Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
File:                     7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json)
Hash identifier:          AJ/FTEw+P8ZBQssQEWuoRXMXiSno8flIi14CxHCxFvQ=
Subject key identifier:   FE:D0:3E:52:A4:C9:3E:AA:C2:3F:F9:1A:95:E6:04:ED:2A:A6:EF:77
Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
Certificate issuer:       /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Certificate serial:       3588
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
Manifest number:          3584
Signing time:             Mon 28 Sep 2026 14:32:07 +0000
Manifest this update:     Mon 28 Sep 2026 14:32:06 +0000
Manifest next update:     Mon 05 Oct 2026 14:32:06 +0000
Files and hashes:         1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: XVW7Wv8dmquAKI15NS12UAt3eowoDHSKrTgGknPQ6Mk=)
                          2: 33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa (hash: UkDcxGGvmqyz1urnD56t6fBt1amqEJgDXdakYI4IPMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
                          rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 14:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13704 (0x3588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
        Validity
            Not Before: Sep 28 14:32:06 2026 GMT
            Not After : Oct  5 14:32:06 2026 GMT
        Subject: CN=6aba7a67-684c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:ce:f4:eb:b6:6d:a4:e9:a8:89:38:55:48:
                    0c:de:98:ae:4a:d5:56:a2:f2:d0:fe:25:12:c0:40:
                    f4:66:73:07:f6:b6:0f:49:2e:b7:0b:6a:d5:4c:44:
                    6b:67:21:5a:b4:94:11:da:ba:fc:c4:04:b2:95:48:
                    0a:fb:dc:a5:2f:f1:53:46:38:65:ab:15:88:46:28:
                    28:6c:1d:b8:9b:e5:dc:b2:97:50:41:05:cf:75:e1:
                    5d:6d:c7:cd:07:13:94:27:20:6c:f6:b6:62:ce:97:
                    be:86:f1:1f:3e:70:21:1f:da:1b:d3:f9:c8:f3:17:
                    87:58:db:1b:fd:e2:41:c4:21:d6:fa:05:0d:d6:3f:
                    bb:a9:0a:2b:97:fd:f6:1f:7e:ef:19:cd:67:c3:7b:
                    14:54:a1:92:65:97:d2:fa:61:f3:95:4d:7d:6d:3d:
                    c2:e6:62:c5:71:a0:c5:03:c4:25:68:c0:65:e4:2c:
                    62:e6:49:b6:87:82:6f:4b:44:d8:64:b0:da:17:f3:
                    e0:38:e6:fc:f0:db:33:11:1e:56:7a:1d:84:aa:3e:
                    3f:ce:de:93:c1:67:9f:76:14:3b:77:7e:ec:e1:18:
                    7e:6f:c4:cb:ab:b3:c3:b5:14:7e:02:f6:9d:01:49:
                    b9:07:d5:fc:a0:7c:9f:47:55:87:d0:84:26:1d:35:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D0:3E:52:A4:C9:3E:AA:C2:3F:F9:1A:95:E6:04:ED:2A:A6:EF:77
            X509v3 Authority Key Identifier:
                keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9b:84:f1:7b:13:00:de:63:a9:6c:a3:b8:ea:87:fd:16:4d:
         de:2b:3c:c2:1b:46:31:53:76:db:17:0a:ce:8c:73:af:b7:57:
         47:3a:a2:d8:ca:8b:14:1f:d0:64:15:dc:2a:6a:fb:76:0e:0b:
         81:12:f3:b0:67:14:e6:f2:e9:92:a4:29:1e:48:31:00:c0:fb:
         94:f7:bc:f4:4d:e8:02:a7:f5:28:f8:4c:c3:fe:99:be:67:da:
         45:a2:75:56:cc:17:48:93:14:e4:51:fa:75:c9:85:fd:18:7f:
         54:34:2d:0f:94:1e:db:8f:51:82:ff:74:ac:d3:33:b5:23:69:
         29:24:31:f6:9e:14:0d:36:12:a4:51:88:14:98:f0:45:aa:33:
         86:7a:8d:50:a9:ec:3e:1c:01:78:6a:9b:11:d5:25:33:68:20:
         d4:37:38:21:82:86:58:b5:b6:ef:d1:0f:82:dd:af:92:40:3a:
         3a:42:92:c7:60:bd:ff:dd:1e:8a:4f:c7:6f:f4:bb:97:94:1a:
         bd:81:90:f7:fe:ba:49:af:34:46:37:ab:f1:81:06:3a:33:cc:
         90:41:7b:49:5b:35:3e:d9:84:7e:55:2e:b5:dd:a1:fd:12:cd:
         10:65:8b:7a:b5:a2:13:32:9e:fc:ce:94:a6:e9:b3:7d:47:52:
         5b:1c:e3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:49:04 2026 by rpki-client