Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
File:                     7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft (raw, json)
Hash identifier:          qX/q/ODzZ6GkgFkwUB1wEfHQO4lGzU1QP0mnF/sHJGY=
Subject key identifier:   01:90:80:25:5D:29:CC:81:2B:96:17:5D:22:18:45:36:40:20:74:63
Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
Certificate issuer:       /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
Manifest number:          01FC
Signing time:             Wed 07 Oct 2026 03:54:52 +0000
Manifest this update:     Wed 07 Oct 2026 03:54:52 +0000
Manifest next update:     Wed 14 Oct 2026 03:54:52 +0000
Files and hashes:         1: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl (hash: Q0Pbc3PMqN4/tyieo/oB/f7YIAuPqMs120ZKZSCtayo=)
                          2: B4D99056FF2511F0989D8DC686EE528E.roa (hash: GwR4iRma0Nze6OL0KHrzV9WuGTEfT7e6AyJxMF/LaGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
                          rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
        Validity
            Not Before: Oct  7 03:54:52 2026 GMT
            Not After : Oct 14 03:54:52 2026 GMT
        Subject: CN=6ac5c28c-7c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:81:2e:82:da:57:5d:5e:d6:95:a9:23:7a:
                    5b:8f:63:51:81:96:cc:d1:34:1b:06:61:d8:ec:43:
                    a9:18:1f:2e:d7:23:77:cd:cb:96:b3:81:d5:65:08:
                    75:63:d6:13:b0:05:96:ed:76:69:be:62:7c:08:73:
                    b5:7c:6a:d8:10:9a:32:be:82:58:c8:fb:9b:0e:37:
                    de:63:12:a3:fe:12:62:fd:7b:ac:aa:91:c5:6b:98:
                    ed:cd:01:d9:ca:87:17:20:09:23:b5:2d:2a:0e:99:
                    37:e8:83:32:04:5a:95:83:49:8a:03:a3:5e:5b:51:
                    08:ed:42:2e:dc:f4:1b:c8:86:b4:4b:b1:23:14:62:
                    33:76:c3:d3:5e:74:c6:cc:44:85:02:56:cf:32:55:
                    07:91:0a:0d:f2:2e:b4:75:e5:bb:a1:1d:88:41:25:
                    b9:a4:7d:18:41:35:92:6a:63:44:8b:c7:90:1b:d6:
                    60:b5:c2:38:23:50:f5:67:b7:17:c3:51:91:99:55:
                    47:50:cb:00:b9:57:68:93:9a:89:da:0c:0a:05:6c:
                    c9:48:74:be:88:58:e4:96:d5:b8:07:0f:d5:12:38:
                    4b:95:16:a6:27:88:76:cd:b4:4e:bf:01:17:48:ad:
                    6f:bd:00:10:2b:54:e4:ed:1c:74:a6:09:7b:21:a4:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:90:80:25:5D:29:CC:81:2B:96:17:5D:22:18:45:36:40:20:74:63
            X509v3 Authority Key Identifier:
                keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:60:69:c8:3a:c3:d1:30:b4:21:98:92:af:68:6b:c9:72:9f:
         f4:97:75:bd:03:77:b9:14:fe:11:6f:d4:d0:72:51:bb:50:41:
         15:88:0c:d6:35:56:c8:30:31:57:00:25:9c:65:0f:d1:2e:55:
         96:36:8b:46:08:14:25:08:4b:fe:06:fe:ed:0d:70:50:99:6e:
         6c:c5:07:ba:5a:8e:ae:90:4f:5e:73:1a:18:6b:d0:65:80:41:
         ff:26:c9:1b:a6:46:f3:41:a4:3c:a3:6d:a7:ff:a7:4a:86:74:
         37:9b:07:7a:a0:9f:d3:78:1f:b2:10:3d:a3:88:62:ab:96:9f:
         b3:60:e0:4c:3b:4b:0e:97:f5:21:73:fa:89:a8:a6:da:c9:7d:
         d0:6d:c6:c1:9c:72:4f:6a:42:2c:ff:92:d1:87:c7:4e:25:d7:
         36:f2:fc:38:89:fb:24:3b:d0:67:7f:ec:c2:40:63:69:4d:e3:
         51:f0:73:34:31:70:dd:1b:99:45:7e:b3:5e:cf:48:a0:2b:db:
         c7:bd:9b:ea:6c:ff:50:54:06:cd:35:db:09:3d:38:1d:b0:fc:
         05:04:6b:41:ca:1a:72:d2:07:ac:ce:5e:93:1a:37:4c:ee:57:
         dc:64:c9:98:34:23:1f:16:7a:87:e0:46:ff:ce:b3:1a:b9:6d:
         fc:6b:2d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:05:14 2026 by rpki-client