Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
File:                     7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json)
Hash identifier:          XU7M5eWhougk4QG1cvx+7b71v/F9/lFJ698T7BnyTzk=
Subject key identifier:   01:36:58:DC:9D:BA:2C:78:A8:83:D8:D8:97:A7:44:4D:43:94:06:6D
Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
Certificate issuer:       /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
Manifest number:          010C
Signing time:             Sat 03 Oct 2026 06:47:00 +0000
Manifest this update:     Sat 03 Oct 2026 06:46:59 +0000
Manifest next update:     Sat 10 Oct 2026 06:46:59 +0000
Files and hashes:         1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: CiN3TLB/SSrl/uPDVyJ5ulBHBFQsO7eR7EyVUYStEGo=)
                          2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: wZY9Z53hRF1cqshdzTDBoy+lSHOx94QEX/gy6wO+8wM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
        Validity
            Not Before: Oct  3 06:46:59 2026 GMT
            Not After : Oct 10 06:46:59 2026 GMT
        Subject: CN=6ac0a4e4-aba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:d0:19:87:0d:57:e3:45:54:65:ee:75:7d:
                    dd:2e:56:fc:2d:f5:4f:32:9c:e0:ca:ee:28:6f:90:
                    fa:6a:f3:7b:a2:4c:39:9d:44:bb:59:f5:b7:e5:c3:
                    95:7c:fc:d9:c8:ee:94:5d:0c:28:7a:db:aa:e6:f0:
                    3f:c8:ed:3a:58:01:ca:20:eb:f4:8e:c1:53:32:be:
                    f2:a3:92:b6:5b:d6:ba:20:15:aa:c0:99:0e:36:a9:
                    39:c0:31:ab:d8:2c:38:96:20:54:9e:db:ba:16:e3:
                    5d:ed:56:ef:53:4f:df:5b:6f:51:7d:ce:0d:2b:9e:
                    06:0d:25:49:ef:2f:7b:e1:b2:76:df:1e:7a:04:74:
                    2d:eb:d3:58:30:e4:bd:50:19:70:13:e0:18:9b:f0:
                    10:ab:dd:5d:fa:5f:3a:ee:b6:67:ec:32:ee:21:09:
                    3d:dc:65:44:1e:ff:b0:b2:18:b9:7a:88:fb:82:62:
                    2f:f0:73:f4:1e:0f:f6:66:5e:b2:0c:06:10:32:f9:
                    9d:ff:77:4e:86:92:2d:bd:cf:3c:92:5e:a6:99:04:
                    13:46:80:94:62:6d:e7:07:97:b3:3c:59:6e:ee:45:
                    07:41:1c:32:81:4d:85:31:51:e2:b3:0f:74:a5:f6:
                    3c:e9:c9:fe:8b:b7:dc:be:17:3b:ef:1d:b4:03:12:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:36:58:DC:9D:BA:2C:78:A8:83:D8:D8:97:A7:44:4D:43:94:06:6D
            X509v3 Authority Key Identifier:
                keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7d:02:42:6b:eb:67:3b:e2:95:a5:f1:65:12:f7:bb:e1:4c:
         53:bb:11:dd:04:a2:aa:9c:4c:71:28:60:72:2c:56:29:76:ee:
         0d:7a:d6:8a:ab:03:83:c1:8c:8e:21:05:c6:ae:36:28:09:51:
         3c:b1:f0:15:38:a8:cb:bf:89:a3:55:1c:fb:4c:09:1a:e0:c9:
         e4:e6:5d:09:47:41:98:e3:7e:f3:dd:8a:24:13:20:e8:09:fa:
         52:b5:4a:c0:a3:38:ea:6d:c6:d6:da:2a:71:0f:4c:d4:a1:a9:
         73:d0:3f:4e:17:be:6c:84:1a:ed:bc:0a:ae:51:be:e5:2a:7a:
         e9:2c:9b:4a:28:b6:35:4a:13:13:aa:1d:dc:53:55:e1:a6:cf:
         3d:bf:4c:e0:1a:ef:6d:7c:ce:98:45:b3:31:3f:09:b8:66:10:
         70:06:5c:a5:5b:a2:74:00:d0:33:31:5b:f9:69:54:ca:8a:89:
         a2:df:f7:2a:91:d7:d5:8f:e8:1c:da:6b:a0:17:a5:4f:43:19:
         14:05:88:44:b6:98:1b:c2:71:e4:97:ab:84:d4:15:5b:f1:ee:
         be:9b:55:93:57:83:df:d4:1c:b8:8e:c9:cb:ff:03:18:87:30:
         98:33:7d:f6:50:72:d1:ce:6b:f0:e1:36:41:f2:f3:09:8d:cd:
         6c:de:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:13 2026 by rpki-client