Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File:                     7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier:          V6W/Ob1+gN/sEDjS9D7kh679xLS09BCzJGK5a19XrKk=
Subject key identifier:   46:98:AF:F7:C1:94:34:91:D5:32:A9:08:1A:20:B5:19:ED:B2:F7:77
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer:       /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial:       0CF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number:          0CD4
Signing time:             Tue 06 Oct 2026 18:36:14 +0000
Manifest this update:     Tue 06 Oct 2026 18:36:14 +0000
Manifest next update:     Tue 13 Oct 2026 18:36:14 +0000
Files and hashes:         1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: pB9vSHk7iYV0GAsVa+rcj/H0DUsFjGqIVraCpChbxmk=)
                          2: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: pg9SsLOxgtqV7eWyJNRqBhktus5MyHYQ/fTT/Weq75Y=)
                          3: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: MVjgqlWP2+PxzhdlAammG4g4jdGVj5m8klqnIWeyc0E=)
                          4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: hEcH8ZRuZadu9VcKHGuJsHI1HxqcK9oTlGT1pOjaHQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
                          rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3313 (0xcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
        Validity
            Not Before: Oct  6 18:36:14 2026 GMT
            Not After : Oct 13 18:36:14 2026 GMT
        Subject: CN=6ac53f9e-010b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8e:a9:15:ac:b1:12:51:fc:17:79:f3:d4:0d:
                    1e:3a:a1:8a:e2:b2:70:ae:53:40:d9:e7:7b:a8:de:
                    7e:ef:63:8c:63:98:a4:33:11:13:74:5e:33:66:b1:
                    26:e3:ba:e5:e6:51:13:8f:ca:19:d5:64:0a:03:78:
                    43:6c:4f:0c:ec:8f:35:0e:ae:dc:a1:46:b9:4b:fa:
                    a7:d6:13:71:cb:10:fc:45:26:94:fd:9b:66:85:20:
                    76:f8:bc:7e:69:69:69:b3:cc:0f:86:b7:90:0f:25:
                    aa:5e:26:1e:e5:a1:fc:ad:85:ef:07:18:57:1d:6a:
                    6a:b6:6a:40:0d:d0:06:49:37:4f:f1:48:63:3e:f8:
                    63:96:95:1e:c6:d9:08:43:65:b1:c2:4b:98:fc:d1:
                    8b:80:14:d0:f0:00:18:4f:25:c6:b4:8f:cd:0b:62:
                    4f:8f:b6:82:db:ea:49:e7:79:da:b6:36:39:ef:9d:
                    f9:75:a4:a1:ec:ba:57:96:cb:8d:8d:77:58:44:26:
                    7d:1d:ff:a6:c4:f1:10:95:76:5c:36:c6:ae:aa:49:
                    e4:ad:2d:49:bd:da:23:aa:bc:26:95:8b:7d:61:2c:
                    6c:c6:2f:6f:0a:46:62:b0:dc:bb:ea:c1:23:f4:ab:
                    0a:53:95:15:d3:d8:a1:d9:19:ce:6b:e3:8b:3c:27:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:98:AF:F7:C1:94:34:91:D5:32:A9:08:1A:20:B5:19:ED:B2:F7:77
            X509v3 Authority Key Identifier:
                keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:40:85:ba:a6:2a:d3:4c:5c:17:74:51:f1:95:2e:6d:a4:9e:
         02:a7:c9:f1:b3:cc:21:67:10:77:a2:1a:61:5c:a3:a8:52:3b:
         c6:fc:6d:94:a5:08:cd:28:aa:52:75:68:3f:25:43:55:3b:80:
         4d:5f:10:e8:57:b0:18:5a:d2:08:6d:11:1e:35:b2:ff:30:6e:
         56:6d:e6:02:b2:f3:ed:53:9b:f0:aa:1b:31:99:0f:7a:52:25:
         24:7c:53:12:44:2e:ee:d2:95:52:6e:b0:3f:e3:80:d6:36:05:
         be:47:7f:2c:f1:5b:06:ac:be:6e:4a:cd:1d:9e:4b:71:57:31:
         5e:49:8d:1f:ab:02:72:71:a4:c8:0b:c7:0a:aa:68:be:d8:50:
         bd:07:ac:68:0e:83:0d:9e:ce:27:aa:00:75:3d:fd:2a:da:d6:
         96:95:74:c3:04:00:d9:65:5b:f1:eb:89:9b:ea:c6:b7:60:03:
         e0:cb:d9:96:d1:4b:65:61:06:e9:f1:6c:9c:bc:9e:24:9d:ad:
         3d:5f:6a:af:2c:e2:7d:8f:50:5a:eb:f5:82:82:84:d3:7b:62:
         92:b5:7f:bf:b0:15:eb:37:f2:8b:e8:29:bc:36:b9:27:f4:9a:
         a8:20:5e:2b:e8:b8:1a:c5:13:d4:56:fc:4a:00:eb:50:bd:9f:
         19:ee:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:56:33 2026 by rpki-client