Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
File:                     7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json)
Hash identifier:          +jxSAijQ5UFuz9q2mSLxh1QUITGGWpU2L5Gc/3hQU74=
Subject key identifier:   81:40:C6:E4:63:C5:A8:94:06:6C:64:E5:AD:67:91:37:CD:12:A7:BE
Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00
Certificate issuer:       /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
Certificate serial:       08D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
Manifest number:          08CE
Signing time:             Tue 06 Oct 2026 20:35:52 +0000
Manifest this update:     Tue 06 Oct 2026 20:35:51 +0000
Manifest next update:     Tue 13 Oct 2026 20:35:51 +0000
Files and hashes:         1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: zKjbimVrj4TJntqZvjZPqKTDp/EkhP/cyEafk6nBzFY=)
                          2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: Sm8cDlO+Bn4wmHjiuhnBl2Ebz4v6i98Fbv6/A7UD98o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl
                          rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136D8B, serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
        Validity
            Not Before: Oct  6 20:35:51 2026 GMT
            Not After : Oct 13 20:35:51 2026 GMT
        Subject: CN=6ac55ba8-236d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:99:73:99:b4:a4:bf:69:8b:21:7e:27:c5:27:
                    da:f7:57:23:3d:47:88:c5:98:0c:d4:42:2e:3d:6b:
                    8a:8e:2f:34:ec:e0:e2:83:6d:ff:76:5d:ba:1d:34:
                    85:07:96:06:09:1f:47:26:72:8b:20:99:08:52:6f:
                    e1:e9:59:f7:ff:ad:d5:b9:9a:db:a1:ee:ca:08:dc:
                    f1:3e:66:db:84:db:79:ed:4f:24:95:91:a8:0d:69:
                    81:28:11:df:65:63:3a:c8:d4:c9:4a:ac:e3:8b:1c:
                    e3:09:0a:86:d1:6a:ef:08:1b:7d:8b:67:99:31:54:
                    64:bb:11:f0:f1:42:ef:eb:43:a0:5c:f0:4b:cf:cb:
                    c9:72:e9:07:72:b6:47:f9:6a:9a:17:c2:f9:4d:e1:
                    e3:d9:3e:49:b7:b4:4e:98:c8:a7:10:d2:9c:35:11:
                    aa:0e:4e:cb:89:2a:0e:0d:ec:98:52:82:42:d8:58:
                    f1:57:b7:34:ae:c2:2a:cb:43:39:75:92:4a:03:40:
                    ae:56:a5:30:4d:20:e8:06:a9:8b:30:af:95:c6:09:
                    ab:71:52:19:ea:c6:96:fa:4d:c9:9f:b7:2d:38:03:
                    89:85:09:70:8d:f4:de:b4:29:5a:19:58:2d:f3:17:
                    2c:c9:84:b2:d1:21:8a:c0:c7:ae:ba:43:54:4b:51:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:40:C6:E4:63:C5:A8:94:06:6C:64:E5:AD:67:91:37:CD:12:A7:BE
            X509v3 Authority Key Identifier:
                keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:38:1a:88:9e:7c:f9:a0:82:b1:4e:0f:ac:53:98:8d:31:
         4a:6b:e4:e3:ce:31:37:f0:1c:ba:6e:26:5a:83:2d:e5:4c:e2:
         e3:7a:67:80:5c:b2:8a:c1:60:f8:68:47:17:77:87:b3:ae:74:
         22:7b:35:a3:b9:eb:7b:50:99:73:1c:80:eb:3c:39:1c:4a:c7:
         77:d9:a2:69:7f:6c:fb:d8:77:d2:c3:cf:2f:6c:6e:6b:ed:89:
         a4:8d:3a:37:d8:ff:aa:a8:c2:e3:e7:56:29:46:6f:ea:5d:cc:
         8d:85:85:98:23:58:c7:4c:7a:c9:99:74:f0:d9:27:84:c2:77:
         9d:e1:61:17:18:cc:35:76:25:81:83:5c:00:8e:77:79:17:a3:
         dc:98:95:ae:41:a3:40:02:bc:e6:94:31:48:36:b9:53:7b:ca:
         ba:f4:15:6b:41:ad:6a:dd:35:e5:e8:5a:f6:4f:84:e8:bd:e0:
         ec:33:d2:cd:7c:79:71:34:ef:04:8e:76:7b:fe:9a:e4:4d:e4:
         06:46:0b:19:73:74:a8:ff:85:5b:d5:90:44:e5:2e:56:20:b5:
         5a:5b:db:84:93:02:2e:7d:65:ed:79:f4:68:d1:ce:0a:e3:87:
         62:03:4e:94:01:f0:5e:9a:8c:12:ac:0f:10:10:c6:27:09:e8:
         4a:d8:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:35:47 2026 by rpki-client