Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
File:                     RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json)
Hash identifier:          uk5NiU9lE2Bd9lLCXRL02sNpKkN6GPoC1UA1rxYYbyM=
Subject key identifier:   0C:E1:48:4F:50:0A:62:D5:76:A9:3F:18:24:3F:6C:AB:4F:31:5F:A5
Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49
Certificate issuer:       /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
Certificate serial:       0723
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
Manifest number:          0718
Signing time:             Fri 02 Oct 2026 22:23:53 +0000
Manifest this update:     Fri 02 Oct 2026 22:23:53 +0000
Manifest next update:     Fri 09 Oct 2026 22:23:53 +0000
Files and hashes:         1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: E0vhKGkqes+SLlabMGOUTQI3oAGS5LJM9kcAle+H+wM=)
                          2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: B5b4pHn3Q7lWdfVk+2VqlqlxqURQjUTmZj9KZGH2lHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl
                          rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827 (0x723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
        Validity
            Not Before: Oct  2 22:23:53 2026 GMT
            Not After : Oct  9 22:23:53 2026 GMT
        Subject: CN=6ac02ef9-81b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:2c:48:f0:e0:e7:9d:17:3c:88:d6:90:e7:
                    a8:d0:a1:b2:53:bf:cd:e8:79:31:9e:02:f3:c0:d4:
                    bb:6f:73:0e:eb:29:04:1d:54:85:10:57:de:84:24:
                    7c:7e:fc:49:1e:3e:e2:79:e3:62:31:02:b0:34:7e:
                    5f:e7:94:82:e0:7d:58:14:d6:5e:c8:1a:82:90:ef:
                    d5:71:4c:9a:4e:9a:73:f9:46:5b:6d:13:d7:03:a2:
                    aa:29:50:d4:ab:c6:bb:2b:e0:93:b1:e3:c5:6f:e7:
                    56:93:3f:d8:1b:e9:7e:9e:39:80:7d:e4:c1:14:3e:
                    d6:05:bb:42:d7:23:49:f8:8d:d3:96:b6:7a:4b:9c:
                    92:21:6c:d7:e7:e7:ea:66:85:97:c2:a5:fc:99:92:
                    de:e5:6b:b8:21:d4:30:d1:03:39:d9:cd:19:7f:47:
                    79:ce:cf:16:b8:ca:13:b8:7b:e9:6a:87:d8:d0:fe:
                    9f:7d:74:9f:d6:c7:16:fe:d1:89:9e:70:75:7b:b8:
                    9d:5a:5a:1c:3e:79:03:ed:1f:c5:83:5e:ea:72:7d:
                    12:91:2c:00:b5:ca:2d:24:00:b6:f3:d2:4a:0a:4c:
                    49:0e:b5:16:bc:69:a0:4e:0c:c2:70:bc:cb:93:d1:
                    16:e0:37:fb:f8:7a:c5:87:c4:26:99:3d:fa:15:07:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E1:48:4F:50:0A:62:D5:76:A9:3F:18:24:3F:6C:AB:4F:31:5F:A5
            X509v3 Authority Key Identifier:
                keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:04:f0:6a:ba:2a:1e:0e:ba:79:48:35:6c:cb:3d:84:0c:74:
         fe:66:05:a8:f6:c4:41:f3:45:75:9a:11:e8:83:b7:ad:77:00:
         2c:71:72:15:86:16:75:09:f9:75:a4:ce:5b:24:4e:7f:54:7e:
         56:c2:35:cd:86:a3:77:c8:ce:13:59:45:92:14:8e:a2:1d:09:
         03:2c:ce:36:ea:e3:7e:e5:ff:a6:9d:f8:b4:f2:88:32:10:d8:
         93:fe:11:23:6d:dd:af:48:1e:2f:5b:43:cc:9a:bb:f6:b4:8a:
         26:99:d4:56:6a:46:5f:65:30:55:a4:76:cf:9a:f1:ee:02:fc:
         7b:db:a5:34:b7:dd:71:ba:12:f8:5a:11:fb:d6:a5:f2:94:ff:
         f5:75:51:83:c0:fc:ea:36:90:79:0d:ec:09:82:c6:6c:6e:be:
         4d:d3:1b:d7:96:35:41:57:03:f1:bc:dd:d5:b9:05:73:94:f0:
         47:8a:63:1a:b7:8d:80:47:7d:35:02:e3:1b:be:f7:e8:a9:f7:
         98:8c:75:1a:0b:91:61:5e:09:2f:97:ca:9a:fc:d1:44:ee:3d:
         72:f2:b6:85:13:3a:ce:a8:f0:68:4b:bf:60:1c:8a:35:a3:66:
         ab:c3:45:d4:5c:84:c1:6b:01:86:dc:c7:95:10:83:2e:5f:6d:
         46:d2:6d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:09 2026 by rpki-client