Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
File:                     7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json)
Hash identifier:          Cj0VdXwh09hBch0E294Km0zU3zBmwR47lEpUxtwhZYc=
Subject key identifier:   1F:2B:31:CC:84:2A:C3:90:6F:79:B9:FA:56:85:3D:3C:3F:9C:8A:1A
Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91
Certificate issuer:       /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
Manifest number:          0291
Signing time:             Sat 17 Oct 2026 02:19:58 +0000
Manifest this update:     Sat 17 Oct 2026 02:19:57 +0000
Manifest next update:     Sat 24 Oct 2026 02:19:57 +0000
Files and hashes:         1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: 67m6x1fFr32iAI8aPVq85Az/3+wnTcu1vyttyvpnsG8=)
                          2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: svMZS7DV5TwUD82GBLvLWWlNJprDspcc73VDjKYI3GY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl
                          rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 02:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
        Validity
            Not Before: Oct 17 02:19:57 2026 GMT
            Not After : Oct 24 02:19:57 2026 GMT
        Subject: CN=6ad2db4e-9180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:0b:3b:26:0e:5d:9e:42:b7:7d:f1:63:f8:
                    4b:94:35:ef:82:61:b6:b9:b7:95:ad:ba:48:b3:39:
                    4c:2d:c7:8a:fa:07:92:19:e1:dd:ac:de:1d:a1:b4:
                    6f:b2:63:e4:06:aa:d4:64:35:67:ec:b2:44:1d:4f:
                    be:dd:1e:cf:90:40:74:73:b7:39:67:93:45:60:a0:
                    cf:af:6e:8f:5b:19:db:1d:ce:bf:ef:86:9d:1f:e1:
                    0d:4b:aa:14:d9:41:c2:1d:02:b5:86:e1:99:54:86:
                    6b:00:91:b7:f9:4f:49:69:90:4f:d1:77:32:f4:da:
                    56:13:6f:dc:04:8a:e5:67:d9:8b:99:34:84:a0:b4:
                    68:59:d5:55:fc:c2:e1:37:cc:c7:79:47:d2:02:16:
                    c5:49:3b:b4:dc:1a:26:09:9c:23:70:11:e6:04:f6:
                    d1:83:75:58:0b:cb:bc:3c:86:11:c5:e2:0b:78:75:
                    98:fb:c9:31:b6:88:e7:bb:27:a0:d2:17:0c:63:25:
                    10:42:28:fb:d6:ad:91:6f:78:fe:ed:fa:2b:d8:77:
                    ed:83:f3:dc:3a:2c:6b:94:53:73:14:88:65:e1:57:
                    c9:5f:97:9d:4f:1e:5e:1f:87:8d:51:0f:63:f6:9a:
                    9b:82:5e:3c:e1:13:86:52:07:6d:ef:09:93:12:62:
                    e1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2B:31:CC:84:2A:C3:90:6F:79:B9:FA:56:85:3D:3C:3F:9C:8A:1A
            X509v3 Authority Key Identifier:
                keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:77:f0:66:57:c4:7f:22:ee:62:2a:12:73:3f:06:29:00:a9:
         7f:de:32:eb:48:10:ad:83:f9:6c:1f:6a:fd:13:85:bb:c2:bd:
         95:91:f3:b0:f9:f2:47:1f:b3:e8:3f:3f:bf:ab:75:22:11:bb:
         04:50:ab:43:1e:08:84:d0:e1:36:16:60:60:6e:39:93:08:bd:
         ce:ae:41:0d:56:ee:e7:4c:e1:81:e4:63:8c:0e:a9:37:c5:f2:
         67:f3:84:c5:1b:0b:fe:d1:1e:74:13:fa:24:0a:a0:0f:f7:9f:
         2d:2b:d4:b5:07:8f:a4:1b:98:83:71:cc:c2:e6:b3:33:27:6b:
         52:63:ae:4a:84:6a:77:68:44:7a:92:d9:d9:b0:ba:94:f3:fa:
         8f:9d:d5:32:c3:71:d3:75:46:f9:f4:79:ca:a1:1c:73:d7:a9:
         0a:2a:69:ac:21:ee:da:9a:2d:cf:74:80:ef:71:b5:b3:29:ad:
         f7:aa:f3:28:aa:01:bf:84:d7:fe:99:a7:3b:22:19:fd:15:4c:
         45:c6:f3:44:50:e3:29:37:bc:3c:d9:38:d5:25:ef:02:18:dc:
         3c:46:b3:32:08:a9:89:f3:c7:64:2d:39:39:8a:bf:d5:66:25:
         21:3d:7c:fc:e2:16:38:39:ba:b0:b8:f7:e6:a3:5b:d8:50:22:
         37:be:28:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:51:29 2026 by rpki-client