Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
File:                     z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json)
Hash identifier:          WciRJ8mZoH2TP0pZ2MqCTSrVtMZL/fTmELN4blwPymw=
Subject key identifier:   67:84:C5:5C:CB:A5:6F:68:13:AC:C0:12:4A:25:D9:9F:EA:8B:11:F7
Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
Certificate issuer:       /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
Manifest number:          0195
Signing time:             Sun 11 Oct 2026 04:57:27 +0000
Manifest this update:     Sun 11 Oct 2026 04:57:26 +0000
Manifest next update:     Sun 18 Oct 2026 04:57:26 +0000
Files and hashes:         1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: wo+NOB0lwfmnQ1eTCL9nUavESEe7jVPSPjA6sGK4lbM=)
                          2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: Q8f/qW78UATDJkOYAmyqIeNWlz0nJt0VKruL/5wxjAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
                          rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
        Validity
            Not Before: Oct 11 04:57:26 2026 GMT
            Not After : Oct 18 04:57:26 2026 GMT
        Subject: CN=6acb1737-53a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:9a:b0:23:30:62:13:67:3d:22:2c:7c:5c:
                    15:6e:2c:49:89:d1:3a:26:a6:a1:d8:69:a9:89:66:
                    6b:2f:05:c7:e9:3a:27:fd:99:d3:60:6e:84:6d:bd:
                    61:c2:74:06:7b:88:a0:5f:09:d1:d4:17:47:e6:18:
                    0b:d3:d5:8c:87:ab:e7:ca:3c:fb:9a:50:ed:61:d5:
                    3b:ca:31:1f:61:69:c3:26:37:c0:70:dc:09:db:7a:
                    2e:bc:09:34:ec:b3:ad:43:36:28:b0:c5:61:41:08:
                    5e:27:f3:8e:b6:9f:4e:8d:02:e9:8d:0d:27:d1:44:
                    e9:e2:35:ca:b7:8d:f2:ba:a3:ae:2e:1e:5d:ac:03:
                    37:dc:14:3c:34:b4:e4:45:f9:73:74:53:72:67:e2:
                    4d:bc:04:f2:c2:70:a4:04:54:e5:25:d5:8a:1d:b5:
                    78:3f:9b:af:65:e4:52:c0:01:d8:85:54:b5:ed:df:
                    40:b9:a0:56:e8:20:56:10:f4:ac:94:84:80:3e:25:
                    57:5a:18:44:ef:19:35:b0:c8:20:fe:0d:c4:04:13:
                    3b:45:98:2d:08:a0:ab:f0:9e:eb:0b:b2:c4:73:7f:
                    14:27:1c:c8:eb:24:17:01:01:09:23:a5:2a:ef:cf:
                    f1:ec:d9:e4:37:cc:da:0e:38:e9:04:87:8b:7b:3a:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:84:C5:5C:CB:A5:6F:68:13:AC:C0:12:4A:25:D9:9F:EA:8B:11:F7
            X509v3 Authority Key Identifier:
                keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:69:76:b6:16:cb:4c:05:d9:6d:ea:9c:79:2c:80:96:5b:4a:
         dd:06:2b:02:f0:ed:e0:6d:35:c2:a6:93:56:c6:4b:0f:b3:31:
         c7:98:0e:91:5c:75:08:69:9c:7b:71:e7:58:31:d9:8a:df:59:
         39:95:af:af:1f:c5:01:a1:b2:a7:09:19:0e:c0:fa:74:8c:cd:
         70:f4:58:2c:33:33:94:b9:63:4b:92:86:1f:aa:9f:43:88:e6:
         db:aa:af:da:f7:0c:c2:e1:b1:41:a4:8e:5e:47:31:44:d4:5a:
         c6:cf:94:6a:4f:f8:4a:bc:53:24:18:31:89:65:b0:f6:63:b7:
         c3:ae:14:8d:62:2d:ac:06:95:3a:2c:51:3b:9e:2e:55:92:3d:
         ef:77:84:a2:af:7a:39:22:ca:6b:68:ab:75:61:f9:a8:59:8a:
         30:c2:43:8f:b2:b6:b9:15:c6:52:b7:cc:1d:4e:9e:62:82:ff:
         0b:f3:2f:bf:ef:60:4c:f4:e5:ad:9f:09:d7:47:9c:f2:0b:fb:
         61:ca:e0:98:7f:a6:52:1a:3c:58:f4:53:98:7c:7d:80:b3:d2:
         9d:b0:23:dd:a3:76:43:97:ed:70:8a:5b:50:ad:f3:1f:1e:65:
         ef:7f:66:81:06:20:5c:d7:1d:18:67:56:bc:e3:0f:24:c8:2b:
         0c:fc:1b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:10:51 2026 by rpki-client