Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
File:                     PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json)
Hash identifier:          6MenPdUDDnmEqFf6sq91WmrfiOQiumQzosTV3BnirGk=
Subject key identifier:   BB:2D:0D:C2:F1:93:FF:CC:A5:96:0D:6B:93:62:70:C0:71:A1:62:D4
Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
Certificate issuer:       /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Certificate serial:       0C1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
Manifest number:          0C0D
Signing time:             Sat 10 Oct 2026 18:56:38 +0000
Manifest this update:     Sat 10 Oct 2026 18:56:37 +0000
Manifest next update:     Sat 17 Oct 2026 18:56:37 +0000
Files and hashes:         1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: VurZmkCCXdIpA4R/KbaNY8ZLXOyp0A52u/Mk3KEjdqI=)
                          2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: 31dQK67wiYiy5G3Mr5Z9I8W/2zQAHp6VfQMF8EbdjCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
                          rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3100 (0xc1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
        Validity
            Not Before: Oct 10 18:56:37 2026 GMT
            Not After : Oct 17 18:56:37 2026 GMT
        Subject: CN=6aca8a66-e003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:3b:d6:70:07:31:bd:05:59:02:e5:4a:53:
                    5d:6d:5c:08:a4:df:03:5b:74:21:e3:fc:2c:52:76:
                    80:32:c4:f4:fd:13:fb:2a:8e:39:6f:99:8b:82:90:
                    1f:a5:fe:51:3e:a5:24:47:49:65:b5:bc:19:f2:9d:
                    17:81:8b:96:ff:42:1b:83:76:ee:90:a9:48:fe:76:
                    dc:ff:15:22:ae:87:d6:30:f2:40:f9:52:db:93:89:
                    52:8a:77:05:47:e4:0c:ab:60:1e:e4:47:0e:71:6a:
                    53:59:c7:67:e7:45:d3:5b:47:1a:d1:65:c5:a1:e2:
                    0f:46:26:7e:79:78:2e:25:0f:61:d4:5c:98:23:69:
                    8d:a2:a7:6f:36:d9:1a:39:89:6c:49:bf:11:07:f1:
                    df:55:b0:7c:44:08:8d:bc:d6:94:a4:ec:f8:5c:13:
                    32:fc:0a:2b:e7:50:cf:d2:41:35:fd:2f:43:7c:c7:
                    83:5b:93:6a:83:1d:f8:eb:36:c0:eb:ae:75:ad:f7:
                    78:d1:ab:70:8c:46:d7:35:c9:5f:a1:25:13:ee:1d:
                    60:3f:85:ce:b2:0a:51:df:3e:74:04:bb:81:f2:bc:
                    2d:67:23:59:19:6c:76:c0:21:2b:b4:f8:79:94:0f:
                    41:f6:7f:c4:0a:d7:86:27:d4:8d:2d:fd:62:48:5d:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2D:0D:C2:F1:93:FF:CC:A5:96:0D:6B:93:62:70:C0:71:A1:62:D4
            X509v3 Authority Key Identifier:
                keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a8:04:3d:80:e5:7c:2f:e9:f9:eb:a4:95:84:d9:3f:67:17:
         57:26:ea:fb:7d:82:a6:00:34:e6:33:fa:0e:4b:ec:43:77:33:
         65:4b:f0:9f:e7:8d:75:43:90:84:41:31:e3:ba:37:c5:e8:38:
         06:a8:b8:71:de:6b:57:2f:51:76:f0:74:de:2f:f0:6a:7e:c8:
         99:49:59:2d:86:e8:29:c6:72:f0:c4:e9:28:3e:e1:1c:a0:8d:
         ee:97:45:e9:e3:c1:60:2a:65:81:ed:2b:a6:48:3f:2d:4b:89:
         54:86:bd:25:bf:d9:55:9d:79:1a:a7:8a:5e:8c:fb:ba:85:01:
         b3:87:4e:b8:66:52:f4:6c:1b:70:d2:f8:50:88:93:62:1b:4a:
         c1:e0:32:ba:d3:60:34:f8:59:95:d1:4c:6a:75:f0:dd:c2:44:
         b7:4a:c8:4b:41:9a:fb:f9:b6:46:c8:1a:f9:7d:9a:19:fc:73:
         9c:7b:5a:2f:09:dd:88:d0:61:e4:a6:75:5b:57:2a:f5:fa:f1:
         df:8d:d9:de:84:04:39:e6:64:5a:66:5f:da:2a:95:1f:4f:75:
         3d:2c:ff:59:cd:60:0e:ec:86:e0:76:d6:ae:a1:d6:3d:f9:9c:
         32:46:c3:fa:b4:ad:d9:55:c3:74:ce:d8:b7:4f:0e:24:a7:77:
         b1:eb:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:13:03 2026 by rpki-client