Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
File:                     7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json)
Hash identifier:          NaJxuDiGhfbrUD9NzMqp2d0a5BxU6bvY0JwctQDuXVg=
Subject key identifier:   C0:50:20:F5:20:20:FD:57:10:D2:28:90:4C:29:40:7C:6F:FB:C0:5A
Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
Certificate issuer:       /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
Manifest number:          018E
Signing time:             Thu 05 Nov 2026 05:23:53 +0000
Manifest this update:     Thu 05 Nov 2026 05:23:52 +0000
Manifest next update:     Thu 12 Nov 2026 05:23:52 +0000
Files and hashes:         1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: O/uRWpI/gkwNjE6ql7LAiT1Xv36/zUdXjSa83OlzWp8=)
                          2: A647525E853B11EFB513D149C4F9AE02.roa (hash: 8/z43AfGGthVBc9cfR73JH6jugiVT0aL27yCo3q+XYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
                          rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 05:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
        Validity
            Not Before: Nov  5 05:23:52 2026 GMT
            Not After : Nov 12 05:23:52 2026 GMT
        Subject: CN=6aec12e9-1107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:5a:30:1b:b8:08:df:87:9a:d6:7a:bc:7b:
                    1c:64:4f:53:dc:df:83:5e:0d:52:88:c5:c4:7e:e0:
                    f0:72:51:9b:38:aa:7b:30:f4:5a:34:7e:b6:36:27:
                    93:a8:02:ae:30:8f:82:5f:ab:bc:a4:74:2f:41:e8:
                    d4:f3:82:4d:46:c3:bf:6f:eb:4e:99:53:97:ed:0d:
                    ad:fa:71:a9:af:25:26:b3:5f:7e:f7:f9:0c:76:e5:
                    2e:f8:aa:d3:4a:0c:3f:13:cd:b2:3d:67:c1:41:12:
                    c7:ec:e2:79:ff:35:ef:9c:f4:fc:2d:09:10:87:84:
                    2a:b9:aa:b2:2c:e2:df:c0:23:08:3d:f1:75:55:e7:
                    0a:90:e7:79:1b:dd:81:71:4e:63:58:53:9e:84:71:
                    2f:ef:da:f3:e8:0e:0d:48:a7:6e:fb:b0:1c:71:1c:
                    37:c2:79:aa:c3:b7:93:59:a5:12:c7:47:29:a6:bb:
                    07:7d:77:09:72:30:37:60:3d:c0:7a:cb:c6:5e:5e:
                    03:79:32:27:b2:e7:04:ef:f2:fa:53:04:02:24:6a:
                    ee:62:69:85:2d:a7:21:8a:b7:9c:cf:3b:98:ef:fd:
                    26:c4:5c:55:06:ae:0c:7d:46:88:cd:c9:29:3d:03:
                    2d:2d:d4:9f:aa:3e:04:a9:e1:64:4d:ad:6a:b5:cf:
                    25:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:50:20:F5:20:20:FD:57:10:D2:28:90:4C:29:40:7C:6F:FB:C0:5A
            X509v3 Authority Key Identifier:
                keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:8d:42:68:06:14:6c:8f:3a:ec:05:fd:c0:9f:0d:96:5c:b6:
         48:d4:7c:9c:26:3d:ef:b2:12:0c:2e:6d:8f:1d:a2:7c:fe:a9:
         45:cc:86:24:a1:bd:f7:d7:a4:43:9d:b2:a3:9e:fb:5b:13:ca:
         21:1e:ca:d3:02:dd:57:31:04:85:47:d5:12:dd:82:e0:8f:ba:
         66:b2:63:c0:93:36:4a:bc:b2:93:6b:03:d0:7b:68:1b:9a:49:
         d7:c3:24:a3:e7:21:be:b0:a7:cc:4b:b1:8d:2c:29:c1:a7:13:
         15:99:60:62:ab:cd:e0:fc:b8:b9:8c:ba:a2:b4:4b:8f:30:2b:
         c0:d5:8f:94:15:a7:1e:fa:21:6f:a0:09:b7:d7:ad:f8:42:52:
         97:b5:7b:13:c7:38:57:b1:4d:f7:e8:36:02:18:dd:20:2c:36:
         1b:62:37:9d:51:34:f8:dd:c9:ac:25:83:4a:15:f6:3d:60:3f:
         c2:41:a2:75:b5:44:d9:8a:d6:6b:85:00:43:5a:7c:38:67:88:
         e6:97:e6:11:8d:52:21:df:f8:f8:63:3d:87:42:c4:55:92:71:
         d1:5a:df:0e:69:3c:87:79:a1:22:31:d5:e7:c8:c0:81:e6:52:
         fc:f5:17:0d:20:98:5e:68:f5:30:d1:81:54:29:00:54:87:e2:
         54:d6:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 09:12:31 2026 by rpki-client