Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
File:                     7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json)
Hash identifier:          2GA55Saa1RsTwZ1d4pxMn4Fu4hQ1p2JIHb3EDxFmPWQ=
Subject key identifier:   23:CB:BF:BB:DB:ED:C5:86:D5:9C:5A:D3:F3:70:DB:FC:FB:A8:D5:AB
Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40
Certificate issuer:       /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
Manifest number:          02CB
Signing time:             Mon 21 Sep 2026 01:20:40 +0000
Manifest this update:     Mon 21 Sep 2026 01:20:39 +0000
Manifest next update:     Mon 28 Sep 2026 01:20:39 +0000
Files and hashes:         1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: hB8yR38xHBl/M1KsDzLeo24JHp63vfjQOSgFSOZHXU0=)
                          2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: 05qrx5y7Td7SV3Ez+kyc5rGnUR1hyfqb/ezkRc89p2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
        Validity
            Not Before: Sep 21 01:20:39 2026 GMT
            Not After : Sep 28 01:20:39 2026 GMT
        Subject: CN=6ab08668-42c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:57:37:3c:f4:7a:46:47:5f:75:e6:55:7d:17:
                    33:78:8d:73:39:81:23:26:cf:2d:0b:5a:40:df:1a:
                    ad:40:fc:00:5b:24:fa:d6:9c:cd:6a:ee:11:2a:ee:
                    35:db:06:ba:02:39:c6:f6:7a:65:02:8f:36:0f:f9:
                    9e:da:ae:ac:a4:06:49:95:1f:c1:cb:9a:da:e8:6a:
                    bc:87:7d:ea:98:a6:22:3b:6c:9d:47:f5:5e:73:21:
                    da:1a:68:c7:b3:74:d0:87:96:73:7c:35:1d:25:1d:
                    9e:f1:bd:81:a5:0a:56:c1:ca:44:51:23:63:4f:14:
                    0f:4a:e3:44:2e:23:47:93:b7:c2:b7:a0:2a:42:4d:
                    21:e1:08:10:3f:b2:ef:d9:4a:9c:5a:a5:f0:ac:07:
                    fa:cf:f6:7e:7b:79:b8:ac:14:3e:00:d5:2e:88:b6:
                    79:81:09:63:7c:98:90:b7:89:07:43:4e:7a:ab:cf:
                    ce:81:a7:8b:20:e3:b6:1d:d4:85:16:59:c6:6a:08:
                    6f:ae:bc:fe:b2:94:76:d6:f2:12:66:b3:2b:4f:5f:
                    06:52:cf:f3:68:00:58:43:a4:59:2d:30:d0:9c:2a:
                    37:85:ae:23:bd:0e:15:cd:ad:bd:b3:6d:ef:36:35:
                    c4:d5:c9:a5:0b:74:94:9e:fe:32:a8:d7:2b:78:45:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CB:BF:BB:DB:ED:C5:86:D5:9C:5A:D3:F3:70:DB:FC:FB:A8:D5:AB
            X509v3 Authority Key Identifier:
                keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4b:e7:40:fc:a3:01:7c:08:f1:c7:5b:a6:7f:cc:a5:3d:0d:
         a4:9c:00:c7:24:d8:1b:0b:60:41:f3:ea:6c:05:f4:80:e7:c4:
         e4:16:a6:28:aa:38:61:48:af:88:31:c2:4e:a6:3d:51:f3:4e:
         b4:33:be:d7:88:8f:41:84:9f:60:16:70:2f:f7:e9:4f:87:31:
         7c:c7:d9:ef:ec:fd:c5:94:c4:f9:0a:86:0c:72:21:2b:80:9a:
         ed:c5:7d:79:11:6c:fa:aa:f0:a0:d6:0a:fc:a5:51:fe:00:91:
         b3:1d:9a:8c:83:b2:74:3d:bb:27:33:23:92:b9:bf:c6:3a:9e:
         90:7a:fb:2c:ef:a0:0b:a1:eb:c6:8e:0f:ca:7c:8b:f5:8f:ac:
         f2:b9:31:43:24:7a:11:81:d9:27:fe:c4:61:25:74:a4:6e:d4:
         bb:3a:6d:c3:71:a3:b1:8b:e9:ef:f9:ca:99:7c:b7:05:de:a1:
         2b:75:f6:40:22:01:21:f4:c5:0d:0e:6a:54:d9:ad:90:4a:c8:
         bc:a4:17:14:eb:f8:65:b9:8e:a6:99:58:6a:43:f3:5f:e0:46:
         c2:f5:d2:c2:60:b3:80:91:55:a1:bd:8b:6b:e7:b5:5b:db:c7:
         66:5c:0c:97:05:1c:cf:b5:02:ea:55:33:16:84:02:ea:07:4a:
         da:1a:ea:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:53:38 2026 by rpki-client