Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
File:                     C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json)
Hash identifier:          w7KjUz1bS+TRdIXR6gEzPPeAQmG7D1QHsMw10Ue0nRg=
Subject key identifier:   06:8F:36:01:FB:BA:B4:90:80:70:69:3D:3C:24:F7:C4:EC:E2:77:F9
Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F
Certificate issuer:       /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
Certificate serial:       064F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
Manifest number:          063B
Signing time:             Fri 02 Oct 2026 23:01:42 +0000
Manifest this update:     Fri 02 Oct 2026 23:01:41 +0000
Manifest next update:     Fri 09 Oct 2026 23:01:41 +0000
Files and hashes:         1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: 9GraJeRQ3NrqnmerhCvBq/aZ/CoLZ2vvtcOUAdFbLmQ=)
                          2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: brrWyiXDAT96zPwT9YFF9H7HSt3GNNOYu7ZR6/bGT4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
        Validity
            Not Before: Oct  2 23:01:41 2026 GMT
            Not After : Oct  9 23:01:41 2026 GMT
        Subject: CN=6ac037d6-6b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:d4:7e:c0:2e:3a:af:a6:72:08:bc:6c:68:
                    50:d6:62:2c:86:ae:7c:32:b8:7c:e6:28:a7:8d:ad:
                    f9:99:73:90:db:da:4f:56:84:6c:54:ec:02:69:1a:
                    3b:f9:ff:de:f7:b4:2e:43:8d:d9:39:e9:87:e5:32:
                    35:46:a2:f0:41:05:71:f7:41:2c:b1:19:3f:f4:06:
                    bf:f3:1c:cb:bb:48:08:1c:c8:ca:87:7d:5c:64:ee:
                    ae:d6:f9:71:8a:f7:0b:be:ce:99:69:59:f2:a7:d8:
                    ff:e9:fa:09:23:e4:6b:2c:be:57:15:a4:5c:c1:9b:
                    ce:a5:72:a9:b9:3f:b4:8e:f9:1a:e0:c1:5f:55:71:
                    d6:00:fb:3a:d1:17:df:56:40:c2:97:d9:86:56:6e:
                    a8:21:b1:21:6f:d5:5a:ed:94:24:33:65:a9:29:7e:
                    9f:87:db:1e:67:80:28:62:54:fe:e3:ec:46:2b:07:
                    5b:8a:65:33:88:31:53:12:4e:3a:9b:17:2f:7f:fb:
                    03:d6:c6:04:24:9e:b9:e2:f1:04:08:e2:03:61:fa:
                    98:4d:55:b8:69:86:f9:78:7d:fc:66:dc:b1:d7:07:
                    2f:cc:9e:a3:2b:21:92:52:8f:d9:51:20:f1:64:73:
                    07:74:69:39:cf:8b:6a:73:08:3e:91:fe:52:8f:b6:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8F:36:01:FB:BA:B4:90:80:70:69:3D:3C:24:F7:C4:EC:E2:77:F9
            X509v3 Authority Key Identifier:
                keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d2:a9:b2:45:ac:30:1b:2d:b0:12:75:54:6a:ab:1b:08:7b:
         b8:76:ed:78:e9:f3:75:b8:20:cf:3f:ff:b3:18:52:31:7d:c0:
         d3:2d:5d:d9:3b:a9:82:1d:22:93:a4:13:fe:8a:d6:1f:bb:a4:
         9d:ab:60:59:74:ce:75:7c:94:2e:af:77:61:5a:bf:3d:4d:44:
         1e:04:94:04:f7:59:c3:35:7e:5f:01:cc:39:f7:6b:4e:2d:eb:
         ad:c8:d3:a9:3e:6c:cc:82:23:7b:78:5c:5f:f2:e9:09:9c:cd:
         e6:5a:1e:da:bd:77:ea:1d:1f:33:e3:fb:f1:71:ef:2c:18:bc:
         0e:90:4e:8d:c3:b7:7f:2a:3d:bf:00:00:8b:3e:35:52:57:74:
         eb:31:e7:79:b5:4b:16:d2:a7:c3:76:88:1f:4b:e7:a7:b1:d6:
         69:30:f4:01:57:c4:1e:f1:dd:c0:87:af:bf:55:0f:84:c1:c3:
         90:02:29:33:dc:a6:bb:e0:ea:f7:db:db:fe:f8:8e:22:fe:76:
         97:9e:c6:bd:42:0e:f2:a6:5e:c8:a6:e4:49:99:b0:7a:c9:fc:
         aa:bf:63:97:bb:a5:68:8b:c6:94:05:a0:e4:f5:e1:00:48:6c:
         4b:1e:2c:49:0d:bf:22:c2:e9:59:8b:c7:54:d9:04:03:7a:b0:
         84:3e:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:35 2026 by rpki-client