Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File:                     7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier:          Ymeei1gVQbOPSzzUgjuOtwb1Dmi7+oFiPXWMIVD7P3E=
Subject key identifier:   2C:18:10:F9:AC:35:5E:0D:54:21:04:B0:77:D7:6D:13:83:25:01:04
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer:       /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial:       0C21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number:          0C0F
Signing time:             Tue 06 Oct 2026 19:02:09 +0000
Manifest this update:     Tue 06 Oct 2026 19:02:09 +0000
Manifest next update:     Tue 13 Oct 2026 19:02:09 +0000
Files and hashes:         1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: kcCbWfj5JllCanZ9/LmgS4hWV0Qy4BHo0b0dok6yc3k=)
                          2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3105 (0xc21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
        Validity
            Not Before: Oct  6 19:02:09 2026 GMT
            Not After : Oct 13 19:02:09 2026 GMT
        Subject: CN=6ac545b1-76e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:49:c5:fa:98:02:73:9f:69:46:9b:ee:c2:
                    65:b4:af:b1:f9:a2:f7:2f:27:21:8b:31:cb:d2:3e:
                    58:2f:9c:ca:cd:2b:ba:12:1f:09:62:b9:6d:97:d2:
                    a2:4d:64:cf:84:64:9b:1a:95:b2:1f:cb:88:6d:e6:
                    57:71:dd:db:72:03:12:2d:63:c0:99:29:8e:88:6b:
                    0a:04:88:6a:78:a8:f3:38:90:b0:44:77:1e:c2:e3:
                    d5:5e:a9:27:8e:82:a8:db:fb:3e:7b:2a:4d:06:ed:
                    1e:ab:f1:c3:fa:d9:89:4c:7f:94:52:df:cf:2c:70:
                    12:8d:c8:2e:d6:76:f1:bc:fe:e6:22:53:45:5e:11:
                    76:29:ad:3e:e8:c9:04:27:f8:fe:f6:5f:df:51:fc:
                    d3:7c:04:6b:66:c3:f0:49:70:bb:7f:4c:08:d8:a8:
                    27:57:97:d5:cd:f2:04:c5:04:92:b7:f2:65:db:92:
                    5a:46:e2:0c:a2:9a:bb:41:27:57:f6:62:74:e0:0d:
                    1d:a9:68:ca:10:59:f3:ca:c9:37:b1:ff:84:7b:de:
                    f4:09:9c:04:e8:41:4f:f9:fc:e1:27:1f:cb:77:dd:
                    1c:ad:45:03:d6:9b:60:7c:e7:71:ff:eb:49:d0:e4:
                    9d:bb:6c:81:eb:39:54:08:2c:6f:cf:0d:d0:57:d8:
                    b2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:18:10:F9:AC:35:5E:0D:54:21:04:B0:77:D7:6D:13:83:25:01:04
            X509v3 Authority Key Identifier:
                keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:36:8e:de:75:81:8d:81:f5:9b:23:59:44:30:d1:95:67:
         4c:39:f8:6d:47:09:5c:cd:62:b2:b0:76:3e:0e:d0:ce:a4:cc:
         c8:88:98:44:61:0d:4d:7f:d8:eb:fb:d5:b5:cd:27:84:e8:f5:
         d0:53:4d:a4:27:78:3d:91:ad:12:71:6a:19:d6:19:24:dc:8a:
         55:f8:38:e8:12:13:c9:75:54:f3:7d:ce:2f:2f:a5:c7:ed:c0:
         0d:73:0a:56:52:1c:be:35:2c:a8:88:c0:25:c9:f0:7f:f7:67:
         44:65:d2:93:0d:66:7d:f9:98:95:97:45:92:ca:7f:0a:80:28:
         68:41:6a:3d:82:40:26:f6:b8:7f:57:66:4f:7d:fc:dd:ab:b5:
         9c:e1:ab:2b:8c:c6:4f:d9:a9:7e:82:0d:75:8f:98:57:06:fd:
         bf:a4:44:a1:92:80:90:52:45:f2:76:47:44:2b:a4:cb:6e:50:
         f5:82:c4:ed:22:19:08:d6:54:eb:7e:b8:a2:36:a1:25:10:74:
         20:b6:0e:e6:55:bd:1b:25:63:14:4b:8a:98:f3:48:f4:80:b1:
         e5:be:99:30:88:95:cc:c6:61:10:a1:9c:6b:ee:2d:f2:3c:fc:
         28:7f:fc:b8:0c:91:62:ef:09:ee:db:3d:de:06:a1:13:b7:8f:
         49:23:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:13:55 2026 by rpki-client