Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
File:                     C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json)
Hash identifier:          kQcSnLvhbI/nnlDxl5P98pQvskwV1LqJWu4u0rdiPHA=
Subject key identifier:   71:77:C8:D0:F7:EF:A5:F0:6B:19:EF:92:40:31:E1:7C:68:64:78:BF
Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B
Certificate issuer:       /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
Certificate serial:       1BF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
Manifest number:          1BEE
Signing time:             Thu 08 Oct 2026 16:16:09 +0000
Manifest this update:     Thu 08 Oct 2026 16:16:08 +0000
Manifest next update:     Thu 15 Oct 2026 16:16:08 +0000
Files and hashes:         1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: 4pvTbgmo2UOCF+3DVAiDXmwGFlT2Y4mchYoD+0HA340=)
                          2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: N8G4/01RtsnK/5wYFg/W/SRO8tkHccnmITaVaX2WxsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl
                          rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7160 (0x1bf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
        Validity
            Not Before: Oct  8 16:16:08 2026 GMT
            Not After : Oct 15 16:16:08 2026 GMT
        Subject: CN=6ac7c1c9-131e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:e6:5c:10:e1:eb:d9:ec:62:65:a1:6b:8a:
                    65:ce:bf:48:80:eb:21:1b:bd:a1:f8:a8:26:a4:9f:
                    67:d8:39:37:b5:ad:83:a4:98:e8:19:63:67:08:51:
                    01:72:6e:53:e9:8b:1f:13:ef:dd:60:eb:d4:32:98:
                    da:f2:b6:e3:ba:bc:45:18:2f:f8:ae:f3:41:f2:99:
                    b7:cf:f7:c1:70:3d:53:d2:c7:f8:36:d8:81:d9:3a:
                    71:85:56:78:fd:b4:ee:e9:13:dd:08:c9:73:98:da:
                    05:6d:d2:ea:6e:fc:4b:07:d9:a9:ac:b3:4b:88:66:
                    ca:71:bf:3b:01:b1:ef:b0:6e:ce:4e:89:59:92:8b:
                    cf:91:89:13:c5:10:15:87:c6:ef:2b:2a:a8:81:b8:
                    92:3b:f8:28:6a:06:0e:09:8e:af:85:bc:64:20:82:
                    ba:26:f5:42:fb:f2:7f:84:b6:38:c1:83:e5:d6:95:
                    12:a9:1a:50:02:95:3f:60:3e:18:bf:f9:31:66:bd:
                    f0:e0:db:d7:2f:34:8c:42:01:0e:39:72:ca:d7:66:
                    f6:bd:eb:96:45:21:66:17:cc:d6:63:5f:d8:6f:96:
                    dd:2e:31:52:48:7a:52:ad:37:cb:fc:33:dd:ea:69:
                    67:1d:e3:1f:ee:0b:24:1a:4f:06:13:90:49:9e:59:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:77:C8:D0:F7:EF:A5:F0:6B:19:EF:92:40:31:E1:7C:68:64:78:BF
            X509v3 Authority Key Identifier:
                keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:06:93:9c:0b:15:8c:2f:dc:bd:00:4f:21:71:c6:30:ec:47:
         9d:47:44:fe:97:f4:dd:3e:78:0b:86:85:a1:dd:87:11:ad:02:
         42:88:a2:99:14:d2:1c:cc:4d:71:7d:d3:4f:e8:34:7c:75:09:
         41:23:c7:26:7a:26:99:19:5a:11:1c:2a:70:4a:58:b4:7d:0e:
         83:68:ff:14:9d:51:9c:16:70:03:d2:bf:ae:77:16:63:28:b5:
         91:75:60:e1:2e:cb:17:df:e5:72:17:7a:7a:39:b7:d6:da:b3:
         98:4c:e5:c5:52:78:13:77:ef:47:d4:2f:4a:04:d7:0f:13:97:
         6e:79:19:06:7d:8a:92:df:dd:df:a7:7e:dd:30:2b:0a:35:92:
         48:e3:b0:ca:dc:fb:d0:c5:db:a5:d6:1b:7d:ed:a7:ed:d9:ae:
         a3:1d:5f:97:78:93:13:d4:d7:59:8a:e5:71:78:c3:14:61:78:
         68:ab:d4:7a:a1:ce:47:72:b8:65:04:10:82:48:63:1e:c7:2c:
         23:0f:d6:9b:f1:f4:41:dd:63:f3:c2:9c:06:c3:80:3b:e5:ec:
         6c:ac:28:a8:70:f2:46:53:14:c7:0f:b7:61:c6:bd:62:14:dd:
         03:c2:cf:18:d1:97:f4:3a:5f:be:df:67:5c:d8:1c:5d:c0:ca:
         04:d5:36:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:54:39 2026 by rpki-client