Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
File:                     a7IptQZEL6BIpPedPLRPoOAEeUE.mft (raw, json)
Hash identifier:          gFHKhZTjp5D9nX3ghxWEGLPsW1bXYu4oSDfhq/qr6c8=
Subject key identifier:   41:2C:4A:65:FA:F8:8C:76:2F:31:D8:86:73:55:A4:4D:D3:66:3A:E9
Authority key identifier: 6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41
Certificate issuer:       /CN=A913C928/serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
Certificate serial:       084C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
Manifest number:          0843
Signing time:             Tue 06 Oct 2026 21:11:07 +0000
Manifest this update:     Tue 06 Oct 2026 21:11:06 +0000
Manifest next update:     Tue 13 Oct 2026 21:11:06 +0000
Files and hashes:         1: a7IptQZEL6BIpPedPLRPoOAEeUE.crl (hash: N3a3dalO5kv0Xp6UiKZQEyqxi3Tcz6dQ/sFT3njcUXA=)
                          2: 08D6D5122A4511EBA2903755C4F9AE02.roa (hash: m4dk1K+WWOtebN67fEZ/Rpy7CEAi/9tqXla7KqXBJoQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl
                          rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C928, serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
        Validity
            Not Before: Oct  6 21:11:06 2026 GMT
            Not After : Oct 13 21:11:06 2026 GMT
        Subject: CN=6ac563eb-157a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:69:3a:4b:36:9d:6a:aa:3d:54:55:dd:3f:
                    69:87:75:d4:3f:f1:01:8d:f3:eb:a4:9e:00:6e:93:
                    16:d9:a3:da:87:01:d8:2e:b5:b8:90:4f:03:8d:35:
                    84:9b:98:c3:ae:7e:2c:07:c2:6a:71:74:62:bf:22:
                    7a:bf:44:16:99:2d:24:20:82:4b:68:d0:5a:72:5b:
                    66:47:aa:6c:0c:07:a4:30:67:e7:bb:eb:36:e9:6a:
                    16:14:ee:55:b4:06:14:03:f2:b7:2a:db:b2:19:93:
                    a4:ce:35:41:37:7d:96:cc:04:6e:7e:4c:04:8a:db:
                    e3:70:ec:18:48:0c:e0:75:51:09:05:3f:a8:22:0c:
                    0f:47:9f:48:c7:d0:cf:df:0b:5a:a3:bb:be:2a:2f:
                    0a:52:42:0e:80:82:9b:c4:e1:0c:55:2d:85:6f:7a:
                    e6:61:77:4f:91:09:ef:e1:c6:c7:a4:2d:3c:eb:d1:
                    db:9b:89:c1:b2:9c:c6:f6:0b:4f:94:42:cd:1b:d2:
                    66:02:c1:4a:83:b8:0a:96:12:94:7e:13:93:ae:1d:
                    3c:d5:0e:1b:a5:78:7f:12:b1:02:f8:5c:d4:db:55:
                    ab:0e:4a:2b:1b:98:44:82:93:79:ec:8b:3a:56:ea:
                    f2:88:63:3c:92:1f:f3:5c:6f:6b:f0:0c:2d:ef:6b:
                    75:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2C:4A:65:FA:F8:8C:76:2F:31:D8:86:73:55:A4:4D:D3:66:3A:E9
            X509v3 Authority Key Identifier:
                keyid:6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7b:57:a8:5c:ec:4b:af:23:40:a1:1d:6a:d7:9f:a0:09:e5:
         18:11:68:ef:a8:ea:47:70:83:a1:1b:f1:f7:63:9b:83:84:6f:
         fc:27:b3:03:e5:79:97:3e:ef:07:e8:c5:b6:05:f9:34:bc:56:
         91:79:8c:ab:88:47:c7:d4:c1:34:f2:9b:f1:59:be:5e:a3:da:
         47:f7:ec:34:12:6b:0f:34:85:63:49:69:47:38:89:d4:e5:a4:
         97:86:0c:e7:b8:bb:46:bf:5e:c2:ff:1c:a4:c3:6a:07:43:c8:
         dc:e4:1e:98:24:1c:37:94:07:51:49:42:2c:2c:08:db:2b:ad:
         c5:95:66:48:10:c6:06:c9:71:17:58:12:f8:0a:33:2a:0d:da:
         86:a3:72:62:80:dc:f7:15:0f:b8:21:8a:fc:48:e0:0a:d6:63:
         34:d6:77:9f:ee:72:de:14:ce:49:3e:16:b0:53:bd:45:7b:f5:
         26:1c:4f:80:25:65:08:af:5e:df:66:3e:b0:51:b5:13:21:75:
         4b:df:5b:b9:41:13:eb:dd:3a:cc:af:0f:61:6e:08:98:68:5e:
         48:af:37:4c:f6:b5:20:fb:d1:70:5d:02:1a:0f:4e:40:06:42:
         16:76:d4:9f:d3:2b:3a:5d:62:f9:ce:bf:8b:39:63:de:86:d8:
         4a:5f:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:10 2026 by rpki-client