Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
File:                     r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json)
Hash identifier:          coSeYBL3FxMMzgqzsFqawkL3Hs6DquimTk3Z/36tJTE=
Subject key identifier:   CC:0C:70:D8:A6:60:EC:C3:9B:5A:C6:37:66:95:CF:3A:3E:B3:D1:50
Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
Certificate issuer:       /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
Manifest number:          01CA
Signing time:             Thu 23 Jul 2026 05:09:12 +0000
Manifest this update:     Thu 23 Jul 2026 05:09:11 +0000
Manifest next update:     Thu 30 Jul 2026 05:09:11 +0000
Files and hashes:         1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: p5pn57kU5p0LbLkXIkqa6uZIguHcXwS8Djk2RwbCiwA=)
                          2: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: SJ1zAtwuUDoklbt6R8JhcX6A+HkMTpxPrsLu4rdoP7E=)
                          3: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: YLQu+XBkP0u4scPVL2HjSFkhwvlDsdMdNxwXV2B40qg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
                          rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
        Validity
            Not Before: Jul 23 05:09:11 2026 GMT
            Not After : Jul 30 05:09:11 2026 GMT
        Subject: CN=6a61a1f7-0fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:5f:12:5b:1c:68:85:98:f0:81:62:6f:1d:
                    f3:c1:23:01:36:db:6d:c2:4b:4a:e1:a2:bf:30:a4:
                    91:b0:c7:01:be:8d:71:d2:f8:a6:c9:01:1e:27:30:
                    d6:4a:1b:a9:ff:3a:b5:f4:a0:4b:ef:46:fa:c7:54:
                    c3:ff:76:9c:2e:4a:76:89:dc:df:71:b9:be:66:06:
                    91:3e:f5:92:c2:e1:a4:c3:c8:a8:de:00:41:96:b6:
                    6d:0a:69:c6:3f:a7:ee:0e:bd:4c:c8:b4:13:40:dc:
                    fc:72:80:a2:a4:0a:92:42:af:ec:a3:2f:72:04:6a:
                    5b:6b:c0:55:f4:bb:83:a8:39:47:d6:4d:f8:7a:cf:
                    d4:43:94:8b:a3:d1:5f:d0:55:39:45:ae:77:82:cc:
                    b5:d2:fb:34:c6:de:c0:58:f7:59:50:48:32:ad:30:
                    2c:0a:09:1a:db:cc:a5:a5:ec:f6:3c:63:8c:f8:c3:
                    21:0d:f4:9c:7c:be:7a:d7:a3:92:9c:ba:7e:47:5d:
                    4f:b9:57:15:1a:14:54:06:17:18:44:d9:37:36:3a:
                    b5:72:a6:5c:96:ab:8f:ef:b4:e0:50:d3:14:50:21:
                    6a:0f:70:88:d7:1d:a0:8a:bd:a6:26:8c:7b:fd:e9:
                    97:68:ba:fa:ae:e4:b5:80:73:fd:ff:02:9b:3b:cc:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0C:70:D8:A6:60:EC:C3:9B:5A:C6:37:66:95:CF:3A:3E:B3:D1:50
            X509v3 Authority Key Identifier:
                keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f0:b0:27:ee:9f:69:da:3c:6c:fe:f2:15:9d:e8:8a:a7:10:
         42:8b:3b:b5:6b:36:82:6d:de:35:fd:92:6f:b9:f4:c8:dc:bd:
         b0:26:e6:9f:66:8d:04:9d:e3:97:91:ba:6a:69:96:ae:07:21:
         48:f5:e6:88:20:94:02:ed:d6:2c:4b:33:47:23:ac:fb:3c:ad:
         13:e0:94:77:1b:a8:79:bb:da:59:c9:74:a1:ed:cf:ec:1c:68:
         4e:c1:56:84:61:ba:86:5e:89:c9:33:ca:9d:b7:0f:08:47:b9:
         b2:e8:8c:0e:3c:85:a4:72:b8:bb:e1:99:14:be:35:b4:aa:32:
         38:da:50:ec:76:68:de:5a:24:6b:71:18:12:9c:c1:33:5b:e9:
         64:54:91:97:e0:b1:a2:d1:ec:07:d6:16:94:6d:3c:5a:58:2b:
         ed:51:a8:48:b9:fc:a8:79:d1:18:99:5a:3c:2b:6f:66:89:e6:
         47:34:51:e0:be:5e:78:89:f7:54:6a:a9:86:f4:6f:08:3f:8d:
         55:3e:84:b7:00:40:63:5e:94:de:15:5c:cf:87:dc:57:af:13:
         04:c6:a0:14:41:c9:29:91:01:ab:0e:be:53:eb:c7:48:10:f4:
         d7:ea:15:67:9c:f9:7c:8e:f8:16:29:57:ce:63:6f:fd:4f:8e:
         8f:24:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:34 2026 by rpki-client