Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
File:                     7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json)
Hash identifier:          ZMBIVMwMVjeljCa+KaEzsGhNmJGqmjqPs9yrFU188IA=
Subject key identifier:   97:99:31:82:16:EF:B1:B4:6D:FB:43:77:6D:5B:1D:D9:8C:EC:DA:5F
Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
Certificate issuer:       /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Certificate serial:       0AE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
Manifest number:          0AD9
Signing time:             Tue 06 Oct 2026 19:31:48 +0000
Manifest this update:     Tue 06 Oct 2026 19:31:48 +0000
Manifest next update:     Tue 13 Oct 2026 19:31:48 +0000
Files and hashes:         1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: QA2Ye72zmrrpJiC4IXbfTspCL208d6LPbBIfjLjEQbk=)
                          2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: fTC3RP5UwYJo/xgaymTCOGYfDdh0ORjauT4dKfVe+3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
                          rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2786 (0xae2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
        Validity
            Not Before: Oct  6 19:31:48 2026 GMT
            Not After : Oct 13 19:31:48 2026 GMT
        Subject: CN=6ac54ca4-ed1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:ce:21:27:04:d8:91:34:89:1f:7e:53:0e:
                    e9:31:c4:b8:9a:81:d6:bd:09:43:d8:53:6a:65:a0:
                    a8:63:67:83:69:a0:9a:1d:4e:5e:cc:23:f4:29:ac:
                    47:c2:92:07:76:b8:39:fe:3b:b9:e1:5a:bd:72:44:
                    ba:0e:f9:80:f5:a6:6a:4a:7e:06:83:6a:5f:ae:82:
                    f0:ff:e3:4f:d8:be:a7:7c:8a:85:f4:4f:c7:22:b4:
                    9f:bc:6e:f6:3a:a2:30:90:13:af:c9:5c:45:d4:c9:
                    53:12:ac:db:8c:64:cf:ab:82:b3:c0:97:ee:3a:97:
                    94:31:49:18:20:ed:3a:7a:aa:14:8f:23:bd:0d:f8:
                    13:bb:9c:35:5b:9a:11:a7:f8:1e:f2:c1:e9:79:c3:
                    98:96:dc:6b:dc:48:65:ce:ca:3e:bb:7c:7a:92:d6:
                    55:6d:e2:b4:d9:9e:8d:11:36:a3:90:a3:ba:2c:d1:
                    fc:ee:4c:46:21:2f:b3:b3:d1:2a:b3:e8:dc:c9:1d:
                    65:9f:63:6d:9b:ef:76:50:49:5c:87:fa:53:55:8a:
                    24:7b:12:d7:ef:77:01:82:56:70:76:fc:ff:96:f9:
                    77:de:42:cc:7c:71:51:e3:b7:6f:c6:32:f3:29:a6:
                    4c:7d:62:1d:0d:27:72:37:22:82:e2:5f:6d:ae:9c:
                    1a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:99:31:82:16:EF:B1:B4:6D:FB:43:77:6D:5B:1D:D9:8C:EC:DA:5F
            X509v3 Authority Key Identifier:
                keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:42:b1:49:ba:ed:a6:ca:19:af:d6:8d:07:0a:be:cf:de:4f:
         05:d4:17:ef:bb:d5:05:bc:2e:8c:a2:a5:ee:78:19:f3:04:d1:
         1c:39:fa:99:9f:8a:21:55:3e:ec:47:eb:7c:c8:dd:f8:b8:ce:
         fb:c4:66:f2:ab:e5:75:fe:ac:e7:ec:07:8f:08:53:ef:75:72:
         71:11:e2:52:21:82:8a:1e:4d:7c:ba:1c:47:a3:fa:9a:a2:61:
         b9:fa:47:0a:16:e0:32:54:78:b2:e4:74:52:f7:7e:e4:15:71:
         80:7e:c8:6f:af:91:1a:93:ad:2e:96:b3:0a:0d:6e:a6:90:96:
         49:71:a8:2c:b7:d8:31:8b:a8:b1:2b:ad:c7:a3:ee:0e:41:fb:
         23:5a:89:8f:d1:ce:ae:40:55:5e:94:55:16:dd:2a:e0:34:32:
         76:ce:cd:c7:0b:fa:5f:e4:65:99:6f:b6:a2:e4:42:c9:12:61:
         dd:49:43:38:bc:c5:d8:09:db:40:8a:8b:47:18:41:4f:bc:43:
         9f:b6:50:f3:2a:bc:ca:9d:8c:cb:5e:3a:40:34:b9:33:ab:f3:
         fe:56:7d:b1:b7:29:64:c4:9d:8f:f2:d7:40:2c:f2:b9:c9:d2:
         51:f6:6d:b4:a3:6f:1c:94:26:6b:aa:a2:e1:3e:1d:46:88:1c:
         1d:4d:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:05:04 2026 by rpki-client