Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
File:                     c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json)
Hash identifier:          n832g2+1lrkCw5fWeik16SLbB6L+FftDHkBt55Y+lmU=
Subject key identifier:   45:E3:2C:08:81:83:4B:CF:A9:03:08:F9:0E:0E:22:0E:BD:4D:62:C2
Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
Certificate issuer:       /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
Certificate serial:       08F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
Manifest number:          162E
Signing time:             Wed 04 Nov 2026 18:18:44 +0000
Manifest this update:     Wed 04 Nov 2026 18:18:43 +0000
Manifest next update:     Wed 11 Nov 2026 18:18:43 +0000
Files and hashes:         1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: j7JYBXEouKNyUbJaOKfYUGXVCJ3E8AhazvsKI1rdgUA=)
                          2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: zTGTx7/ZH11Scl6xxtt6/6AQ3HI9XkZHLbDnCzFKfFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl
                          rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 18:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2297 (0x8f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
        Validity
            Not Before: Nov  4 18:18:43 2026 GMT
            Not After : Nov 11 18:18:43 2026 GMT
        Subject: CN=6aeb7703-7867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:04:6b:a0:1a:13:9f:22:a2:b9:56:10:17:
                    e1:cb:dd:66:64:28:71:ca:91:17:45:16:14:75:ff:
                    45:b5:77:05:5f:1f:e6:ea:34:69:53:ed:37:fb:70:
                    85:e4:19:52:38:ec:23:6a:5e:20:02:29:61:11:15:
                    a4:a7:97:8e:34:c3:26:96:cc:66:fb:35:3b:d9:73:
                    3b:6f:ea:d2:08:ef:ec:dc:e2:79:20:22:1c:ce:2e:
                    83:16:63:ea:81:18:90:1c:a4:45:bd:bb:9c:24:d2:
                    d3:7d:2a:d9:70:4b:06:78:a2:1f:cd:b9:85:72:a3:
                    e6:0b:fc:f2:f6:ca:f9:65:c6:2b:9e:56:b7:41:4b:
                    e8:ac:17:38:67:fd:75:33:0c:a1:07:a4:18:98:47:
                    12:40:d5:38:c4:b7:0d:71:b7:3e:e5:37:ac:dc:35:
                    2f:94:1f:cc:ec:27:9f:47:15:8d:5b:46:87:50:be:
                    f7:45:b5:0d:52:b3:07:0e:13:c0:9b:9e:ce:68:8f:
                    03:02:49:51:85:af:50:bd:e0:e5:fd:fe:7e:48:54:
                    79:3e:63:71:69:14:70:55:d4:2f:02:f0:02:34:d3:
                    02:1f:2c:4c:5c:95:9b:1b:7a:aa:e0:f6:e3:c2:8f:
                    86:fc:1b:34:a4:b9:fc:de:0f:d9:a4:d8:22:4e:e7:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E3:2C:08:81:83:4B:CF:A9:03:08:F9:0E:0E:22:0E:BD:4D:62:C2
            X509v3 Authority Key Identifier:
                keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:0c:f9:e6:0e:49:d6:77:c8:e3:06:03:ad:d7:45:36:f5:d8:
         b9:bf:58:27:4c:15:0e:ee:9b:15:32:85:5d:78:bf:fa:1d:03:
         8e:8d:55:ca:40:a9:7f:b5:0a:2e:2e:b5:5d:1d:24:ab:57:30:
         cd:7e:42:0e:60:1c:2b:8a:ab:83:d7:10:a4:58:80:26:c5:3b:
         4c:ee:c5:8f:33:4f:b3:c2:a0:5b:f9:ff:4c:52:14:60:a3:96:
         91:24:e6:e7:24:6d:70:2e:52:a8:8a:58:26:3f:07:b3:42:a3:
         f1:9e:66:65:65:bc:60:ec:2d:4f:e0:09:19:af:86:3f:f5:92:
         ee:bd:d8:87:02:ab:87:37:64:b0:f4:0d:2f:dc:4f:d9:3c:20:
         57:ca:8b:9b:3b:41:4e:3b:4e:87:dc:32:86:ab:c0:ad:79:c1:
         f6:55:bd:04:1d:43:08:d3:54:28:0b:fe:23:46:e1:10:df:e8:
         d5:05:14:57:59:e9:49:d9:24:41:4d:57:2b:9a:a3:ca:10:55:
         14:95:48:42:48:df:a6:76:6f:56:28:65:bf:43:21:89:39:fb:
         2c:ed:b9:af:c6:cc:29:45:ba:fc:d7:8d:ab:f5:ee:91:35:ca:
         d2:d3:58:86:a2:ef:3e:69:df:d9:d0:5f:19:22:d0:bb:68:23:
         4f:bf:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:41:27 2026 by rpki-client