Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
File:                     cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json)
Hash identifier:          lWcE8UZ+MpsqDnF52TLclL6M6vzs7lVdWO7txdNk99c=
Subject key identifier:   E0:6F:04:23:DF:6D:5E:9D:0A:AC:F3:B4:32:69:A3:DA:D4:F3:21:B0
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Certificate issuer:       /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial:       070C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
Manifest number:          0703
Signing time:             Sat 26 Sep 2026 22:14:01 +0000
Manifest this update:     Sat 26 Sep 2026 22:14:00 +0000
Manifest next update:     Sat 03 Oct 2026 22:14:00 +0000
Files and hashes:         1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: d511q5Fn9EhEqDmbQv50PQp76TIpiGMeXg1JVvcLSOM=)
                          2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: HEumvxRhLmm4XHqnIYgge5GXrN6qJb1ZanXvvpMCGxE=)
                          3: 0771A364485311F1A9744CF89D833773.roa (hash: nv8DvJ56f9NVVaEsRCDSj/u6YxsIirbe7brvxi9Q8rE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
                          rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 22:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1804 (0x70c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
        Validity
            Not Before: Sep 26 22:14:00 2026 GMT
            Not After : Oct  3 22:14:00 2026 GMT
        Subject: CN=6ab843a8-2403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:0f:93:1b:86:2a:a0:44:cb:b7:9c:93:c6:
                    ee:3f:9a:56:9f:b0:43:29:4c:04:35:d2:d3:92:aa:
                    f9:65:f0:06:a0:3b:e7:08:b8:b3:fd:6c:0f:d9:07:
                    6c:2d:5a:bf:94:39:09:b4:75:e0:c5:35:28:f7:fa:
                    d0:71:46:56:12:10:1f:bb:2d:2e:80:a6:1e:ce:4d:
                    1d:1f:cc:14:24:bd:a0:9e:ec:d8:69:27:b3:79:2a:
                    d9:a1:12:0b:61:67:9d:8d:e9:5f:f0:34:41:43:af:
                    8d:74:0b:da:e8:f3:17:f7:85:22:07:a7:ba:d1:0b:
                    2f:43:45:92:f7:da:a5:2f:a5:1d:a0:6e:58:f8:b9:
                    6e:89:1c:4e:b5:ff:48:ae:5c:52:23:87:e1:24:ee:
                    a1:72:a5:14:d3:08:e3:08:a3:de:3c:22:fa:f9:23:
                    55:15:7d:24:da:f4:0e:30:cd:0c:f0:ae:42:1b:ed:
                    d2:8c:7e:72:0b:fc:21:69:2c:de:03:01:19:6f:13:
                    be:71:d0:66:eb:67:96:ce:e4:fd:a8:57:8f:3e:99:
                    8c:d6:f7:19:62:29:e3:16:7e:61:cd:3f:c8:5c:cf:
                    c4:94:fd:cd:fc:7e:3e:e3:7c:f5:f8:29:7b:15:52:
                    c5:4e:92:7c:7e:67:1e:99:12:7e:0a:32:1d:6c:00:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6F:04:23:DF:6D:5E:9D:0A:AC:F3:B4:32:69:A3:DA:D4:F3:21:B0
            X509v3 Authority Key Identifier:
                keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:52:6b:f1:7a:47:37:ec:5d:f6:00:f0:2b:f0:d2:15:ff:ef:
         92:aa:44:64:20:b3:ca:4e:81:94:f3:14:dd:52:e2:17:0f:ba:
         34:1b:06:95:94:fa:f7:4e:d2:62:ae:98:83:f2:71:01:c0:09:
         59:55:b2:fa:7c:f8:ca:43:86:b2:6d:ad:7c:dc:1f:4f:30:b4:
         8a:8c:95:28:d4:c2:68:b7:26:22:a9:f0:9a:f3:17:87:b7:4b:
         2d:1d:f4:5f:54:ac:31:71:cf:4c:49:db:5e:23:02:3a:06:dc:
         a4:05:28:6d:c5:d4:df:50:87:78:dc:9b:53:cb:7a:9d:ed:86:
         fe:6c:ca:fc:54:ee:6d:fd:25:64:34:2a:8f:21:0c:a1:0f:31:
         97:84:85:9e:5d:b8:2e:53:1c:7f:bf:dd:3e:5a:1c:3e:94:9d:
         1f:ad:af:fc:49:53:36:bb:a5:c7:c2:b8:73:64:a0:7d:6b:66:
         2c:89:6c:85:70:af:62:36:f7:1f:73:bd:7d:80:5b:14:9c:15:
         85:72:7a:1f:ae:0f:d0:f0:8a:0e:4a:88:af:79:7a:43:2c:62:
         15:d2:50:09:da:95:58:e7:e3:52:31:cf:51:2c:bd:e5:8e:5c:
         22:60:7d:f2:16:19:b7:e8:75:00:df:d1:28:1a:7c:ba:1c:ff:
         ba:df:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:26:38 2026 by rpki-client