Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File:                     7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier:          la3tv6wEsqAYqRajXRJ8jq7ePZ385IH1Y2ubPJnZwew=
Subject key identifier:   9B:9A:56:AC:33:61:B2:E9:95:8B:81:B5:BF:99:D0:DA:2D:9B:58:4E
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer:       /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number:          01FE
Signing time:             Mon 21 Sep 2026 03:17:54 +0000
Manifest this update:     Mon 21 Sep 2026 03:17:54 +0000
Manifest next update:     Mon 28 Sep 2026 03:17:54 +0000
Files and hashes:         1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: pTb5oeGjYuw2uvr3bdr4Le8TT/qRxZlKVE7211SQxNk=)
                          2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: YjRa1pB30YYbPQePj+r96aLADC7aXekCFySJbOFg6Mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
        Validity
            Not Before: Sep 21 03:17:54 2026 GMT
            Not After : Sep 28 03:17:54 2026 GMT
        Subject: CN=6ab0a1e2-a3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:20:cc:63:01:98:9f:44:ee:34:39:cd:ca:
                    eb:ec:de:4d:d8:bf:36:5e:c1:4d:29:92:8b:1e:55:
                    06:26:4d:f4:b2:05:3a:fc:5f:7e:c2:6e:6d:64:88:
                    84:0a:0f:d4:4b:d5:fc:c0:9c:a9:93:f5:f4:35:d4:
                    10:0d:2c:ff:c9:ab:14:dd:ef:99:75:db:5b:e7:45:
                    1a:22:d0:7d:df:c5:d3:ae:27:90:5e:df:ff:38:91:
                    35:af:18:97:6d:d2:9d:c3:1c:a7:85:c3:eb:e8:ec:
                    72:d4:6b:bd:7a:18:05:f1:da:ae:a9:5c:3f:fa:5b:
                    3a:e3:04:f4:a2:e1:31:89:c2:a2:b9:54:6c:ad:64:
                    e6:bf:32:ee:a5:65:17:c3:e0:f1:ba:3f:d6:d8:a8:
                    d6:8d:91:27:80:16:86:32:c8:9b:0c:58:eb:26:9f:
                    bb:9a:67:d4:4f:64:97:de:44:e6:ba:d4:e0:2b:8a:
                    4f:13:4c:a0:ac:3b:7a:51:11:58:91:e0:2c:a2:96:
                    7e:9a:e6:cb:ec:69:2b:57:d1:d9:d8:6b:d4:59:5e:
                    c0:62:3f:0b:ea:4b:c7:25:3c:42:ae:50:f5:a1:43:
                    a2:25:2e:3f:f6:24:7a:1e:f0:28:43:5e:44:24:c1:
                    18:cd:21:49:f9:24:e1:f6:ee:fc:9d:58:c4:44:b4:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9A:56:AC:33:61:B2:E9:95:8B:81:B5:BF:99:D0:DA:2D:9B:58:4E
            X509v3 Authority Key Identifier:
                keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:1c:5d:a7:81:96:8c:32:8c:07:65:99:27:b0:90:b1:4d:
         8d:e9:fe:50:d1:85:1d:41:39:be:1d:05:06:b2:06:54:d7:b3:
         36:48:4d:92:5f:5d:0a:46:e1:ca:0d:45:ea:3b:5a:08:4d:d6:
         c6:38:dd:88:07:f6:a2:db:c8:b1:3d:4c:7a:9e:07:4d:75:83:
         2a:0b:9a:c5:1e:e9:42:7b:93:8e:88:49:7f:fe:e3:8a:00:b6:
         c1:c1:fb:8f:07:ad:96:db:d5:d8:2b:75:24:c9:5e:20:dc:fe:
         bf:c9:a2:b2:03:7b:f4:13:39:06:04:c1:73:f0:01:18:c1:e5:
         c7:90:4d:59:56:86:b5:72:7e:e6:e7:e0:0e:4f:88:97:7e:27:
         01:68:e2:34:85:a4:57:95:8b:cd:49:43:29:86:ed:3e:f7:e8:
         1f:a3:29:f4:32:27:85:a5:56:8b:25:61:5b:ce:85:b7:37:9d:
         88:73:d2:25:ab:03:0a:ad:5c:78:ff:b6:85:da:13:9c:f5:8d:
         1d:f4:39:79:7f:15:28:4b:7f:9a:5c:61:33:e6:49:fc:c6:07:
         6c:c4:44:78:85:fd:4d:06:18:f4:4d:64:18:dd:36:fd:d2:1d:
         c4:5b:1f:02:ab:ea:69:ae:46:c9:af:32:6c:3e:bd:3c:32:6b:
         11:c7:b0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:27:45 2026 by rpki-client