Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
File:                     u7dF5o0mJdldbQcyKFARSry-_wQ.mft (raw, json)
Hash identifier:          dDgGNDlz7aF2NBZVpBh7JT5uyT8bkCFZh2k/cSsSe8o=
Subject key identifier:   3E:6E:A1:39:A3:AA:99:31:A7:77:92:A8:58:F3:00:24:A0:DD:FB:0A
Authority key identifier: BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04
Certificate issuer:       /CN=A9168F50/serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
Manifest number:          A4
Signing time:             Fri 09 Oct 2026 07:56:10 +0000
Manifest this update:     Fri 09 Oct 2026 07:56:10 +0000
Manifest next update:     Fri 16 Oct 2026 07:56:10 +0000
Files and hashes:         1: u7dF5o0mJdldbQcyKFARSry-_wQ.crl (hash: Mcd1Qq5NJKJUvP/nf1Umu/9vMrmcbr9rl//oWlznvZg=)
                          2: 8FD832B4C9B311F0BC2AD366C4F9AE02.roa (hash: cQJLuCSOM+o2aUzG2mT2OZwzOyveUbTM2bM6yH/VclY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl
                          rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168F50, serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
        Validity
            Not Before: Oct  9 07:56:10 2026 GMT
            Not After : Oct 16 07:56:10 2026 GMT
        Subject: CN=6ac89e1a-2dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:6b:d0:37:93:f4:41:52:e0:71:c5:51:c4:
                    bf:b3:ce:59:84:57:d8:6a:60:1d:e4:a7:81:53:db:
                    02:aa:ba:39:39:a5:19:8a:db:e0:b0:50:12:8b:6f:
                    81:79:6f:04:23:3d:80:0a:2d:3c:2f:60:cc:2f:c7:
                    62:43:58:80:24:d9:b6:5f:01:67:83:b9:85:8e:ec:
                    23:17:aa:77:25:55:af:06:bb:f2:11:94:a3:e9:f0:
                    88:f8:ef:a5:a1:89:09:e2:41:a4:b5:99:c5:d0:11:
                    26:e3:e4:61:46:97:66:51:11:1e:79:33:31:48:6b:
                    77:c4:93:f3:52:be:3f:53:26:ec:25:be:ad:af:a3:
                    50:19:d7:f1:7c:f3:dd:2c:43:04:76:b1:3a:27:1f:
                    e9:51:17:ed:f0:5c:a6:e4:f2:57:fb:2e:8e:fb:bc:
                    fa:1d:31:79:5a:ec:95:89:a6:3d:bd:b3:09:73:07:
                    a8:44:06:45:3b:98:a4:7c:bc:62:27:5d:d5:78:28:
                    24:04:c6:29:82:12:87:82:9a:d8:bf:e4:2c:8b:a4:
                    21:a3:12:fb:f0:6f:c3:3b:c0:f0:0c:5f:8e:fb:1d:
                    7f:ed:fe:bc:61:b4:5b:05:d8:09:23:53:cb:95:b4:
                    01:bc:f3:dc:26:14:aa:35:4c:bd:32:e4:3d:5d:4b:
                    26:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6E:A1:39:A3:AA:99:31:A7:77:92:A8:58:F3:00:24:A0:DD:FB:0A
            X509v3 Authority Key Identifier:
                keyid:BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:27:d1:48:1b:ea:64:c8:3a:82:c0:ea:08:b8:41:e2:2c:98:
         40:07:95:75:8c:6a:9d:29:65:ca:a0:ca:95:f9:04:a2:7e:30:
         56:b4:de:8d:7a:25:fb:9c:7c:44:c2:48:19:0c:d3:b8:85:17:
         60:7b:bd:11:5d:21:0e:05:c4:2d:03:27:8e:c8:06:6e:bc:70:
         4b:62:e0:52:d8:50:77:9d:43:3b:6e:b0:25:5c:15:da:ed:1a:
         a7:d0:2e:f8:dd:2e:84:b2:e0:e4:8d:52:3a:3c:15:14:bc:dc:
         11:03:66:c7:6d:c8:f7:53:1b:25:d8:27:b7:d5:73:60:63:3a:
         56:84:f8:17:3f:19:81:5c:37:c3:bf:f1:3c:5c:b9:e4:90:06:
         b7:26:d0:0d:30:80:f5:89:45:3b:99:9b:56:f1:8f:15:7f:86:
         91:22:5a:85:80:e3:25:2c:06:cf:ff:73:a2:ed:6c:d6:9c:80:
         35:5a:16:43:f3:2f:dd:07:56:4e:88:e1:fe:9e:1d:e8:ce:9b:
         65:65:d6:0c:0b:5f:06:e1:7f:4b:42:2c:3c:0c:db:33:d6:d5:
         03:57:98:3a:2b:e9:c4:e9:49:06:71:dc:43:65:1b:8d:c8:de:
         28:83:2a:23:78:2b:a6:80:df:4a:1b:31:2d:8f:e0:9e:f3:84:
         6c:9c:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:34:30 2026 by rpki-client