Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          8vfStSdRbPJ8ztX1zai0IaITITcL8UKILnvIRet90uw=
Subject key identifier:   F8:50:E3:F5:90:B2:4D:47:DB:61:3D:85:F9:FB:64:71:48:66:4B:14
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       02DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          02D3
Signing time:             Sun 11 Oct 2026 01:37:04 +0000
Manifest this update:     Sun 11 Oct 2026 01:37:03 +0000
Manifest next update:     Sun 18 Oct 2026 01:37:03 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: Q6lshpoS4ArqlXu3a2baHKM/HrjDu8XUixt6WV5YyGY=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 01:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Oct 11 01:37:03 2026 GMT
            Not After : Oct 18 01:37:03 2026 GMT
        Subject: CN=6acae840-e1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:0c:55:9d:af:b8:3d:28:85:b0:27:ac:4c:
                    b2:68:ff:dc:c0:90:b7:b6:f1:b6:ab:d7:18:d1:4a:
                    d2:db:5d:cc:38:e6:b4:74:d2:d5:b8:6c:65:d1:29:
                    60:4d:3c:49:69:75:c4:54:76:09:de:62:0d:50:62:
                    78:f5:30:9f:23:b8:0c:ab:bf:39:ad:30:04:ee:7c:
                    dc:30:24:20:41:eb:c3:7f:40:15:7f:90:53:1e:52:
                    5f:64:87:cb:0a:03:88:e0:08:e7:f6:23:ae:a7:db:
                    db:ae:b0:5b:2a:10:83:35:f5:8e:8b:db:df:71:1a:
                    08:05:49:5d:98:99:cf:7b:02:f7:ed:1f:ff:d0:83:
                    1a:e8:d8:1c:61:28:05:a0:0c:a3:99:c3:67:99:6d:
                    47:f8:76:46:1d:66:49:b9:61:72:02:2a:af:24:86:
                    36:7f:ab:a6:23:25:48:4f:18:f1:1b:b5:a9:70:52:
                    75:f2:8e:89:98:e0:03:db:4d:e1:12:bb:da:fd:d1:
                    75:51:1b:07:0a:e0:2a:65:55:78:bd:e4:58:2f:84:
                    c9:1c:e2:f7:96:70:51:6d:ed:37:a4:33:a5:73:cc:
                    1e:56:35:ca:9e:56:73:5d:b6:c3:eb:b1:f3:68:32:
                    e7:9c:8f:e9:77:fc:d5:59:96:56:50:57:6e:06:72:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:50:E3:F5:90:B2:4D:47:DB:61:3D:85:F9:FB:64:71:48:66:4B:14
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:dc:28:9a:2a:3c:3f:3a:df:4d:f3:cc:66:4a:7d:9c:cd:50:
         d8:0d:46:59:55:e6:d1:4b:a9:c3:05:7b:e6:aa:bb:5e:44:57:
         69:d2:7e:a9:34:64:2c:a9:37:fd:9c:c1:95:0e:b1:5c:3f:4a:
         9f:a6:56:f3:23:b1:ca:60:c9:58:d6:76:20:4f:4d:fd:f5:1c:
         36:49:93:00:e4:6d:f7:da:ac:9d:ed:87:e3:96:89:21:ba:99:
         d8:2d:9f:33:a6:a1:df:9c:fa:6a:6d:d8:99:72:33:d0:db:7f:
         87:d8:36:49:75:08:4b:dd:84:2b:c5:78:ff:2f:92:13:e2:83:
         0c:bd:00:10:91:b5:e2:d7:eb:4c:e9:20:6e:98:b7:bd:6e:21:
         b3:d5:8a:63:2f:ee:61:2e:8b:6b:d3:80:22:4e:45:33:38:8a:
         ba:d2:a9:d4:06:3e:ee:48:b8:1b:b1:c9:1e:f8:c7:c6:19:14:
         b5:22:dd:8c:99:c2:76:0a:13:a7:9f:6f:fb:bc:21:bc:02:51:
         d0:cb:9c:f3:f7:9b:bf:a9:e2:17:e0:a3:0b:ea:d6:39:c2:d9:
         1c:d4:03:18:8e:17:2b:67:08:a5:57:83:23:a4:9f:39:8c:49:
         f3:13:f6:5c:63:ce:27:c7:9c:51:58:9a:46:6d:72:6e:e3:e7:
         e2:f7:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:22:00 2026 by rpki-client