Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
File:                     7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json)
Hash identifier:          wmbeOvtIKHB8wzdqG9CAYOmF9H3xxI+4zWYszQR9pcg=
Subject key identifier:   F8:ED:79:87:A4:AE:0A:10:C3:B1:2A:2B:3B:0C:02:DD:94:BE:76:74
Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26
Certificate issuer:       /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26
Certificate serial:       04A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
Manifest number:          0498
Signing time:             Wed 21 Oct 2026 00:07:29 +0000
Manifest this update:     Wed 21 Oct 2026 00:07:28 +0000
Manifest next update:     Wed 28 Oct 2026 00:07:28 +0000
Files and hashes:         1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: 40eEBVt4ITfQX71/VxxM/P7Y02ATS/ugf08dm9nnAMg=)
                          2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: t3Xie5IDxeCZBCdmI9sHWzRfklnVyurzehxhGsRDsok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl
                          rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26
        Validity
            Not Before: Oct 21 00:07:28 2026 GMT
            Not After : Oct 28 00:07:28 2026 GMT
        Subject: CN=6ad80241-80e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bb:dd:cb:62:0f:80:08:64:6a:ca:ee:20:c1:
                    41:76:4f:18:2d:a7:8a:2e:d3:a1:07:02:37:a3:ed:
                    03:e6:50:24:9b:de:a9:24:3c:b2:6d:6b:b0:40:3a:
                    d3:0c:55:16:03:ad:75:42:67:09:be:62:aa:76:4d:
                    03:93:81:11:ab:1f:3b:6d:1b:d6:d2:58:49:d4:dd:
                    25:8d:c2:1c:8f:37:65:8a:d9:61:f4:35:03:1a:ed:
                    9d:28:55:4c:8f:b0:bc:07:c0:be:9b:e0:0e:6f:da:
                    ba:2d:96:1c:62:04:cb:c6:44:0d:8f:41:aa:ee:d7:
                    29:30:d5:57:0f:53:6c:7e:74:bc:d8:53:88:72:9c:
                    b1:61:c5:26:f8:98:3b:84:9e:5e:24:8c:ec:01:06:
                    be:9d:ac:63:66:c8:b5:c9:31:94:22:15:4c:39:23:
                    36:ba:01:0a:02:fc:2d:82:b6:c7:64:6e:2e:23:cf:
                    36:60:ab:a8:97:2e:30:b3:02:90:e0:b2:1f:8b:88:
                    51:ef:79:6b:d9:ab:b8:26:31:f9:6e:56:cc:61:20:
                    73:12:87:38:24:a2:c3:c2:ed:44:46:55:d4:62:68:
                    9a:5a:04:9e:a4:5b:1e:0c:4e:b0:d5:84:a2:32:40:
                    f9:b8:2c:31:36:da:0a:63:70:97:ac:2b:72:d1:90:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:ED:79:87:A4:AE:0A:10:C3:B1:2A:2B:3B:0C:02:DD:94:BE:76:74
            X509v3 Authority Key Identifier:
                keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:42:9b:4f:7e:fc:ef:7f:3f:53:c8:82:dd:03:de:5b:94:58:
         58:3f:56:61:a8:5d:9d:75:62:61:b9:c2:04:b1:35:1b:27:cd:
         1e:2e:d3:32:23:c0:3b:52:5e:65:2e:bd:08:f2:61:40:31:05:
         07:56:c6:02:20:7d:fe:d4:73:7b:e0:28:24:6b:ef:3b:16:df:
         2c:03:d4:ef:89:d2:3c:9d:79:33:78:17:dc:58:2b:49:61:9b:
         fe:82:1c:73:56:3b:0c:8c:a4:7c:68:52:0c:b7:3b:86:8b:f9:
         bf:7c:e0:91:a1:50:98:fa:67:be:07:93:fd:28:d1:ba:fa:6f:
         41:2a:7b:6b:7b:42:4d:5b:47:30:fd:70:66:02:14:f3:b8:ca:
         c2:f1:5d:40:9a:e8:8e:5a:f3:82:e6:b0:b2:f6:29:22:a6:88:
         40:0e:b7:e7:7c:ef:cb:68:7c:80:78:ff:1b:e0:46:3c:de:4c:
         16:83:30:95:7b:54:bb:94:fe:32:55:1a:91:29:b2:01:eb:f7:
         71:cc:42:52:e2:6c:8c:a0:71:82:f1:17:bb:92:9f:03:a7:71:
         48:ee:70:c1:9b:55:4a:f6:ed:dc:86:d5:78:ba:8a:d5:96:b5:
         71:70:e0:cc:ff:b0:80:6d:67:d7:fc:e8:c5:23:ab:66:8c:6b:
         ab:10:55:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:41 2026 by rpki-client