Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
File:                     7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft (raw, json)
Hash identifier:          YN3CHbWW1Q+89aZN5LG64mJb0ZDF2cTyL7cPJmLV4eM=
Subject key identifier:   0B:48:37:67:BE:77:BC:F3:F9:CF:E2:14:A8:48:95:52:02:DC:A6:BC
Authority key identifier: EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
Certificate issuer:       /CN=A91A45C3/serialNumber=EEC1462457141B83FD3DFC25896A76023DE84739
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
Manifest number:          63
Signing time:             Wed 14 Oct 2026 23:04:51 +0000
Manifest this update:     Wed 14 Oct 2026 23:04:51 +0000
Manifest next update:     Wed 21 Oct 2026 23:04:51 +0000
Files and hashes:         1: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl (hash: 4xCA/XnQaJcr/XGJQEn6o8Py7e7GQXCu47P8SIkZO2g=)
                          2: 2FC19BF83D4F11F19A601DD5A5833773.roa (hash: 56GdB+plmjNwHg70SCuUFxrfa+TUalszBHQ17pYd9is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl
                          rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 23:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A45C3, serialNumber=EEC1462457141B83FD3DFC25896A76023DE84739
        Validity
            Not Before: Oct 14 23:04:51 2026 GMT
            Not After : Oct 21 23:04:51 2026 GMT
        Subject: CN=6ad00a93-d76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e7:31:1e:2f:6b:00:e7:61:3c:92:73:00:4a:
                    68:fc:fe:04:b3:ef:b4:e2:70:c3:51:9b:5d:a9:06:
                    57:2a:02:88:d8:d3:6d:ae:87:c4:3f:36:8d:69:b9:
                    a2:48:bf:33:26:ca:c3:4a:4e:4b:56:9e:ac:99:d2:
                    50:fc:1d:cb:ad:59:d9:53:1c:7e:61:a0:7c:40:7f:
                    74:c5:42:aa:ad:a5:8c:6f:9c:3f:e2:23:08:06:dc:
                    e9:7a:1b:a3:c5:ad:17:68:ec:96:7c:12:8a:39:7c:
                    bf:1f:51:d6:04:e2:08:e0:f5:68:ad:e2:cc:77:1a:
                    0e:ce:0e:46:19:98:36:c8:24:47:29:f2:cb:df:f1:
                    a3:87:0a:5d:2e:06:f0:ab:46:57:6f:7f:06:46:7a:
                    54:c0:33:2b:3c:d8:9b:d9:45:30:98:32:ef:53:f5:
                    70:f4:ac:33:bf:29:b1:fc:14:79:09:a2:2b:80:f4:
                    be:af:4b:2f:62:ae:fe:25:4f:49:bf:9b:9a:cd:31:
                    25:35:c3:25:dd:fd:35:bc:a8:24:0b:9d:8e:43:c1:
                    2c:35:79:a5:5a:0e:d3:6b:c6:34:7e:6a:f6:5a:2b:
                    82:8c:4c:a4:09:f8:02:0a:df:7b:5f:96:68:b3:05:
                    2d:ad:28:a6:ea:e7:63:3b:89:0a:d1:12:54:dd:c3:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:48:37:67:BE:77:BC:F3:F9:CF:E2:14:A8:48:95:52:02:DC:A6:BC
            X509v3 Authority Key Identifier:
                keyid:EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ef:8b:dc:6b:aa:42:c0:45:50:df:32:37:76:cf:a5:0b:d2:
         38:88:65:6a:a2:c8:c4:33:15:4e:4e:2c:87:83:14:64:d7:ca:
         5f:95:e4:60:93:80:80:24:7e:fd:26:42:d2:31:05:c3:5a:97:
         c0:13:64:79:db:99:c9:8e:04:c2:0e:07:af:85:1f:d8:cf:34:
         25:44:98:89:28:6f:a0:20:02:9c:b2:58:82:af:f4:0e:c2:e1:
         4b:4a:1e:77:50:4c:3e:0d:ff:cd:8d:fa:94:42:ab:5b:e6:4a:
         58:52:46:d2:53:bd:dc:48:4d:9a:09:0c:99:3b:96:9e:d0:d7:
         c5:e3:a1:b8:56:01:d7:d9:5e:7b:e5:c2:5f:cb:c5:72:55:90:
         d9:ee:5d:8b:6c:5f:09:6e:6d:c2:b1:ce:c6:d3:20:b0:d4:23:
         f1:57:69:60:c3:f5:c2:8b:b3:69:92:dd:43:54:2c:ea:6a:65:
         b1:7f:36:06:aa:0a:41:6c:93:6b:00:f6:48:fd:e3:74:6a:2b:
         a7:e7:24:25:f6:90:37:eb:6f:ea:d4:a0:40:ae:7b:cb:d2:66:
         6b:1b:31:63:78:ee:57:15:fd:95:7c:de:8f:3d:63:02:c6:62:
         0c:35:20:e7:29:06:01:0c:63:35:1a:a9:08:c9:39:ae:4f:46:
         6d:6d:19:a2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NDVDMzExMC8GA1UEBRMoRUVDMTQ2MjQ1NzE0MUI4M0ZEM0RGQzI1ODk2QTc2MDIz
REU4NDczOTAeFw0yNjEwMTQyMzA0NTFaFw0yNjEwMjEyMzA0NTFaMBgxFjAUBgNV
BAMTDTZhZDAwYTkzLWQ3NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD25zEeL2sA52E8knMASmj8/gSz77TicMNRm12pBlcqAojY022uh8Q/No1puaJI
vzMmysNKTktWnqyZ0lD8HcutWdlTHH5hoHxAf3TFQqqtpYxvnD/iIwgG3Ol6G6PF
rRdo7JZ8Eoo5fL8fUdYE4gjg9Wit4sx3Gg7ODkYZmDbIJEcp8svf8aOHCl0uBvCr
RldvfwZGelTAMys82JvZRTCYMu9T9XD0rDO/KbH8FHkJoiuA9L6vSy9irv4lT0m/
m5rNMSU1wyXd/TW8qCQLnY5DwSw1eaVaDtNrxjR+avZaK4KMTKQJ+AIK33tflmiz
BS2tKKbq52M7iQrRElTdw7/5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC0g3Z753
vPP5z+IUqEiVUgLcprwwHwYDVR0jBBgwFoAU7sFGJFcUG4P9PfwliWp2Aj3oRzkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NUMzL0REMEEzRkUyMzdB
RDExRjFBQURDQTYzNEI3ODMzNzczLzdzRkdKRmNVRzRQOVBmd2xpV3AyQWozb1J6
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvN3NGR0pGY1VHNFA5UGZ3bGlXcDJBajNvUnprLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0
NUMzL0REMEEzRkUyMzdBRDExRjFBQURDQTYzNEI3ODMzNzczLzdzRkdKRmNVRzRQ
OVBmd2xpV3AyQWozb1J6ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAh74vca6pCwEVQ3zI3ds+lC9I4iGVqosjEMxVOTiyHgxRk18pfleRgk4CAJH79
JkLSMQXDWpfAE2R525nJjgTCDgevhR/YzzQlRJiJKG+gIAKcsliCr/QOwuFLSh53
UEw+Df/NjfqUQqtb5kpYUkbSU73cSE2aCQyZO5ae0NfF46G4VgHX2V575cJfy8Vy
VZDZ7l2LbF8Jbm3Csc7G0yCw1CPxV2lgw/XCi7Npkt1DVCzqamWxfzYGqgpBbJNr
APZI/eN0aiun5yQl9pA362/q1KBArnvL0mZrGzFjeO5XFf2VfN6PPWMCxmIMNSDn
KQYBDGM1GqkIyTmuT0ZtbRmi
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:55:50 2026 by rpki-client