Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
File:                     cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json)
Hash identifier:          WJ59kJD9ETOL88YBcvaCV/mIpi8jzveApPzCVGuhkIU=
Subject key identifier:   11:35:2B:A1:9D:59:13:A8:27:C5:3F:4A:C1:8D:2B:9E:10:7B:51:AE
Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01
Certificate issuer:       /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
Manifest number:          79
Signing time:             Fri 23 Oct 2026 08:21:57 +0000
Manifest this update:     Fri 23 Oct 2026 08:21:57 +0000
Manifest next update:     Fri 30 Oct 2026 08:21:57 +0000
Files and hashes:         1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: ZmcuPYyzizLe+V6Yxe3rNHJKb+O+rmCpk6QqN1rWlQc=)
                          2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl
                          rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 08:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01
        Validity
            Not Before: Oct 23 08:21:57 2026 GMT
            Not After : Oct 30 08:21:57 2026 GMT
        Subject: CN=6adb1925-e41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:e3:73:6a:f5:05:ed:20:f9:a0:4e:b2:0d:
                    62:b6:4c:dc:8c:6b:40:60:5f:51:73:b0:28:07:c9:
                    35:66:7c:3a:f7:57:47:5c:41:8e:b9:6e:fb:ae:da:
                    de:b9:bd:73:09:cc:4a:20:9c:f9:38:c2:f4:c5:8d:
                    80:51:60:fe:50:fc:51:57:88:0c:49:a3:26:4a:7e:
                    f0:f7:83:b6:86:84:12:f6:16:cf:a4:f4:5e:21:28:
                    40:ef:4c:04:41:06:3c:e8:0a:78:d7:ed:78:e1:5a:
                    33:92:be:52:9c:8f:40:15:7b:55:36:b0:cf:f0:71:
                    a8:62:d8:07:bc:8a:36:a3:71:90:58:d3:c7:96:e3:
                    ff:b4:ee:b3:0d:be:c1:58:3b:0e:d0:82:48:01:8d:
                    07:e8:55:08:f9:3a:22:6b:08:81:6e:5c:12:5f:bd:
                    69:45:98:f6:c5:e5:69:1d:c7:be:8f:b3:6c:f3:ab:
                    74:7e:36:5f:91:5e:09:6e:64:55:e4:78:b6:dd:0e:
                    0c:aa:bd:f3:db:28:12:dd:96:d2:c5:a3:bb:41:98:
                    d8:f6:2d:ae:b1:ff:af:74:33:8d:ac:85:e0:0b:a8:
                    9f:b3:b8:31:87:98:ac:35:70:ab:2c:c9:10:f6:ca:
                    b2:ff:f8:2a:62:c2:48:7e:33:97:7f:05:7a:68:49:
                    9b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:35:2B:A1:9D:59:13:A8:27:C5:3F:4A:C1:8D:2B:9E:10:7B:51:AE
            X509v3 Authority Key Identifier:
                keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:19:47:ec:e7:ae:67:01:b0:cf:ba:2b:e8:e9:94:44:96:42:
         58:ff:b0:37:3f:8f:0c:6f:81:c7:74:c6:86:26:47:4e:ee:35:
         59:a2:c4:b2:f9:73:95:25:5d:45:bb:34:54:b9:a2:27:28:dd:
         1e:8e:6c:95:31:8c:8f:a6:51:d9:97:6f:4b:e7:5e:58:39:4c:
         c2:3b:50:ef:f8:9c:9e:67:3f:7f:12:bc:5d:7f:54:b5:08:c8:
         46:92:d7:45:ee:10:b5:96:57:43:f7:50:1b:a8:0d:b1:18:e7:
         d7:e9:0a:38:44:53:71:b5:96:b5:87:d0:ee:82:bf:98:b8:5d:
         ae:66:9a:9a:76:ed:a5:40:5a:db:63:b5:99:81:81:ce:96:98:
         df:25:39:f6:62:a4:ba:4f:a5:27:bc:f5:43:c0:2d:5a:58:68:
         95:61:c2:e9:6e:40:e8:d8:e9:04:ee:54:3e:f9:2b:ed:33:ca:
         1c:e9:15:31:d1:ae:e8:76:4d:49:78:a6:7e:25:d6:50:c8:a5:
         c0:a2:e4:c4:a4:ac:ac:bf:02:8d:00:2a:47:13:b2:0a:98:9b:
         19:11:05:9e:bd:75:41:af:ea:5e:c0:8f:4c:ff:97:33:59:cf:
         65:f7:b1:dc:1f:67:45:d7:f0:c2:79:b1:cb:f4:95:11:cf:e2:
         7b:41:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:30 2026 by rpki-client