Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
File:                     -n7ee2K0e4fdE5hqjnLD_jZWtcw.mft (raw, json)
Hash identifier:          nTR5pkzg8UZFoxawWI9qcOOSechsv5K+prVSxFX+KWI=
Subject key identifier:   F8:A5:1A:F5:A5:8E:04:23:0C:48:BD:E6:20:9B:F9:21:5D:60:8A:45
Authority key identifier: FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC
Certificate issuer:       /CN=A91E4743/serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
Manifest number:          0A3A
Signing time:             Thu 08 Oct 2026 20:06:21 +0000
Manifest this update:     Thu 08 Oct 2026 20:06:20 +0000
Manifest next update:     Thu 15 Oct 2026 20:06:20 +0000
Files and hashes:         1: -n7ee2K0e4fdE5hqjnLD_jZWtcw.crl (hash: 87+Mqr5QyVCL7D4jrclU3YkMOBLV5E1h9ROLn3vammg=)
                          2: ECC7CA2EF1AA11F0885E8853736F56BC.roa (hash: eCkptwR3fy6CIlHl2yidxHMQO1OkuJlmnlT+GWYigVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 20:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4743, serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC
        Validity
            Not Before: Oct  8 20:06:20 2026 GMT
            Not After : Oct 15 20:06:20 2026 GMT
        Subject: CN=6ac7f7bc-7891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:12:33:89:4a:24:76:81:f3:d5:c1:31:6f:83:
                    13:45:3b:ce:fb:5f:6f:bc:ab:54:da:58:b2:36:85:
                    23:b1:d8:7c:be:b3:2f:b3:29:15:39:cc:71:4c:10:
                    23:bf:ad:f8:4b:1c:2f:57:cb:a3:28:14:b1:a5:79:
                    5c:b9:2c:c6:75:0a:e9:f3:58:44:b5:e9:94:5e:75:
                    6c:06:fc:70:a0:0a:f6:08:d0:ed:bf:63:57:c2:aa:
                    32:78:21:98:fc:46:7d:08:7b:64:d0:9b:1d:a6:85:
                    94:ec:25:77:3a:9f:e8:3e:32:dd:23:b7:3a:47:a1:
                    da:7b:40:4b:f3:89:de:2f:b8:7a:aa:c1:52:fa:ea:
                    5e:5b:76:4d:a7:73:ad:d9:62:6f:3d:56:88:0c:55:
                    f9:65:9d:1b:d5:5c:b0:91:12:5a:fc:4d:f7:bd:2f:
                    b5:d5:20:68:c9:93:c1:0a:7a:db:2c:a4:58:da:69:
                    8b:e8:0d:b0:bf:27:1b:ee:2b:f1:4a:38:5b:09:18:
                    09:1a:36:c2:90:f3:45:40:26:e1:be:55:23:c9:37:
                    82:30:eb:73:4f:b4:d1:ca:4b:6e:43:c7:78:e6:77:
                    9a:96:d7:69:13:00:6d:b3:1b:c4:47:f6:98:2f:de:
                    cc:65:ab:ab:3d:64:56:69:ba:28:7f:33:16:e3:ed:
                    fd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A5:1A:F5:A5:8E:04:23:0C:48:BD:E6:20:9B:F9:21:5D:60:8A:45
            X509v3 Authority Key Identifier:
                keyid:FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:86:15:d8:52:20:fd:b1:2c:37:0e:0a:a0:71:8f:5a:f0:30:
         9c:c9:b3:71:73:62:27:7c:d3:49:6c:40:26:cf:70:38:b0:de:
         35:bc:47:7d:8e:5a:cf:f1:b8:a2:5a:d7:d5:fe:8d:9a:3e:27:
         1d:2a:2b:a9:46:98:6e:85:39:65:58:f3:67:d9:e6:5b:77:38:
         9e:bd:8e:64:71:ed:c7:3c:bc:66:85:b6:dc:e2:b5:71:21:3f:
         c6:8f:36:d4:fa:15:6d:88:50:ad:f6:49:17:0e:99:e5:32:7d:
         6b:6f:0f:d2:0d:4b:45:41:de:4a:a0:d3:2b:b1:af:b4:74:1c:
         c4:48:8f:85:a2:a5:99:0c:8a:1f:57:55:ee:a1:64:33:da:8a:
         58:2a:43:6b:4e:23:d4:79:cb:8b:0a:86:c9:30:c7:e1:dc:07:
         8a:fd:41:92:e7:fa:87:ea:fc:ec:d5:84:47:fb:9b:d4:3d:bb:
         7d:c5:3e:b3:49:c1:ec:3c:89:1b:c1:90:bb:ec:6f:1b:6d:31:
         e9:6c:72:cf:5c:61:b2:27:a6:b9:bc:98:74:c4:ab:81:b1:2a:
         47:1f:26:02:f2:86:ca:ad:b8:86:44:db:9f:0b:5b:ee:7d:b7:
         0c:e3:d2:75:2e:59:f5:88:bc:d4:ab:1d:eb:ea:a4:09:12:43:
         d2:f0:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:20:18 2026 by rpki-client