Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File:                     R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier:          fhc3Td/zvtzn/BT491dXcF4KJOCUcJP9ECiYtxbCLFA=
Subject key identifier:   18:A3:6F:B4:9C:77:F3:86:74:0E:72:F2:1E:E4:83:9D:C0:EF:52:2C
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer:       /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number:          C2
Signing time:             Wed 07 Oct 2026 07:22:23 +0000
Manifest this update:     Wed 07 Oct 2026 07:22:22 +0000
Manifest next update:     Wed 14 Oct 2026 07:22:22 +0000
Files and hashes:         1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: qomX+tGyeQ5D0hNm3ZhWV30njoHZpKV7Rp0A2oBvuyg=)
                          2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: 1Vca/T8ggjOA5o9QtjoKhFaIwHS9DNFGX+kUo9lU2bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
                          rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
        Validity
            Not Before: Oct  7 07:22:22 2026 GMT
            Not After : Oct 14 07:22:22 2026 GMT
        Subject: CN=6ac5f32f-1c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:a6:35:77:9d:85:53:9e:9a:5d:c3:df:57:
                    b1:d7:ac:66:6b:3d:53:04:52:e9:4b:12:4f:73:17:
                    32:07:a8:a9:2c:74:a8:32:44:ec:c0:7f:bc:6b:db:
                    8a:d5:f3:6d:23:35:6c:26:e6:5e:73:56:b7:94:60:
                    b7:5e:a8:6b:2b:a9:55:12:51:4f:ca:70:d7:2b:8c:
                    0f:c8:0c:8b:a1:35:40:3b:48:d1:f7:eb:d6:22:6d:
                    5f:c3:5c:84:25:b5:4b:3a:8f:d3:32:a4:ef:fb:c1:
                    a3:ad:a8:fb:1c:a5:00:96:d3:61:d1:16:ae:e2:93:
                    ab:b0:b7:0d:32:54:ba:9f:18:8f:4f:f9:05:b2:c9:
                    33:ac:ec:a1:f8:fc:42:2f:8a:ac:cd:a9:f0:84:36:
                    87:47:fa:c8:a0:b9:cb:0d:e4:56:d9:0f:16:de:65:
                    d1:4a:85:49:e9:3f:73:8b:ca:8b:a1:6b:86:db:dc:
                    c4:38:e8:ab:6d:f6:77:7e:34:d8:7e:46:c8:64:d6:
                    b4:5f:24:59:2a:f4:65:93:2f:e9:77:de:ba:9e:81:
                    15:fe:61:98:91:39:84:c4:4a:e5:87:7c:37:30:4a:
                    86:84:58:e2:1d:5e:24:b0:1c:10:30:d8:ce:c4:a3:
                    34:e0:80:73:47:7b:39:82:d9:ce:b3:ec:dc:59:fe:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A3:6F:B4:9C:77:F3:86:74:0E:72:F2:1E:E4:83:9D:C0:EF:52:2C
            X509v3 Authority Key Identifier:
                keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:c7:21:5c:c3:a5:84:36:b9:7d:57:22:c0:6f:a7:25:11:
         1f:72:aa:5c:b1:d5:18:16:88:62:cd:c8:82:8a:22:4f:2e:d1:
         2d:67:6a:d9:f3:da:fd:67:2c:97:11:0d:dc:bb:67:db:c3:1a:
         1d:90:dc:d6:d3:17:ac:26:c7:45:1a:6a:66:c8:9c:92:95:9d:
         bd:ea:5c:38:54:74:ce:88:76:96:49:e4:90:8f:1e:71:f4:ac:
         c7:76:e3:7e:b5:3c:f1:10:c9:a0:4b:de:a8:49:db:32:8e:3e:
         f5:88:91:22:29:92:67:f7:2d:16:8d:76:66:1e:49:ee:9d:ae:
         3b:96:32:53:e3:0e:2e:b2:89:70:75:0c:13:d4:04:5e:85:20:
         b4:4f:b2:91:9e:86:2b:b6:d1:02:3a:d9:1e:2f:83:55:ff:40:
         89:02:68:bc:81:0f:d3:25:8c:bd:54:f0:ff:6e:00:e9:74:55:
         21:8f:9d:15:16:73:01:2b:b4:51:41:ec:9b:1e:1b:ac:ec:3f:
         4f:dd:e8:a8:5f:d3:20:07:7a:2b:43:72:84:cd:46:da:59:77:
         bf:55:d4:ae:d3:0b:dc:e3:90:64:50:cd:fb:e7:57:0c:e3:c9:
         8e:62:bb:37:6f:33:33:b9:f8:6f:eb:d7:e1:10:63:4b:36:ea:
         da:4c:9e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:38:41 2026 by rpki-client