Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
File:                     07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json)
Hash identifier:          /RA0i+/Vc7MLyzSxdss9sQ56g3DBJWL/4A0Pbg19b4Q=
Subject key identifier:   64:82:15:D9:55:EF:85:81:08:37:B6:0C:9B:25:A3:E4:4F:56:D0:8C
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Certificate issuer:       /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial:       0A15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
Manifest number:          09F3
Signing time:             Wed 22 Jul 2026 20:18:45 +0000
Manifest this update:     Wed 22 Jul 2026 20:18:45 +0000
Manifest next update:     Wed 29 Jul 2026 20:18:45 +0000
Files and hashes:         1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: VKju/0OeJKa1cTXFrkAklhP2Vrz39/LBL305TyxeeNo=)
                          2: 359388D8006511F1AA0FA34B566F56BC.roa (hash: ZOtwRxhmupTieRo9qgJrLBkzO+gTqGzLiKJz701clvc=)
                          3: 0A72D294006511F1BE07F947566F56BC.roa (hash: E/Iz9/9M4AyqWvgd1aB5MPhf6Qtoegq5pv3fO35/BF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
                          rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2581 (0xa15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
        Validity
            Not Before: Jul 22 20:18:45 2026 GMT
            Not After : Jul 29 20:18:45 2026 GMT
        Subject: CN=6a6125a5-14ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:f7:5c:2c:1f:cf:b4:92:2d:be:bf:e9:15:
                    0f:b8:21:21:1e:65:56:a3:d8:86:29:76:ed:46:60:
                    55:74:7b:c0:e0:fd:94:de:56:e7:0c:13:dc:25:85:
                    0b:ea:d9:cd:2d:9f:56:4a:0e:ce:f2:65:55:35:06:
                    3e:02:0a:1f:a5:50:b0:01:63:36:be:ef:e1:a2:3b:
                    10:f3:17:17:4c:d3:82:7f:da:3f:85:97:c1:96:47:
                    0a:09:99:47:a1:21:b0:aa:3e:c2:fc:c2:b5:ef:f4:
                    a4:72:f7:0a:06:66:60:a6:10:86:07:90:53:27:5d:
                    1c:ed:d3:95:4f:fe:0d:96:fc:95:2f:37:26:71:5f:
                    b5:07:50:c7:4d:cd:29:24:9b:3f:c2:81:66:49:4d:
                    34:bd:5a:ae:d2:dd:cf:db:81:dc:6d:89:12:31:df:
                    14:54:41:f7:c4:d0:06:27:45:3b:ba:74:c3:a4:a0:
                    1c:11:e2:da:2d:4a:4a:72:4e:65:76:dd:d1:34:08:
                    73:6b:a1:1d:b6:e8:be:83:50:34:95:b7:ef:fe:e6:
                    21:f9:76:7b:ab:0b:13:35:b6:ce:93:e2:0d:a3:ac:
                    eb:e5:69:21:84:a5:ff:86:b5:b8:3f:32:aa:7f:a6:
                    23:73:1f:73:41:4b:df:44:ed:01:07:3f:bd:e0:cc:
                    c6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:82:15:D9:55:EF:85:81:08:37:B6:0C:9B:25:A3:E4:4F:56:D0:8C
            X509v3 Authority Key Identifier:
                keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3e:9b:ca:55:c5:12:7d:54:e6:93:76:a2:b6:11:07:39:4c:
         9a:c3:ac:77:50:2c:d3:fe:4b:ab:d3:23:ab:3a:3a:8b:3f:fc:
         e4:65:c1:6b:6b:db:6f:5c:75:2c:65:52:7f:4d:27:56:3c:e2:
         21:e5:1d:68:80:18:0e:52:50:9b:cd:5c:80:f3:f5:0e:35:b2:
         94:03:4b:ff:da:c2:86:43:49:a2:ef:9c:d5:88:6a:bb:6c:d7:
         e8:b8:05:ae:c1:73:96:cd:5d:e8:33:8f:62:09:34:77:f3:de:
         e9:e6:c7:b8:0e:66:e7:49:c3:f7:f1:9a:b3:7e:94:4a:94:09:
         99:e0:56:65:0b:7b:37:4e:ff:2c:38:00:9a:ad:37:bb:b2:00:
         3f:82:63:3e:e6:16:20:30:7f:28:b7:34:48:e3:bb:b5:f0:98:
         5f:87:99:0e:d0:66:3a:37:dc:29:9e:ca:c6:71:b7:5e:52:54:
         8a:f1:17:f1:9d:de:7c:30:d9:20:fe:16:39:85:3d:ce:0d:01:
         28:2f:77:c2:45:c2:2e:6d:90:7c:1e:30:30:2a:e9:99:e2:4c:
         ec:32:e2:c1:96:7e:9c:14:a8:58:62:72:aa:c2:ae:d3:19:3e:
         a2:5f:2c:f0:47:e9:90:a7:aa:0d:a8:f0:ed:d5:01:1a:43:41:
         a1:f8:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:41 2026 by rpki-client