Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File:                     7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier:          2erreVCD0sbJ7BzsQIkAXZG0F7N8vulUrA9mKrqmF/M=
Subject key identifier:   21:1D:AC:D4:90:1C:BF:90:83:8F:DA:C0:FD:EA:3C:29:D7:51:E6:D5
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       03CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number:          03A3
Signing time:             Wed 09 Sep 2026 00:45:30 +0000
Manifest this update:     Wed 09 Sep 2026 00:45:29 +0000
Manifest next update:     Wed 16 Sep 2026 00:45:29 +0000
Files and hashes:         1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: PLv6JomKI23LvS8I9hfKD+pDEo/ZT5nAa/W66xi9lXo=)
                          2: 8BB438729C5311F19090C9214211F970.roa (hash: 4P3QCMBtXIARu2oRAALfV+4dtZEhy98vYnb2SXz40aM=)
                          3: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 3rz3y2F3aVzj5O9phACfchAMbGqJwRa3oLDOUx3l7LI=)
                          4: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: IT6sjqgyeU7yL3F+eCEVuRIF5QZib/FjkDzd9+imaPw=)
                          5: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: igM78oSfeB942BNkl42YqKy+vOSBmm/qF44KEq3SfEc=)
                          6: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: ZWhBeU6y3g8qTKiuOtQLL6VcfczNqvmkhr8Yqi5VXlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
                          rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973 (0x3cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Sep  9 00:45:29 2026 GMT
            Not After : Sep 16 00:45:29 2026 GMT
        Subject: CN=6aa0ac2a-5ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:c9:e6:53:9d:72:8a:7a:80:87:c8:4b:1f:
                    dc:ce:79:d8:14:20:36:54:14:5d:82:53:81:94:29:
                    57:a1:c5:75:96:af:b0:4e:8f:20:f0:96:54:5f:31:
                    a3:7b:14:15:6b:b9:d6:c2:83:8e:2a:60:17:33:11:
                    6f:26:d3:7f:bd:a9:8b:2d:f1:9e:a1:3f:14:6e:55:
                    c1:b8:11:47:4b:73:95:7c:79:aa:f2:7e:56:1e:20:
                    c7:90:51:8e:ca:dc:40:57:e6:b7:e8:05:66:d8:9b:
                    a3:29:8e:d3:36:60:b6:43:95:c1:81:23:6f:bf:24:
                    f3:45:e5:b5:f1:ee:50:22:55:59:ab:74:f3:c0:33:
                    40:51:e5:0e:de:d5:28:b7:fa:b7:45:ea:59:89:17:
                    cc:64:1b:b1:bb:8d:f1:ff:9f:7f:a1:d8:fd:a9:9a:
                    d1:7d:81:b2:77:6e:b9:13:d7:b0:c1:8a:e3:ad:c1:
                    0b:36:6f:7f:23:27:e8:4b:3b:4b:c4:bf:b3:49:fd:
                    6f:dd:06:04:bf:ef:8a:db:2b:c7:58:20:f6:6a:4f:
                    ed:78:e3:20:70:13:14:ac:75:5c:f8:47:61:0e:10:
                    b5:fe:80:68:ee:8c:44:5b:6d:fc:d3:cb:0e:7a:e6:
                    0e:de:51:4f:ce:5e:f3:64:03:0d:76:66:f7:ac:0c:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:AC:D4:90:1C:BF:90:83:8F:DA:C0:FD:EA:3C:29:D7:51:E6:D5
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:af:ed:e7:96:be:cc:9b:78:af:ee:35:78:cc:98:72:f6:a9:
         aa:44:0c:c9:35:ab:8e:d4:a2:bb:d1:72:28:6c:fc:41:b4:b9:
         aa:87:24:c8:03:4a:8d:b7:de:d6:7d:44:ea:1e:4c:43:fe:7b:
         4c:03:34:5c:27:e9:e8:52:e2:fd:f3:f8:1d:dd:99:24:6b:58:
         0a:c0:d3:4e:53:d7:90:d1:34:e1:30:bd:e2:f5:9d:5b:9d:eb:
         51:94:ce:4d:a1:b1:cd:eb:a7:70:4e:63:73:ee:6b:9f:77:f0:
         93:2b:a1:d9:cb:68:c4:6e:b2:f2:f7:55:69:b6:cb:ee:9a:85:
         94:e0:b7:90:e2:55:05:50:ba:55:48:1a:9b:69:21:67:cf:c7:
         f9:17:43:6c:21:98:f8:8d:91:f7:ce:4c:9f:b3:23:11:92:59:
         e9:9b:97:5e:7b:ae:54:2a:cb:42:67:44:3d:73:c1:82:e0:9e:
         db:26:9d:a7:7e:c5:04:b2:29:18:13:49:4d:ec:8a:af:81:fe:
         4d:bb:fb:dd:b8:79:c8:4d:db:15:7c:96:7f:0b:cb:7f:7e:88:
         42:33:27:51:86:47:b7:72:11:44:ba:4b:ff:80:91:5f:a1:11:
         d8:2a:a8:75:bc:1b:0c:f3:9a:8f:3b:cb:2f:e4:1f:e6:ef:73:
         4d:e8:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:15:13 2026 by rpki-client