Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
File:                     03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json)
Hash identifier:          RfE8Os6uDrxegLrePmzjbY1wwhEnjyI/ZEeQ44K/JBw=
Subject key identifier:   58:69:ED:7B:9D:DF:0D:22:C6:93:C7:FF:1A:C1:95:95:46:D1:1F:30
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Certificate issuer:       /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial:       086A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
Manifest number:          07F0
Signing time:             Sat 24 Oct 2026 21:23:17 +0000
Manifest this update:     Sat 24 Oct 2026 21:23:16 +0000
Manifest next update:     Sat 31 Oct 2026 21:23:16 +0000
Files and hashes:         1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: UuvvtaDJPhpDppEgpWVCx5QdrpVVD5mnff/eQT73IGs=)
                          2: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 7g2GzMpbsXg0SC1u5pI0BA7KwxetbBq/6LlcQTkxPZY=)
                          3: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: sWPtrrp7wjC9q2Z2Pyt+2v9XwkvTK+NuUGOz/EsAmyM=)
                          4: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: SzlEPDJi9zAc0zG3xIXsTR02HbNoFM1IdbpFsslC/FY=)
                          5: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: dl0KaIPqQRrW321Czs7YhzYqJGnPgpM9OmusVMr+VRk=)
                          6: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: TXZ7H4bYoa2tMoTjTtlYu/ju1DHWYH5bM4fA2XxysBg=)
                          7: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: +eX/IhPIgzcgEej3nFPqU8lcNjTSKxrNxHm69wcEBYA=)
                          8: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 7JuQ2G6yFzq4/l/uV73erQ4OY/dKSaAKR4JLpyv+3gw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
                          rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 21:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154 (0x86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
        Validity
            Not Before: Oct 24 21:23:16 2026 GMT
            Not After : Oct 31 21:23:16 2026 GMT
        Subject: CN=6add21c5-a4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:ab:ea:47:19:ce:98:7b:df:b2:6a:da:20:
                    ce:4c:38:27:b0:96:ea:2f:45:cc:81:fe:49:31:cf:
                    42:d9:00:bc:52:02:74:fe:7a:d6:57:f2:ba:f7:45:
                    dc:63:b4:2e:7e:ca:ad:06:eb:9b:48:94:fd:aa:d5:
                    0b:4f:ec:1b:df:c7:a5:a3:e4:70:19:d0:2f:98:5f:
                    57:59:78:f5:ba:6a:09:32:83:8b:53:02:77:ce:73:
                    e3:e5:f9:ec:79:b2:f7:01:3f:23:a4:3e:03:3a:11:
                    f8:5b:96:e1:0f:ea:d0:24:83:9b:f2:5a:4d:c7:91:
                    64:1a:0f:4f:e1:0a:33:b6:f2:1e:e1:6c:45:dc:a7:
                    38:51:f7:1a:bb:e7:87:3e:55:da:04:ee:db:e1:4c:
                    fb:fe:94:5e:e5:05:c2:cf:a6:90:29:db:b5:e2:2b:
                    c6:dd:d3:d9:b4:33:a9:57:c8:a2:6f:37:61:ed:6b:
                    82:84:8d:f2:69:3a:44:b4:6f:7b:65:67:0d:15:aa:
                    f0:5b:52:25:e3:12:bc:cc:c5:16:df:1c:fb:22:1d:
                    d4:7f:82:23:89:08:98:be:77:89:33:95:09:cd:f6:
                    51:41:9a:d4:5d:eb:55:25:ca:59:d8:5d:ef:b0:97:
                    90:1d:cb:7a:db:46:7a:79:dc:b2:a7:7d:6d:05:c6:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:69:ED:7B:9D:DF:0D:22:C6:93:C7:FF:1A:C1:95:95:46:D1:1F:30
            X509v3 Authority Key Identifier:
                keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e7:f0:af:98:61:00:75:60:06:70:6c:de:50:54:89:23:9e:
         a5:c1:86:13:3e:86:65:f4:6d:51:27:8c:c9:3d:ef:11:4c:57:
         42:1e:dc:70:41:31:35:2d:73:25:c1:ad:64:c3:2d:2f:b3:7c:
         09:34:25:49:c4:b1:13:fa:83:0c:6f:89:9c:34:89:3b:5a:65:
         d7:c6:28:6d:e2:34:e9:18:44:28:7e:a4:36:1a:1a:d3:bd:9b:
         84:48:37:22:fa:df:47:c6:bd:98:6b:fc:5d:31:a7:84:e6:3d:
         b8:76:59:4d:e7:5b:88:e5:a2:fc:c0:20:a1:6e:17:1d:ab:20:
         5e:a2:1e:67:97:90:65:7b:57:cc:02:15:a7:ea:91:70:16:c3:
         cc:26:c1:9a:32:c5:a4:d8:98:d8:5d:8e:b9:d4:6a:67:b4:e9:
         c2:f3:c0:28:7c:bd:6f:78:72:4f:b0:a8:7b:81:7c:30:9a:1d:
         5e:7f:24:82:5a:b6:49:d7:f0:23:a0:4e:af:3f:05:0a:ab:15:
         d2:77:87:74:e4:30:b2:3c:ed:d7:67:3a:35:4d:6c:29:2e:9e:
         80:96:1d:38:00:e3:a5:fe:dd:43:fb:ab:7e:1d:22:5d:59:d3:
         32:60:aa:f6:77:2d:69:ac:69:a4:80:cd:b4:c5:a5:6a:24:11:
         70:9b:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:01:43 2026 by rpki-client