Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
File:                     I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json)
Hash identifier:          0OJO6OVT102LMUd6VvwTtD8PEK3IyRK0+8cZAPmWSwQ=
Subject key identifier:   18:87:44:81:4A:DD:4B:3E:59:AC:D1:66:39:E7:6E:49:6B:AC:9C:27
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Certificate issuer:       /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial:       0788
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
Manifest number:          077C
Signing time:             Wed 22 Jul 2026 22:13:08 +0000
Manifest this update:     Wed 22 Jul 2026 22:13:07 +0000
Manifest next update:     Wed 29 Jul 2026 22:13:07 +0000
Files and hashes:         1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: UV/T5yHnqmGxErUsnvqBo3xz5Xkuue0xCBf3pJ1CmSI=)
                          2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: CuU/s3UKS9k04hjKJm9gWDdp3yaB5Ydqq+bcVnMC/ag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
                          rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
        Validity
            Not Before: Jul 22 22:13:07 2026 GMT
            Not After : Jul 29 22:13:07 2026 GMT
        Subject: CN=6a614073-2518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:7c:61:6b:03:9c:5a:be:f6:e3:1e:77:a8:
                    00:13:46:28:e1:56:49:55:4b:99:36:ba:1a:86:0b:
                    37:02:02:7f:0f:a2:77:44:00:bd:0f:b7:2f:67:28:
                    f0:d6:96:6d:36:14:47:15:09:93:6b:c2:9e:d7:1f:
                    db:34:5d:ed:00:62:ed:9f:e1:c0:08:25:a0:22:aa:
                    66:82:70:8d:dc:ba:24:50:44:5a:d8:06:f5:1b:41:
                    84:a0:d6:41:b3:b6:58:fe:73:4d:e7:b1:2b:e8:dd:
                    c6:c8:c3:ed:e8:9f:8e:4e:6b:d1:93:f3:1d:ac:1f:
                    b8:73:c9:37:26:d0:a7:d6:eb:7b:28:5b:82:cf:f5:
                    08:e6:a3:75:74:8d:d5:0a:21:5d:3e:f7:87:ed:07:
                    4b:2f:0f:98:01:82:e2:a5:1b:ef:33:de:ec:42:7a:
                    32:34:3b:76:bd:48:0b:7e:33:4c:13:18:fd:25:3d:
                    03:a8:4c:16:9f:36:22:e4:0c:ae:b9:ae:26:0b:34:
                    19:aa:2b:1b:3c:d9:c6:cb:6f:6d:41:73:53:67:06:
                    0d:32:3d:67:2f:28:f5:0d:37:e6:ed:bb:bb:55:7e:
                    e1:da:b0:aa:04:a1:a4:6b:e2:3d:c6:21:c9:66:04:
                    76:5b:8a:78:c6:94:1b:93:26:9d:ec:e0:9b:09:15:
                    92:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:87:44:81:4A:DD:4B:3E:59:AC:D1:66:39:E7:6E:49:6B:AC:9C:27
            X509v3 Authority Key Identifier:
                keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:4b:8d:65:8f:aa:91:09:2b:20:d3:80:19:e1:5f:09:77:4d:
         8e:75:3c:86:8b:65:bc:b8:85:3b:34:9e:bb:df:e8:5d:0e:d2:
         af:a7:ac:f2:a8:ed:fc:d8:86:4a:9b:90:cb:a7:01:f1:b5:b9:
         d8:80:8c:a0:e1:79:dd:4c:ab:17:ec:d9:b3:6b:0c:82:55:7e:
         68:f5:23:df:e7:5e:77:1d:96:c5:88:9f:4c:25:c9:cc:f5:ab:
         a7:83:17:ea:93:cd:e6:df:17:3a:93:6f:bb:ac:b9:88:39:fd:
         af:48:04:6a:82:64:93:03:8f:b9:8e:89:d4:c5:3d:ba:83:f6:
         e8:59:a2:94:0f:60:c8:93:4d:f9:89:df:42:0b:63:6f:aa:b5:
         b6:7c:a2:16:85:7e:f2:b5:38:d8:ec:07:ba:84:9c:e0:bd:8d:
         7f:bc:5c:04:66:77:56:22:52:4f:ad:4c:6c:ae:e5:03:dc:20:
         ea:ad:49:59:d8:57:7a:0e:dd:23:a0:fc:d8:ab:7a:79:e1:83:
         6f:f1:bd:5c:cc:ba:ab:0a:72:70:d7:e2:e1:17:27:6f:ff:10:
         6a:93:fd:0f:bb:f4:ed:0c:c3:ad:90:2a:f1:ff:34:b5:99:71:
         0b:c6:30:01:ce:a9:63:35:30:aa:bd:98:61:3b:31:24:21:1c:
         39:24:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:16:23 2026 by rpki-client