Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
File:                     7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json)
Hash identifier:          9j5DqF5q2Y75DeGgSPgBTx/JTQLIQT4cPBHLcO4Brz0=
Subject key identifier:   82:6A:DD:78:08:C6:78:32:63:B6:AE:BF:69:17:AE:77:CB:8E:8F:1B
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Certificate issuer:       /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial:       0B42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
Manifest number:          0B27
Signing time:             Wed 22 Jul 2026 19:40:07 +0000
Manifest this update:     Wed 22 Jul 2026 19:40:07 +0000
Manifest next update:     Wed 29 Jul 2026 19:40:07 +0000
Files and hashes:         1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: l8g3FEvnWxCi5UjOX5fdqzUDL5t82IJRw9Lkk6WsW84=)
                          2: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=)
                          3: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 71Hm3TTvUXY6fbA6ubcd977cDED5QXch19XWZX6CKNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
                          rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
        Validity
            Not Before: Jul 22 19:40:07 2026 GMT
            Not After : Jul 29 19:40:07 2026 GMT
        Subject: CN=6a611c97-3841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:24:33:2a:1b:cb:66:ee:d0:b2:72:5a:e7:37:
                    23:3c:5d:e1:ce:90:1c:15:06:62:18:6a:65:19:87:
                    62:d3:9e:8c:dc:35:2a:1c:fa:a4:96:7d:3b:03:04:
                    3c:e3:29:83:5d:75:87:08:08:98:05:20:79:bc:37:
                    43:98:1b:37:59:f4:43:c0:ea:b5:76:1b:6d:16:a5:
                    45:92:85:9f:6c:81:52:1e:65:c9:27:35:52:b4:58:
                    7f:6b:59:99:76:dc:76:7c:9f:57:ab:f7:88:b6:f2:
                    28:da:c7:0a:b8:49:b5:8e:ec:fc:d6:6f:0a:68:f6:
                    7c:3a:80:24:e3:3d:0e:24:86:bf:2f:fa:48:7b:fb:
                    a6:ed:53:fd:2e:a8:16:37:0c:34:95:bf:91:32:b0:
                    25:8d:65:93:19:8a:d6:ff:af:4f:81:42:5f:cc:b2:
                    19:d9:3b:2a:49:c9:54:b1:ea:f8:95:78:fd:c0:f5:
                    71:a2:3b:30:f6:32:bd:55:ac:12:e1:ab:b5:84:4b:
                    92:f3:dc:b9:a9:cb:75:a0:8f:51:2d:e1:f0:b2:85:
                    34:bd:78:40:c1:55:ba:16:a4:4c:9a:25:e4:a7:4d:
                    a4:f0:ea:84:ce:5f:b0:95:6b:ea:18:7f:d0:1d:cf:
                    95:ed:97:7b:75:bc:ef:a8:80:05:2a:fe:0c:8c:69:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6A:DD:78:08:C6:78:32:63:B6:AE:BF:69:17:AE:77:CB:8E:8F:1B
            X509v3 Authority Key Identifier:
                keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:90:a2:8d:1a:bf:55:bd:43:29:88:52:2f:72:dd:04:a6:60:
         ee:47:35:24:66:e6:25:3b:56:0a:0c:52:28:dd:1a:12:cc:57:
         f4:62:ff:6f:2f:eb:36:0f:92:ef:13:92:36:32:f2:1a:0e:ca:
         02:cf:4d:9c:07:00:af:24:72:31:37:3c:9a:b4:a8:de:91:5c:
         78:4e:82:5e:2d:cb:d3:ea:44:3f:e1:a4:f2:c7:5b:6c:ea:9f:
         15:6b:3c:7b:0f:31:cc:fa:ac:3d:6b:32:84:22:bb:2b:0d:54:
         d9:55:e8:6b:22:8b:96:54:c0:2c:41:b7:e7:b2:48:56:77:34:
         f6:e7:c2:ee:7f:1a:df:e5:24:b7:a9:59:c9:bb:9b:b4:16:e6:
         5f:5e:af:0e:fb:52:e0:1f:10:87:4a:bb:f6:f2:94:0a:78:04:
         65:bf:63:ba:f4:d4:f3:ba:20:a3:3c:52:c4:d5:8d:85:4e:ec:
         0a:32:55:f3:9a:06:96:70:3d:77:9c:31:29:0e:8f:96:4e:42:
         bf:2f:27:7b:d2:76:31:e8:32:99:bb:5c:67:c7:a5:e9:69:e3:
         ff:0c:7a:e4:da:60:3b:a0:71:32:6e:55:84:0f:21:b0:fb:55:
         1a:2f:aa:ac:84:03:26:c7:2a:bf:f4:cc:66:34:fb:04:fb:3d:
         cd:86:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:34:22 2026 by rpki-client