Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
File:                     r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json)
Hash identifier:          lC9Et9brFAUYtxOMPi66gpIDxzR7hexaFOfdA84QRLo=
Subject key identifier:   CA:BA:56:FD:A0:5F:10:EA:E9:31:C9:62:5F:95:BB:90:D5:C6:18:68
Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
Certificate issuer:       /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
Manifest number:          01EF
Signing time:             Sat 03 Oct 2026 04:02:44 +0000
Manifest this update:     Sat 03 Oct 2026 04:02:43 +0000
Manifest next update:     Sat 10 Oct 2026 04:02:43 +0000
Files and hashes:         1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: KzlCN/K2XcoFfWSCF36XC7huM4slRAE1C1kNBBTuy4k=)
                          2: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: SJ1zAtwuUDoklbt6R8JhcX6A+HkMTpxPrsLu4rdoP7E=)
                          3: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: YLQu+XBkP0u4scPVL2HjSFkhwvlDsdMdNxwXV2B40qg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
                          rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
        Validity
            Not Before: Oct  3 04:02:43 2026 GMT
            Not After : Oct 10 04:02:43 2026 GMT
        Subject: CN=6ac07e64-b5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:35:3c:61:61:e2:85:97:c1:04:61:f4:ab:
                    42:52:61:ac:06:29:8a:53:9d:0e:89:0f:61:93:85:
                    cd:55:c4:e9:9d:ae:5a:eb:1f:f4:79:0d:3c:03:fe:
                    b0:b9:bd:bb:13:3a:f1:16:36:c5:30:35:fc:c6:e9:
                    40:d7:da:ad:14:8e:d3:98:5b:01:93:7e:e1:cb:8b:
                    5f:c0:58:df:b8:7b:c8:0d:34:cb:bd:54:99:a1:51:
                    f3:ae:aa:c2:48:73:7c:37:e9:5d:ef:1f:ea:a8:32:
                    22:61:0d:7d:31:53:0c:9a:8e:08:16:df:4a:15:ff:
                    f5:2e:87:f1:8e:2d:ee:ae:81:db:3b:d7:a4:eb:2d:
                    11:4a:2d:13:f2:e2:e4:e6:a4:5b:f6:25:c4:ed:dc:
                    c6:f6:cd:88:d6:de:e9:fb:a4:76:45:f3:2a:1b:f5:
                    3c:84:2e:dd:21:e7:f5:c1:2a:cd:bc:1e:56:67:67:
                    e1:e4:34:6c:10:86:4f:8d:22:7a:be:aa:8c:8a:5d:
                    11:f9:a5:7a:9e:20:97:73:9b:cb:b8:39:fb:74:35:
                    c8:01:88:25:2d:11:09:e2:8d:db:0e:9b:2d:35:ff:
                    44:e3:da:d0:49:26:81:9a:a3:b0:76:d2:b7:67:68:
                    0c:22:c9:cf:c8:35:77:05:9b:d9:da:52:3c:57:83:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BA:56:FD:A0:5F:10:EA:E9:31:C9:62:5F:95:BB:90:D5:C6:18:68
            X509v3 Authority Key Identifier:
                keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:a7:df:83:af:2e:ae:cf:36:36:75:50:b9:d7:3d:14:e4:
         f5:f1:7a:ff:4e:4c:52:74:99:80:ab:2b:78:4a:b9:a1:f9:f0:
         49:2b:2f:49:55:eb:2b:ae:0e:7e:92:0b:e8:78:9e:05:40:38:
         56:b1:52:74:6e:a0:24:42:9c:dc:8c:7f:2d:db:02:74:be:b5:
         43:9d:58:b4:d9:bc:24:33:dd:fd:f5:85:23:41:2a:32:29:79:
         01:41:f0:08:6a:fb:48:02:0c:27:2b:44:01:5a:93:6c:ed:db:
         7a:d6:ea:dc:df:58:22:7b:53:07:b9:d4:3a:74:f0:cf:3c:c6:
         eb:00:07:3f:51:fe:88:38:b1:38:39:bd:eb:1a:af:99:ad:6a:
         f3:d6:54:33:fc:25:87:7f:85:a6:4b:8d:0f:cd:4f:d8:f8:21:
         17:32:c3:85:f0:41:bd:a1:62:71:a4:db:10:38:2f:fb:42:6c:
         cb:f4:f4:17:d1:45:dc:b1:15:3b:5d:b4:38:1c:9e:6f:04:58:
         d9:9a:32:b9:9d:9e:0b:e8:9b:f2:a6:50:ec:e5:41:34:a8:bc:
         a8:5b:91:1b:62:f2:58:21:e1:8c:5e:b4:88:2e:a7:7b:bd:23:
         95:dc:90:77:6c:43:38:f2:ad:a2:5e:02:5a:5e:c8:05:27:9f:
         1d:dc:0b:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJBODIxMTAvBgNVBAUTKEFGQjhGRkUxRTg2ODYyOTZCOTk2QzYzQUE5MDJFQTlD
MTI4RjQ4RkUwHhcNMjYxMDAzMDQwMjQzWhcNMjYxMDEwMDQwMjQzWjAYMRYwFAYD
VQQDEw02YWMwN2U2NC1iNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZs1PGFh4oWXwQRh9KtCUmGsBimKU50OiQ9hk4XNVcTpna5a6x/0eQ08A/6w
ub27EzrxFjbFMDX8xulA19qtFI7TmFsBk37hy4tfwFjfuHvIDTTLvVSZoVHzrqrC
SHN8N+ld7x/qqDIiYQ19MVMMmo4IFt9KFf/1Lofxji3uroHbO9ek6y0RSi0T8uLk
5qRb9iXE7dzG9s2I1t7p+6R2RfMqG/U8hC7dIef1wSrNvB5WZ2fh5DRsEIZPjSJ6
vqqMil0R+aV6niCXc5vLuDn7dDXIAYglLREJ4o3bDpstNf9E49rQSSaBmqOwdtK3
Z2gMIsnPyDV3BZvZ2lI8V4MEIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMq6Vv2g
XxDq6THJYl+Vu5DVxhhoMB8GA1UdIwQYMBaAFK+4/+HoaGKWuZbGOqkC6pwSj0j+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GQkREQUMyNENF
NUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lwYTVsc1k2cVFMcW5CS1BT
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I3al80ZWhvWXBhNWxzWTZxUUxxbkJLUFNQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkE4Mi9GQkREQUMyNENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lw
YTVsc1k2cVFMcW5CS1BTUDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaX6n34OvLq7PNjZ1ULnXPRTk9fF6/05MUnSZgKsreEq5ofnwSSsvSVXrK64O
fpIL6HieBUA4VrFSdG6gJEKc3Ix/LdsCdL61Q51YtNm8JDPd/fWFI0EqMil5AUHw
CGr7SAIMJytEAVqTbO3betbq3N9YIntTB7nUOnTwzzzG6wAHP1H+iDixODm96xqv
ma1q89ZUM/wlh3+FpkuND81P2PghFzLDhfBBvaFicaTbEDgv+0Jsy/T0F9FF3LEV
O120OByebwRY2ZoyuZ2eC+ib8qZQ7OVBNKi8qFuRG2LyWCHhjF60iC6ne70jldyQ
d2xDOPKtol4CWl7IBSefHdwLDg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:13:02 2026 by rpki-client