Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
File:                     7c3wYKYQK_rQbrqNaDHShI0dvec.mft (raw, json)
Hash identifier:          oWtpSUS7nLbbNNPurYVPQ/5pjuLyJex3cUw+ImSO5H4=
Subject key identifier:   78:1C:E7:2D:C0:73:97:4C:6B:FA:73:BA:27:AB:00:97:94:4F:67:0B
Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7
Certificate issuer:       /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
Certificate serial:       0886
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
Manifest number:          087A
Signing time:             Sun 20 Sep 2026 20:44:14 +0000
Manifest this update:     Sun 20 Sep 2026 20:44:13 +0000
Manifest next update:     Sun 27 Sep 2026 20:44:13 +0000
Files and hashes:         1: 7c3wYKYQK_rQbrqNaDHShI0dvec.crl (hash: DwPhDk92efGq4MAV+9MELqO90AG3dAFuFUiNQSd+4i8=)
                          2: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (hash: qj4PHPZisxG0dfdLOUhyrYEa0m9LiBiscBAm285+1gc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl
                          rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D483A, serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
        Validity
            Not Before: Sep 20 20:44:13 2026 GMT
            Not After : Sep 27 20:44:13 2026 GMT
        Subject: CN=6ab0459d-f6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:31:5e:eb:1d:4d:aa:b1:28:ef:7c:78:d7:
                    73:ec:07:06:dc:e2:f7:3d:38:c2:0e:9e:49:19:46:
                    0c:69:36:a1:1c:4b:1f:e2:d2:81:d1:91:af:ec:db:
                    65:20:8a:9b:af:b7:8d:7d:64:2e:60:30:bc:0f:e2:
                    1e:6a:f1:54:c7:0e:3c:53:c3:b0:8d:87:d7:05:55:
                    f7:82:86:39:79:6c:6d:4f:47:44:61:8c:e0:da:6f:
                    0f:3b:e6:55:f8:2c:a1:71:54:2c:d4:6b:21:8f:21:
                    67:98:c9:37:77:cb:7b:6d:8f:cd:ed:31:1f:26:1f:
                    1a:9f:12:7f:39:74:71:82:1e:cd:89:a1:4b:ac:41:
                    09:9a:5c:24:48:8f:a3:8d:a0:2a:54:0e:91:19:d6:
                    69:12:8b:df:a3:8c:0e:51:7f:c7:cc:04:08:d1:3a:
                    39:db:b4:78:88:43:72:ce:b4:08:46:e3:9c:0a:0d:
                    51:0b:86:43:ea:b5:f6:25:9e:fe:c4:ec:ac:da:de:
                    05:b2:f5:ea:1d:1e:c9:f3:40:cc:33:3c:70:20:49:
                    74:10:0d:7e:40:aa:53:05:29:3a:57:f1:57:42:ca:
                    38:de:8b:f9:16:ad:16:a2:33:c8:ad:56:b1:f2:b3:
                    1b:fe:15:9b:d0:9d:5e:3f:51:d6:be:49:be:5d:e3:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1C:E7:2D:C0:73:97:4C:6B:FA:73:BA:27:AB:00:97:94:4F:67:0B
            X509v3 Authority Key Identifier:
                keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:04:55:e3:16:58:c7:33:f2:05:db:6e:49:18:cb:7b:9a:
         f4:ae:b9:3d:86:3c:5f:6f:5d:4a:09:42:11:1e:a9:d7:55:a1:
         43:6c:1a:d3:69:39:27:b4:00:30:83:ad:80:85:35:d5:d5:59:
         a8:d7:f5:21:8b:f0:fe:e8:fe:7e:d0:1e:5b:6e:bb:5e:74:7d:
         f9:8a:ba:de:45:f7:51:95:31:0d:88:b3:01:5b:b7:3e:a9:8f:
         12:49:39:f6:25:94:7e:a2:0b:e6:52:8c:9c:5d:49:9d:a1:02:
         13:4b:15:57:52:8e:9b:1d:28:cb:da:e9:69:13:47:99:e7:7d:
         2e:d4:e8:d8:c4:99:6c:14:24:bf:9f:f3:1f:56:44:c4:cf:5f:
         22:12:b7:b9:75:4b:69:1f:ab:99:c3:3d:60:9f:4b:b8:b7:b0:
         83:64:24:03:30:9e:38:97:e0:7d:7c:70:d6:07:85:3e:95:c9:
         c6:3a:fc:5a:d8:28:71:9b:c7:b4:37:fb:e2:9f:a2:c8:33:18:
         10:33:3d:94:a4:a7:7b:53:0b:de:11:5b:39:08:12:32:09:cb:
         e1:14:ff:77:f2:e6:70:f1:91:c8:72:0d:8e:d4:4e:d3:30:3f:
         2e:31:d0:a3:2d:f7:dc:53:1d:e4:5e:b5:64:24:26:44:6b:7b:
         da:ee:9f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:57:12 2026 by rpki-client