Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft
File:                     k7syr5RSXBgud_LY1OlpfwxV878.mft (raw, json)
Hash identifier:          WJtSRFnz2zRPcX7C+RBsV2VLLfFR9MFGYfJJlnRWPXo=
Subject key identifier:   AA:B9:5B:85:7E:7A:5B:99:30:CA:13:0E:5F:4F:60:DA:67:A3:C1:66
Authority key identifier: 93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF
Certificate issuer:       /CN=A919E9A8/serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft
Manifest number:          73
Signing time:             Fri 09 Oct 2026 08:47:38 +0000
Manifest this update:     Fri 09 Oct 2026 08:47:38 +0000
Manifest next update:     Fri 16 Oct 2026 08:47:38 +0000
Files and hashes:         1: k7syr5RSXBgud_LY1OlpfwxV878.crl (hash: tN9wukKhCq9VEPnFv+QORTOxxby6c1A/VRRZXHa6x00=)
                          2: 23C2AF26267111F19CC61B4CAD833773.roa (hash: 96OHm5flKtG3HpGx8qNjs1cZoYkHYYW1WQFro4+87nk=)
                          3: F8CCE69E4AC211F1A90B2018BE833773.roa (hash: 79BYdkvq5bS9mDWQTdLlbtNHqVcunGlY+ZixDMob81o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A8, serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF
        Validity
            Not Before: Oct  9 08:47:38 2026 GMT
            Not After : Oct 16 08:47:38 2026 GMT
        Subject: CN=6ac8aa2a-6482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:53:01:36:e6:07:c8:36:69:57:a1:db:c1:
                    e5:ce:c1:c8:79:31:69:cd:91:1c:41:0d:b5:de:4c:
                    bb:97:7c:d8:c5:83:ac:ca:75:d1:3d:90:2d:50:18:
                    09:fc:d4:2f:af:b2:56:37:c2:58:1c:99:ba:cb:2c:
                    05:4c:6f:26:08:7f:36:53:d9:12:c3:df:76:e6:97:
                    5a:c5:a2:3e:25:57:1a:69:56:cf:56:ac:2f:96:28:
                    b0:bc:38:55:64:44:95:72:07:e5:b3:b1:5f:7c:d4:
                    82:f3:8d:86:32:0a:02:1a:36:6f:5e:8b:2b:e8:3a:
                    ca:a9:ef:cf:b2:ab:b4:14:0d:4e:ad:3f:7f:26:b7:
                    fb:52:0d:46:f1:7d:eb:0e:1f:a9:54:29:ab:5a:5e:
                    16:74:e2:0d:6d:5a:bb:2d:90:c0:bc:4f:8e:5c:b3:
                    0a:cb:d5:2f:12:66:2b:bb:28:ab:37:88:5c:bd:05:
                    07:64:de:4e:6d:4b:69:5b:4a:cd:83:6f:86:c1:46:
                    c9:b5:2a:1d:84:17:c1:a3:c4:3b:41:dc:f5:72:b9:
                    ec:07:00:e9:51:34:c6:90:bc:5f:90:2a:ee:72:6a:
                    76:5d:19:e6:9e:d1:46:86:cb:99:7f:78:dc:75:f3:
                    e2:8d:1c:5a:cd:66:e5:f3:a4:fb:14:42:0f:f4:94:
                    80:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B9:5B:85:7E:7A:5B:99:30:CA:13:0E:5F:4F:60:DA:67:A3:C1:66
            X509v3 Authority Key Identifier:
                keyid:93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:9e:83:8a:6c:15:b6:b1:8a:58:68:8a:a9:ec:e7:b4:47:38:
         32:78:f0:a3:4f:29:84:83:e9:1b:20:91:7a:51:84:7d:bc:7c:
         e1:a6:84:4a:42:83:a6:a4:c1:c9:b1:06:a1:d4:75:bc:81:96:
         97:45:62:0c:eb:b9:a0:ed:7b:d8:bb:1d:ed:5a:08:9d:74:54:
         13:3b:9b:e4:aa:df:5c:a5:79:8b:15:2e:5b:66:09:79:df:b5:
         e6:0f:0f:ea:ab:81:36:9b:7d:53:7e:dd:96:b5:9c:1a:06:fb:
         17:2f:6f:01:79:08:65:0f:82:db:56:fd:f1:ed:15:cb:29:18:
         86:54:cb:25:15:a8:46:81:5e:d9:59:e9:6f:39:16:6a:80:1a:
         54:0f:e1:32:55:d8:5e:91:f9:2f:7d:b4:3f:28:e1:1b:df:34:
         26:5a:94:24:a6:a8:4b:c1:57:b0:e0:a3:ad:78:be:b4:63:b2:
         b5:0e:56:5b:a3:a5:dc:3c:97:1a:7f:84:3d:6e:ba:f4:cc:ad:
         9b:e1:cc:7d:d3:55:9a:8b:b5:8b:1c:b5:71:9e:41:dd:37:8b:
         9a:4a:36:ab:20:b5:9b:c9:6e:17:9a:67:50:2d:e1:c4:70:38:
         a8:45:96:97:36:04:a4:24:b2:05:69:64:6d:a2:90:94:9c:79:
         5a:52:9c:f4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RTlBODExMC8GA1UEBRMoOTNCQjMyQUY5NDUyNUMxODJFNzdGMkQ4RDRFOTY5N0Yw
QzU1RjNCRjAeFw0yNjEwMDkwODQ3MzhaFw0yNjEwMTYwODQ3MzhaMBgxFjAUBgNV
BAMTDTZhYzhhYTJhLTY0ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA31MBNuYHyDZpV6HbweXOwch5MWnNkRxBDbXeTLuXfNjFg6zKddE9kC1QGAn8
1C+vslY3wlgcmbrLLAVMbyYIfzZT2RLD33bml1rFoj4lVxppVs9WrC+WKLC8OFVk
RJVyB+WzsV981ILzjYYyCgIaNm9eiyvoOsqp78+yq7QUDU6tP38mt/tSDUbxfesO
H6lUKataXhZ04g1tWrstkMC8T45cswrL1S8SZiu7KKs3iFy9BQdk3k5tS2lbSs2D
b4bBRsm1Kh2EF8GjxDtB3PVyuewHAOlRNMaQvF+QKu5yanZdGeae0UaGy5l/eNx1
8+KNHFrNZuXzpPsUQg/0lIBPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqrlbhX56
W5kwyhMOX09g2mejwWYwHwYDVR0jBBgwFoAUk7syr5RSXBgud/LY1OlpfwxV878w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFOUE4L0RDQzA5MDY2MjY3
MDExRjE4OTM3OTgwRUFEODMzNzczL2s3c3lyNVJTWEJndWRfTFkxT2xwZnd4Vjg3
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvazdzeXI1UlNYQmd1ZF9MWTFPbHBmd3hWODc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF
OUE4L0RDQzA5MDY2MjY3MDExRjE4OTM3OTgwRUFEODMzNzczL2s3c3lyNVJTWEJn
dWRfTFkxT2xwZnd4Vjg3OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDLnoOKbBW2sYpYaIqp7Oe0RzgyePCjTymEg+kbIJF6UYR9vHzhpoRKQoOmpMHJ
sQah1HW8gZaXRWIM67mg7XvYux3tWgiddFQTO5vkqt9cpXmLFS5bZgl537XmDw/q
q4E2m31Tft2WtZwaBvsXL28BeQhlD4LbVv3x7RXLKRiGVMslFahGgV7ZWelvORZq
gBpUD+EyVdhekfkvfbQ/KOEb3zQmWpQkpqhLwVew4KOteL60Y7K1DlZbo6XcPJca
f4Q9brr0zK2b4cx901Wai7WLHLVxnkHdN4uaSjarILWbyW4XmmdQLeHEcDioRZaX
NgSkJLIFaWRtopCUnHlaUpz0
-----END CERTIFICATE-----
Generated at Fri Oct 9 22:48:48 2026 by rpki-client