Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft
File:                     7aMYBt32MRYZlAFDVqvUcsHvFQM.mft (raw, json)
Hash identifier:          u1Zyw18rC5N5BS4WlYtSP60VVW/Jv5fZ/oe++iXRg/k=
Subject key identifier:   17:F5:6A:7F:F4:5E:73:8D:90:12:6C:D3:A0:E9:0E:F1:4C:07:EE:43
Authority key identifier: ED:A3:18:06:DD:F6:31:16:19:94:01:43:56:AB:D4:72:C1:EF:15:03
Certificate issuer:       /CN=A9188C27/serialNumber=EDA31806DDF631161994014356ABD472C1EF1503
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft
Manifest number:          49
Signing time:             Sun 11 Oct 2026 09:03:16 +0000
Manifest this update:     Sun 11 Oct 2026 09:03:15 +0000
Manifest next update:     Sun 18 Oct 2026 09:03:15 +0000
Files and hashes:         1: 7aMYBt32MRYZlAFDVqvUcsHvFQM.crl (hash: xpSRgMmnZ7TNp7QMMM2edNijkP2Up3YvzCOaj1Qb4gE=)
                          2: B4F9B59C58A911F195C2275394833773.roa (hash: 00zQFkHzvRJ0Tkas9ws+/6cP+I3mCAoiRqheMA8N5Rw=)
                          3: B465F6F458A911F195C2275394833773.roa (hash: 7J7HWBgRI5TcWW6EV3w1h0niHwGS6gn8uT2QiuEPBlM=)
                          4: B3E67F5A58A911F195C2275394833773.roa (hash: CSpUTF1QwSjwcMC66CAo2WdtWbS27jom8RoK7EKSEnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.crl
                          rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188C27, serialNumber=EDA31806DDF631161994014356ABD472C1EF1503
        Validity
            Not Before: Oct 11 09:03:15 2026 GMT
            Not After : Oct 18 09:03:15 2026 GMT
        Subject: CN=6acb50d4-be7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:73:f9:96:28:8d:bc:36:8e:12:01:00:85:
                    2d:aa:6e:39:09:2a:a4:31:67:43:df:6a:7e:5e:c3:
                    c6:cc:a8:f0:ac:7a:95:74:71:a3:88:53:fa:7c:9d:
                    a8:81:8b:fc:08:17:f3:1f:e8:88:ea:8a:28:4a:5e:
                    51:7d:8e:0d:b9:78:04:60:8f:a6:b1:30:ef:f6:da:
                    81:d0:15:67:94:47:48:e4:d6:d4:35:e4:27:4d:83:
                    97:60:94:34:e5:ad:fc:b0:1e:92:a1:4b:ad:d6:3e:
                    85:30:c4:87:c1:5f:0c:53:05:50:15:23:2f:8b:6c:
                    1d:aa:92:ee:3d:55:c1:32:ef:86:76:60:5e:b6:a2:
                    8b:b9:59:32:2d:fb:83:76:7c:75:0a:ec:41:1e:10:
                    b9:be:c4:5c:14:0f:a5:80:51:c3:c3:e0:a1:1c:7b:
                    76:84:8e:23:a2:fc:76:7f:59:58:6e:58:a6:20:eb:
                    55:a7:21:56:6b:cb:77:b9:95:4b:b9:7d:c3:97:89:
                    c6:a9:ec:6a:d8:6f:ea:9b:98:d1:15:45:08:0f:89:
                    82:7e:40:86:8f:10:86:8a:cd:f8:70:81:b8:5f:24:
                    d3:08:b1:9e:29:3d:3a:73:31:d8:32:94:bf:8a:98:
                    3f:42:39:21:b6:09:90:dc:9b:98:d9:8d:63:ab:f3:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F5:6A:7F:F4:5E:73:8D:90:12:6C:D3:A0:E9:0E:F1:4C:07:EE:43
            X509v3 Authority Key Identifier:
                keyid:ED:A3:18:06:DD:F6:31:16:19:94:01:43:56:AB:D4:72:C1:EF:15:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:f7:10:71:f5:29:54:ac:7b:fe:1e:ce:76:94:bc:db:3c:
         e7:6b:6d:01:90:ec:ab:78:99:ff:01:e0:fc:89:6e:f7:7a:a2:
         88:d9:ce:7d:e4:29:b5:eb:f5:19:42:70:ff:51:db:44:62:82:
         b2:06:e6:28:56:87:2f:53:df:de:8b:14:13:3c:b4:3d:64:d3:
         e5:d0:b9:f7:40:61:61:4a:73:df:4d:a7:91:8e:93:e7:06:d6:
         06:92:f4:b7:b3:4e:66:1e:e4:7d:7c:36:0e:fd:41:77:ec:36:
         4e:88:03:bd:e4:23:6d:8f:ee:3a:2a:09:f2:79:27:ab:96:78:
         48:6f:be:c3:b9:f2:f7:fe:ef:5e:41:cd:5d:bc:ca:36:d2:ae:
         cb:3a:4f:4a:ae:1e:69:87:a5:19:79:8a:78:c8:13:7c:62:d6:
         0b:a6:ce:93:d9:8b:10:8d:4c:ac:ab:53:4e:a2:f6:28:29:99:
         70:8c:b5:b9:31:0d:c1:91:a2:a7:e7:e0:19:d3:b3:72:66:a6:
         49:aa:3f:c9:e3:b3:dd:cf:42:17:f6:fa:43:bb:5a:2a:cc:ac:
         4e:84:8e:8c:9d:3b:36:5e:fa:0d:31:08:8d:8e:48:10:5a:06:
         ba:1b:0f:b4:35:12:8b:f4:99:05:54:3f:12:be:8b:cb:6a:95:
         eb:9f:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:19:15 2026 by rpki-client