Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
File:                     7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json)
Hash identifier:          NrVBlH0U+shebG8LwBc6EmCOLSQdx9MFrftkVXsLshA=
Subject key identifier:   90:14:71:FD:D5:A3:C4:DC:6A:14:D9:39:08:82:62:57:D2:3C:25:63
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Certificate issuer:       /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial:       0B5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
Manifest number:          0B41
Signing time:             Thu 10 Sep 2026 19:13:15 +0000
Manifest this update:     Thu 10 Sep 2026 19:13:14 +0000
Manifest next update:     Thu 17 Sep 2026 19:13:14 +0000
Files and hashes:         1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: HK3vW6b2OptXjdb1A24PQtQ0cPZF80XZhR9lgVuZL8Y=)
                          2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 71Hm3TTvUXY6fbA6ubcd977cDED5QXch19XWZX6CKNY=)
                          3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
                          rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2908 (0xb5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
        Validity
            Not Before: Sep 10 19:13:14 2026 GMT
            Not After : Sep 17 19:13:14 2026 GMT
        Subject: CN=6aa3014b-f62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:2e:75:b2:af:38:2d:12:e2:4d:9f:c9:73:
                    17:82:29:e7:aa:19:8e:0b:96:71:b7:54:d1:f4:36:
                    bb:26:df:86:ae:68:1f:45:15:e1:8e:68:00:84:55:
                    0a:d0:ec:2e:03:0c:ec:2d:da:92:9a:ae:f1:c1:ea:
                    7c:22:fc:a1:4b:3d:3a:90:6d:1d:3e:88:a6:24:7f:
                    31:e2:cb:33:08:67:e0:ac:68:65:a9:c2:0f:30:71:
                    4b:e5:b5:ca:dc:a5:0a:df:24:eb:80:5d:1e:d3:eb:
                    5e:6c:a1:02:80:6f:8c:65:cd:93:63:a2:f1:d3:a2:
                    05:e3:d5:4a:65:98:5c:f4:45:37:e3:64:1a:6e:27:
                    40:d6:5e:a1:1b:33:61:b1:f8:56:b1:39:d7:36:cf:
                    0d:f9:a4:fa:16:f9:a6:9d:69:7f:12:2e:e1:32:79:
                    b9:30:de:1c:a5:de:a1:07:0b:2d:52:36:4f:ae:84:
                    32:78:ea:84:27:bc:4d:fb:89:03:e4:df:59:53:d0:
                    1c:24:f7:af:6c:b7:d8:97:49:55:a8:4b:a6:6d:73:
                    e0:d4:e4:96:03:50:88:3f:30:ec:c4:a5:b1:7e:80:
                    7a:28:ec:d3:93:22:71:8b:2f:1c:10:0b:11:f6:b2:
                    d7:22:a7:72:29:0f:32:56:b0:83:9a:a3:75:1a:aa:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:14:71:FD:D5:A3:C4:DC:6A:14:D9:39:08:82:62:57:D2:3C:25:63
            X509v3 Authority Key Identifier:
                keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c8:01:8d:d4:9b:37:b0:96:ff:0c:e5:76:59:e1:13:2c:ca:
         e8:f2:5d:8e:1b:2e:6e:dc:d8:a6:0a:b2:84:43:43:c3:bd:7b:
         47:9f:37:ed:f2:da:91:52:90:55:3b:79:04:89:59:45:5b:31:
         99:f4:3e:50:4c:3f:98:3a:43:e0:20:28:14:26:27:7b:6f:23:
         39:37:6f:25:4a:9a:cb:d1:d5:af:b9:4f:7c:bf:56:22:eb:26:
         6e:3d:1b:0a:c9:8a:51:ef:3d:c6:eb:b5:7a:ea:9c:a3:7d:7f:
         9c:40:e7:19:24:1f:df:26:a7:d9:a1:fc:eb:de:06:28:d2:dd:
         59:ac:35:ab:00:1f:71:7a:c2:04:6d:57:31:fb:fa:72:b5:ed:
         02:2d:c7:21:d5:50:31:4e:06:cc:38:f3:1b:08:08:38:86:6a:
         43:c0:cb:9b:3b:8a:77:73:33:c5:fe:a6:fd:2f:a9:fb:98:86:
         c1:c0:25:76:a2:55:b6:f7:97:fa:32:78:9d:51:f8:13:6f:99:
         83:ae:97:ab:63:27:62:fa:ca:9b:24:d6:3f:02:62:22:2e:c5:
         15:ec:20:f3:4e:7f:11:62:12:5a:a0:ec:ea:d7:ee:d7:75:3c:
         8d:a3:2e:d1:8b:5b:8c:64:53:c1:c6:ff:43:b8:99:95:cc:31:
         5d:19:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:25:14 2026 by rpki-client