Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File:                     vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier:          nppJ6E8tTJZRve/AsXp3fZIINJ+JBvZe/GKHerminXU=
Subject key identifier:   E0:92:DB:6B:B3:22:81:14:81:80:CA:C1:05:A6:7D:9F:1A:6F:67:FC
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer:       /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number:          A7
Signing time:             Fri 09 Oct 2026 07:59:09 +0000
Manifest this update:     Fri 09 Oct 2026 07:59:08 +0000
Manifest next update:     Fri 16 Oct 2026 07:59:08 +0000
Files and hashes:         1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: fZxpeUEyXQBzJtE/q8ObwyS5Tvhx0pysJEVmSdiC+MI=)
                          2: F30027F69C9011F1893698345711F970.roa (hash: D+j1sM6eCYVgN9wCNM0rcIbl0hAUaUHWwy+gzdAQe8o=)
                          3: A32543BA9BEB11F190BD09186411F970.roa (hash: 9WaHx+LUDXVMm3BI2K4FD2A1kDHdB0yt3Gwu4DhlqgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
                          rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
        Validity
            Not Before: Oct  9 07:59:08 2026 GMT
            Not After : Oct 16 07:59:08 2026 GMT
        Subject: CN=6ac89ecd-61e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:38:da:d9:c8:dc:42:69:4b:0e:b9:01:80:
                    37:df:89:84:6b:2c:4e:5a:23:1e:ac:c9:48:a6:3a:
                    dc:11:55:22:f4:ee:7d:ab:a2:a5:d6:08:8c:e3:c1:
                    e0:2f:57:45:bb:e0:c4:19:ce:7f:80:f4:04:69:cc:
                    b2:f4:f1:79:da:95:39:0a:98:d2:5a:81:e0:c3:47:
                    40:b8:5e:26:f4:ad:01:e7:21:f8:02:12:5a:53:f9:
                    72:34:48:d7:18:28:9a:d6:ea:42:82:18:b8:0e:93:
                    78:06:ff:7f:fd:02:24:46:53:2d:4d:ef:de:90:da:
                    fd:71:f9:8b:59:3b:e9:9f:88:b0:f9:f5:40:33:c6:
                    4b:56:16:68:47:8f:34:00:2f:7b:14:9d:ef:21:2c:
                    95:fa:66:da:39:ad:25:5b:6c:6b:19:8a:90:a8:a5:
                    16:01:ca:b5:bd:8d:2f:75:e2:3d:ba:99:18:b1:5f:
                    f9:bb:ca:7a:9e:5e:1a:ce:8f:67:e0:b0:9c:1c:a6:
                    45:37:9e:19:0e:8f:5a:7f:b6:41:34:ae:87:97:31:
                    b7:04:07:a4:c5:eb:e7:85:79:34:7d:e3:54:8d:4a:
                    85:20:7f:97:58:42:03:e7:07:dd:8e:67:fb:f5:f5:
                    23:5a:aa:db:14:3b:45:3d:87:5d:4f:09:3b:05:2e:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:92:DB:6B:B3:22:81:14:81:80:CA:C1:05:A6:7D:9F:1A:6F:67:FC
            X509v3 Authority Key Identifier:
                keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:eb:34:b5:2c:04:54:a9:fc:6c:c4:48:8c:a6:30:22:99:69:
         47:b8:af:ea:34:93:1b:8b:f3:b3:48:8d:44:90:86:00:f8:52:
         37:df:0b:d0:ae:3f:14:0f:26:9d:d9:91:f4:99:36:76:0b:10:
         ac:a4:b5:c9:df:3c:84:85:84:e3:a1:4e:2a:23:37:0b:93:1c:
         93:77:bc:82:63:49:6f:4a:fc:1f:d7:15:78:1b:84:f8:34:34:
         dd:2b:83:dc:ec:c0:97:5b:12:72:0e:18:b0:97:bd:8f:da:67:
         4f:89:0d:6d:56:42:02:e0:91:3f:3a:67:e6:8f:3f:c4:69:71:
         2b:ac:e1:a5:55:e0:75:30:ed:7d:32:24:8b:ef:7a:d2:a2:c6:
         ac:43:06:20:27:41:8c:f5:cb:be:d4:e9:e9:62:ef:64:1a:54:
         ba:c9:69:e9:06:cd:14:10:91:ab:dc:62:12:4f:f0:a5:58:79:
         9e:7b:67:16:56:8e:73:5b:b7:6a:93:7b:04:fe:77:bb:b0:9f:
         f7:44:ee:bf:c5:ce:f5:cf:31:2e:d1:a2:43:ff:7e:c9:74:cf:
         a9:f0:02:4c:fa:3e:ef:3b:a7:72:e4:06:68:3a:c1:b9:6a:a9:
         09:e7:28:83:3e:dd:6f:01:93:9b:44:84:f1:5d:9a:76:1e:56:
         d9:5f:08:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:36:58 2026 by rpki-client