Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
File:                     7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json)
Hash identifier:          FfW1V27NLxfY6cMobY7DwS68OqRRVJ2TU9VE43abA0k=
Subject key identifier:   2F:9D:8E:8D:5D:9C:B5:9C:DA:35:1B:FE:FC:75:78:86:CC:5F:5B:FC
Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
Certificate issuer:       /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Certificate serial:       3581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
Manifest number:          41BD
Signing time:             Sun 04 Oct 2026 14:48:56 +0000
Manifest this update:     Sun 04 Oct 2026 14:48:56 +0000
Manifest next update:     Sun 11 Oct 2026 14:48:56 +0000
Files and hashes:         1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: cOLN2ZBaBIGDHXS6kox4uUHA699Q1RcwKRoGAyiJ7MQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13697 (0x3581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AAA, serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
        Validity
            Not Before: Oct  4 14:48:56 2026 GMT
            Not After : Oct 11 14:48:56 2026 GMT
        Subject: CN=6ac26758-fe7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:cb:8b:82:35:b0:19:e8:74:f2:f6:37:03:
                    37:58:b4:d6:93:15:b9:8d:43:1f:bd:a7:f4:38:60:
                    8c:69:0a:d1:55:96:f8:7c:4f:a0:56:51:d3:f0:10:
                    12:29:5a:26:ec:14:fc:2a:3b:2a:f5:4d:9d:79:4a:
                    ca:3c:9c:dd:6d:17:5f:57:be:81:63:07:f8:28:d0:
                    d1:63:08:ed:f6:fb:fe:98:bc:ad:2c:b2:ac:e9:60:
                    e8:7c:78:1f:6e:30:8d:a9:dc:fd:ab:1d:15:e9:ff:
                    7a:f9:d8:ec:65:25:3e:66:64:13:69:c4:04:91:97:
                    59:ae:83:6b:87:ca:6f:15:f2:26:e1:c4:15:c2:2f:
                    7e:ef:f3:58:02:f7:36:f8:0d:00:37:9d:98:8b:d0:
                    a7:a1:62:55:40:19:46:38:c8:30:5d:13:37:59:0d:
                    b7:0c:6b:1a:20:6b:00:1e:ae:c1:04:6d:ce:09:38:
                    85:e5:27:82:c5:b0:76:a4:84:82:5b:37:b1:78:fb:
                    77:2a:60:67:f7:74:37:d6:e2:7b:53:34:bf:b0:6b:
                    f0:21:2f:2e:71:c5:29:45:05:6a:42:e3:39:e2:2a:
                    92:c8:27:70:db:ee:e9:f7:31:94:41:a7:2e:ab:45:
                    2c:f2:66:63:f2:64:ad:9e:73:46:2c:26:ee:3c:ef:
                    bd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9D:8E:8D:5D:9C:B5:9C:DA:35:1B:FE:FC:75:78:86:CC:5F:5B:FC
            X509v3 Authority Key Identifier:
                keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c8:98:f4:15:91:d1:ed:05:2a:13:b4:05:60:1d:85:1a:78:
         89:80:6f:22:41:17:0c:b3:4a:52:f9:f4:53:12:fc:e4:ee:6b:
         99:1a:e0:cd:85:65:d1:14:5b:91:98:c7:b0:02:ff:0c:f0:dc:
         8f:93:53:f4:3f:b2:f6:4b:06:4d:45:4c:ee:ec:6d:30:b0:7e:
         83:5d:3e:af:51:fe:ae:11:5c:81:82:6d:54:6f:77:1d:07:57:
         27:64:32:40:16:0b:95:3b:71:e8:41:9f:a1:b3:64:8e:ed:41:
         33:0f:71:31:e3:0e:3d:b8:a9:65:e3:3a:e2:51:a2:6c:02:aa:
         84:fd:b2:b2:9f:b2:89:44:53:03:30:b8:bf:93:a7:15:e6:8c:
         53:04:a4:8f:8e:26:9f:c2:85:f3:f0:bf:57:45:22:a8:32:71:
         4e:1b:2b:3e:6f:41:d0:5a:ff:c7:6e:cf:e1:4a:38:af:75:b7:
         2d:90:cc:2a:f0:8b:9b:ab:70:09:ef:85:8c:af:d0:ac:3d:6a:
         78:13:70:0f:6e:89:03:7c:20:6e:49:98:58:57:e0:17:d6:bd:
         0e:d0:b7:57:b9:79:78:87:bd:ad:9a:21:63:a0:44:2a:d7:9d:
         bb:d9:54:84:fb:70:66:1a:1f:25:e5:3d:df:34:e6:3b:46:6d:
         2c:0d:eb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:53:58 2026 by rpki-client