:02:
         c2:4a:07:ba:63:59:92:27:07:c3:ab:83:b8:45:7f:44:f9:f6:
         80:94:59:b1:e6:89:f3:7b:f6:03:dc:11:23:36:da:04:cb:6c:
         1d:e4:4d:5d:08:c6:d7:29:29:03:8f:7f:80:a2:fc:99:42:0a:
         bc:d8:27:f8:97:11:7d:23:7c:e6:56:12:8b:14:50:33:b2:8d:
         44:68:c0:da:0c:86:78:39:18:0f:a7:96:07:b6:09:bd:a7:6e:
         fd:f1:2f:a6:b9:6a:b3:b6:38:9f:d6:15:31:41:63:d4:86:46:
         b6:cc:f8:b7:e0:78:49:4f:67:fd:19:7d:ad:80:cc:dd:4a:e9:
         4e:71:4f:2b:f3:7c:45:2c:47:cb:9a:31:8c:46:89:0a:2c:b5:
         b0:01:2d:c9:70:96:82:10:51:76:f5:57:f0:4a:38:cb:55:ca:
         19:76:91:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NzUxMTAvBgNVBAUTKEM3QjEzMDlEMDA4NzJEMDY2NjM5NkI0QzIzRDhFRjVD
MzEyQzZCRUIwHhcNMjYxMDA3MDEyNjAwWhcNMjYxMDE0MDEyNjAwWjAYMRYwFAYD
VQQDEw02YWM1OWZhOC1lYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyNTNBJDNIVsoi5DDQZsP/6ybYcrVfX4ajaZgpjrMLDqcuavSpxr1kVv96QoA
4FJpEEMsdoMvR4KRiXfD5K67X/5SeE7G4v153RqsKCyH/o9KR/zKl7sxARulVFLm
QsqJll6iOw/Ls8vizh7OlftL3GRVwbHnLlx14PqFNiV1phtxCP6ANmudGDq5EhBX
YvyDaFphnBYAcRrcdgNQjo8EcNpz6AdWZWS0gByBwhauD8EtxuRlFUgI9B6SG9MO
SWzp9EXH8fsedsXE2F5APVnlJJjGGyTPNzWpPwc8hgGuUOT/Vcs8MdaQel+a5OeJ
r1Uz61OLJSxahp9/uffqOaBtpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqOuq6q
vIDX3f6wIOC8NHnhyROXMB8GA1UdIwQYMBaAFMexMJ0Ahy0GZjlrTCPY71wxLGvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY3NS82RDExRjU3ODVF
NUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExRWm1PV3RNSTlqdlhERXNh
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g3RXduUUNITFFabU9XdE1JOWp2WERFc2Etcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTY3NS82RDExRjU3ODVFNUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExR
Wm1PV3RNSTlqdlhERXNhLXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiTYpFSp9qIjwZEDLR9D2UG3hm6Ximrt9xqyC/mXB8YgQF9W6HtLmGYgiWe/D
3axho7ZHf0tHfOjyoRnxeKwhjoOPq4q+yx4VJ0+tpQz4eoWqAWauCAL0GQYCwkoH
umNZkicHw6uDuEV/RPn2gJRZseaJ83v2A9wRIzbaBMtsHeRNXQjG1ykpA49/gKL8
mUIKvNgn+JcRfSN85lYSixRQM7KNRGjA2gyGeDkYD6eWB7YJvadu/fEvprlqs7Y4
n9YVMUFj1IZGtsz4t+B4SU9n/Rl9rYDM3UrpTnFPK/N8RSxHy5oxjEaJCiy1sAEt
yXCWghBRdvVX8Eo4y1XKGXaRzw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:24:45 2026 by rpki-client