Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File:                     7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier:          J4BPaInJHzTCUQppNb5zkBeY0LbNwwiH4PZYuiXx/Rc=
Subject key identifier:   2F:9C:44:5F:50:5C:BE:F8:76:D5:31:19:51:2A:78:15:E6:6D:C6:C7
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer:       /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number:          0148
Signing time:             Sat 03 Oct 2026 06:00:30 +0000
Manifest this update:     Sat 03 Oct 2026 06:00:30 +0000
Manifest next update:     Sat 10 Oct 2026 06:00:30 +0000
Files and hashes:         1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: bs1Vcn/IGq1qY6sia1BvXDwrI6w0JOKqmLyTrrMEsDg=)
                          2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: zNeCIz79QyLjKaLa6KZk2f88rwvGe93u3cvB8Yfkn+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
        Validity
            Not Before: Oct  3 06:00:30 2026 GMT
            Not After : Oct 10 06:00:30 2026 GMT
        Subject: CN=6ac099fe-0c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:00:6c:07:65:ed:33:37:07:40:97:33:ff:
                    5d:d7:23:f1:dc:14:29:d5:e5:da:76:44:45:17:4e:
                    ca:e9:25:84:89:ea:3d:be:2b:cb:00:56:8a:1d:58:
                    70:5f:b9:1e:50:7d:17:ad:e5:13:a1:e0:d9:76:96:
                    ad:36:46:9b:69:2f:88:1e:e0:b3:04:1d:f9:7d:e1:
                    95:5a:43:00:81:3d:de:31:ed:01:28:95:c1:dc:e2:
                    5d:cf:dd:b6:03:2d:01:a0:b6:f8:2d:d3:37:3f:71:
                    a7:82:c9:60:a3:76:ce:d1:40:5e:83:34:df:30:f0:
                    64:6e:64:26:7a:be:0b:95:b2:69:f3:ac:c6:36:8d:
                    b8:56:a5:60:b3:f7:44:ce:88:17:d3:0b:0d:7a:8b:
                    3d:51:ef:f3:74:3b:c9:0a:9c:7c:c4:79:0a:28:7d:
                    02:32:96:4d:51:8e:91:70:5c:b9:c3:8c:35:72:ec:
                    17:77:c0:7d:5c:6a:6c:a0:dd:d2:57:4e:e4:8e:7c:
                    95:f4:ce:9a:15:1b:40:82:ce:19:11:6e:d5:01:64:
                    d0:7c:ff:72:7a:f9:07:7c:ea:61:36:48:5a:f1:66:
                    58:ab:e1:d0:2c:0c:0f:b5:f3:c0:de:80:fc:d1:53:
                    38:ff:90:a3:91:d0:90:16:da:de:d4:79:ab:b1:e9:
                    4c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9C:44:5F:50:5C:BE:F8:76:D5:31:19:51:2A:78:15:E6:6D:C6:C7
            X509v3 Authority Key Identifier:
                keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ab:8f:22:ff:ac:3c:b7:cf:2e:79:8c:62:b6:79:60:50:8c:
         d2:24:2e:0f:69:4b:25:6c:a0:9f:7a:c7:6b:d4:cf:f2:2f:3b:
         a3:09:ad:ad:a0:83:7b:02:ea:df:4c:f7:78:32:f1:b3:b4:84:
         61:17:bf:28:d1:d5:bc:fc:7d:5c:e9:f0:b3:84:7b:d2:17:56:
         4b:64:62:22:77:d8:db:65:21:cf:35:3e:66:c7:88:fa:37:fb:
         2d:61:35:0b:0c:28:ec:6b:26:70:73:e0:ad:b2:e8:51:29:d4:
         29:7a:a5:16:37:0a:fc:f4:ec:a5:bc:dd:1b:65:c1:8d:e8:b4:
         f7:47:5a:3f:15:bf:b8:d4:32:fa:e4:25:1c:fb:ab:ff:10:53:
         27:0b:65:dc:90:9f:30:ce:a7:da:68:cb:7a:45:c5:90:57:1b:
         32:3d:98:df:81:fa:1a:b1:ed:26:e6:a4:74:31:78:c2:ec:ac:
         0f:c4:af:27:1c:e8:99:c9:f2:36:47:be:ee:66:f9:7e:90:49:
         03:73:18:8b:55:27:72:3f:da:8d:1b:37:21:2b:3d:92:52:41:
         49:03:2e:f9:13:e1:45:fc:a1:2e:da:83:65:63:de:79:1b:8d:
         6e:a6:cd:b5:e5:73:a0:8b:8f:c9:5d:4c:7e:d7:c3:b3:bf:5d:
         6f:39:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:01:13 2026 by rpki-client