Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
File:                     w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft (raw, json)
Hash identifier:          aGzZClduo1xoXzRIH9RaerbJmBjGU6nU0/w6+kGRq14=
Subject key identifier:   21:37:3A:10:C2:E3:D0:88:89:4A:6E:79:E3:F8:4D:AA:7B:5F:57:A0
Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Certificate issuer:       /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Certificate serial:       0809
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
Manifest number:          0800
Signing time:             Mon 12 Oct 2026 21:25:00 +0000
Manifest this update:     Mon 12 Oct 2026 21:25:00 +0000
Manifest next update:     Mon 19 Oct 2026 21:25:00 +0000
Files and hashes:         1: w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl (hash: T4KdO5p00cZ1K4FBKjNyBfxmjWeR5F33oRmE1QnbQmM=)
                          2: 43854B4044D411EB85615640C4F9AE02.roa (hash: qeh6HwToZUvKiPtIcQ5m53AulGUgnpsw5bQQUf1/wEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
                          rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 21:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168197, serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
        Validity
            Not Before: Oct 12 21:25:00 2026 GMT
            Not After : Oct 19 21:25:00 2026 GMT
        Subject: CN=6acd502c-8f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:0b:18:8a:8a:62:06:70:49:f4:ee:2d:ae:
                    bd:b8:50:0b:f4:22:eb:96:29:26:fe:85:88:ed:d5:
                    eb:98:54:45:02:37:0e:be:3d:6e:c5:45:f5:28:99:
                    50:b2:16:1d:e7:9a:af:9b:c2:12:57:49:6f:2a:c8:
                    b0:7f:83:ee:68:ce:46:3f:33:48:ef:3a:ac:88:85:
                    97:b2:93:a3:be:40:f0:f9:a6:09:cd:e1:21:ee:e7:
                    3d:fa:b1:c9:50:79:ad:ce:a8:40:73:9c:d6:2a:9b:
                    f8:ea:7e:a7:0e:e1:d6:34:e3:5b:59:b8:ec:7a:f8:
                    c1:da:86:28:ae:06:5d:4f:df:cf:81:ae:7b:41:ae:
                    82:16:c8:bf:ec:54:84:74:3c:79:d6:26:c2:04:ea:
                    aa:15:f3:01:f5:86:d3:09:7d:99:20:f9:78:f7:d8:
                    e7:06:39:19:54:66:ed:14:fb:ce:67:ec:03:2e:2e:
                    c4:90:81:9f:11:83:fb:15:b0:98:f0:22:3a:e6:ac:
                    a9:96:59:b5:fe:24:23:7c:29:01:5c:1f:cd:ef:00:
                    6b:65:e9:d6:36:eb:d5:ad:84:8e:66:d6:3f:0f:5c:
                    e4:a0:77:b3:08:83:7a:37:ca:38:06:6d:75:f8:7c:
                    5e:48:95:0d:5b:b8:77:49:1c:a0:bc:f2:df:23:2f:
                    b5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:37:3A:10:C2:E3:D0:88:89:4A:6E:79:E3:F8:4D:AA:7B:5F:57:A0
            X509v3 Authority Key Identifier:
                keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:52:53:02:f2:39:67:16:41:ae:f3:80:29:52:84:7f:80:64:
         c3:98:ce:45:68:bd:94:2c:0c:e7:3f:a3:4a:d0:1b:99:8b:9f:
         a3:50:dc:d5:93:df:41:b1:39:b2:68:c0:5f:41:18:0c:15:78:
         c0:4a:67:94:9c:ca:a5:7a:1f:ff:e3:a7:fd:95:57:31:5a:b9:
         9c:a8:c8:dd:ce:f3:34:4c:72:fb:47:f5:8d:37:76:f7:d2:be:
         ad:e9:b0:a2:b1:9d:ea:bb:8a:14:0e:9d:e9:a1:09:3c:a0:c6:
         b7:a9:bf:c9:b6:c1:8c:95:f7:31:ee:84:5f:08:50:56:28:4d:
         63:cc:21:6b:4d:81:06:46:28:3d:47:20:3c:30:6f:23:7f:d1:
         7d:31:1d:f3:ce:45:bd:c4:d7:1c:7c:0e:07:7c:63:23:2a:19:
         81:3d:10:7f:19:8c:4f:80:fd:ca:c2:96:69:38:ea:36:85:9d:
         38:90:56:cd:54:0e:74:b7:9c:69:e2:61:75:53:58:7e:aa:6a:
         00:65:4e:51:dd:44:ec:86:2e:85:ae:c7:c0:03:3e:7a:98:31:
         cc:88:c8:11:3e:17:ba:de:f1:e4:56:89:4d:ed:ec:e8:9f:14:
         97:29:88:f3:b4:ce:dc:32:ef:3e:6a:c2:12:72:0f:8f:90:14:
         70:af:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:31:12 2026 by rpki-client