Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          I4O/eo6pp1pdkyKT5+wqQMnfvyVruddcHZmCuMuu7Sc=
Subject key identifier:   19:E7:4E:93:04:50:7D:86:91:1F:64:36:5E:AD:6A:88:5E:22:BB:3B
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       02ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          02DD
Signing time:             Tue 29 Sep 2026 01:26:43 +0000
Manifest this update:     Tue 29 Sep 2026 01:26:42 +0000
Manifest next update:     Tue 06 Oct 2026 01:26:42 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: bT9i/HPi0vYxT7mgncrm32DcooYWYHfda9Wz9NZ/cnU=)
                          2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: Gb6Sv2PR2ZxyHabUMBcrUJFirPirEWwtzztzYQgXRmw=)
                          3: GxgucsSUgosAU3XrEdg2VAHcZ1A.asa (hash: u7R/ikCvSd4wV0dZOX8iGJTL3SOAHexzFM4JmSKBwvw=)
                          4: JeO3CtxkzPAcVMCreayejidrFVo.asa (hash: 51oWaKu0sYjZS07/IFjH1aIk6mMJDCGbung40phF1rs=)
                          5: 71E6B7F48BDB11F1A5F20D8F3311F970.roa (hash: Y5v3FjIPvdcusoX29pBxfg1nvFUkAyu6SvOVbkZcVQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 01:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: Sep 29 01:26:42 2026 GMT
            Not After : Oct  6 01:26:42 2026 GMT
        Subject: CN=6abb13d3-a60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:7d:8d:7f:b5:ea:62:04:99:48:2b:9e:87:
                    c1:49:04:51:be:a4:c2:30:c8:e6:20:90:b1:e5:3f:
                    e9:74:7a:b6:3e:f5:26:fe:ba:6b:10:75:d8:c0:2c:
                    d9:50:e8:de:3e:db:e2:b2:18:a8:e4:d3:03:9d:4d:
                    68:32:f9:2d:a7:ab:91:46:84:08:df:16:4a:65:44:
                    17:65:70:40:b1:fc:01:ae:33:c7:11:7e:41:0e:71:
                    f8:a9:06:a0:3c:a2:62:05:d0:85:f7:a3:68:28:07:
                    22:da:ad:ba:fb:35:1a:79:e4:05:16:3f:bd:5c:55:
                    84:06:29:38:f3:b8:99:87:83:a3:5b:48:65:2e:c2:
                    47:07:36:17:42:a6:b2:6c:66:c4:5a:0e:77:33:05:
                    8c:a6:b3:ff:f2:a7:0d:d9:fe:f8:3a:d4:50:7e:be:
                    de:6c:34:b2:08:67:c8:82:f7:e3:20:a1:81:6c:15:
                    bb:7f:17:86:13:7f:7c:2b:10:0b:38:29:1c:b7:40:
                    21:06:66:0c:76:bf:5d:36:42:7f:39:8f:4f:d3:08:
                    2f:5a:a7:df:67:b1:75:e0:af:75:0e:27:0c:c7:b7:
                    30:41:c4:ad:d8:46:54:05:02:83:eb:68:53:ed:16:
                    d3:ef:0a:4c:ab:a3:25:1d:72:9b:c8:a5:cb:bb:db:
                    36:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E7:4E:93:04:50:7D:86:91:1F:64:36:5E:AD:6A:88:5E:22:BB:3B
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:43:15:9d:a7:43:c8:e5:28:0b:ab:ba:85:3a:2e:91:ec:4c:
         d6:e4:bd:df:39:1f:69:22:f6:62:ff:2a:1c:14:49:09:6e:00:
         5b:cd:f5:ec:e4:ea:53:f0:a0:f2:0a:2f:b3:d6:97:e4:f1:4a:
         ca:1d:8e:f8:8f:8c:ac:55:16:36:34:43:2a:ca:fe:26:f9:72:
         b8:d3:5d:d8:d8:93:48:fb:5d:5f:4d:40:57:62:2f:dc:35:5e:
         45:4c:a4:ad:0b:19:c5:f8:bd:c8:3d:86:de:3d:c4:8c:7d:7d:
         bd:5e:fc:36:34:e5:31:b9:f6:6c:75:a1:ee:77:a7:63:00:26:
         77:cb:6d:21:c6:36:8c:a5:99:44:50:3f:47:41:5b:10:79:79:
         fb:b7:4b:ee:eb:0b:4c:b8:c5:aa:fc:56:f7:90:32:33:bc:e9:
         22:6f:60:98:0a:24:63:45:0f:33:b8:b3:0d:37:5f:15:5c:1c:
         2c:7a:63:e9:91:b2:4f:5d:72:5e:c2:66:a7:b4:6a:ca:b5:e4:
         52:64:06:f0:07:5d:b6:88:be:29:86:1e:05:41:8f:e8:65:c1:
         5d:94:39:07:19:9b:49:29:ae:57:74:ee:83:88:ea:d7:d3:be:
         61:4c:77:23:29:a2:fe:91:5a:bb:05:96:48:a7:0a:ae:05:f3:
         65:e0:23:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:55:05 2026 by rpki-client