Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
File:                     iR7Yuqwsc70TrcqhoWqvANIkqHc.mft (raw, json)
Hash identifier:          /nfq6J4HN1RlXLHT4dQRg0KimWuVQRto/hdm7QQbRZQ=
Subject key identifier:   03:CE:33:A2:18:C8:43:A3:5C:21:ED:FB:48:D7:EB:B8:93:8B:E5:52
Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
Certificate issuer:       /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
Manifest number:          013C
Signing time:             Thu 23 Jul 2026 07:10:32 +0000
Manifest this update:     Thu 23 Jul 2026 07:10:31 +0000
Manifest next update:     Thu 30 Jul 2026 07:10:31 +0000
Files and hashes:         1: iR7Yuqwsc70TrcqhoWqvANIkqHc.crl (hash: UmNdGQi9RcPwbUTgkw9QiB2Mz1OqL2RjjTygpD4EDkA=)
                          2: F7078BC4B73511EF8537DE81C4F9AE02.roa (hash: dcnfcfiViSeBV+zFTXFLZ3LN0enm0ZKeSScFAnyxpAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
                          rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91394E7, serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
        Validity
            Not Before: Jul 23 07:10:31 2026 GMT
            Not After : Jul 30 07:10:31 2026 GMT
        Subject: CN=6a61be68-822c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:ef:0c:6f:4f:36:0b:f1:77:71:0d:9f:6a:
                    fd:1a:a1:9b:66:52:ad:b2:27:77:01:cd:23:d3:c1:
                    93:4f:d1:8e:96:88:f0:96:4c:6b:a2:3a:bd:c0:eb:
                    2d:d8:57:7f:c8:2e:b5:b6:5f:46:57:9c:f0:71:d7:
                    7d:c5:d7:e6:bd:9b:89:b5:58:c1:74:d6:d9:d9:08:
                    be:51:9d:80:4e:f6:35:75:6c:f8:2b:26:f4:01:ae:
                    6b:d6:9d:d6:27:87:9c:95:6c:19:73:1c:fd:25:a9:
                    cc:0f:05:c3:d1:7e:f9:b3:61:24:7b:33:d9:c8:4b:
                    29:f2:e7:9f:2b:85:07:4e:57:a8:66:59:4e:c9:5e:
                    d3:41:8b:e8:48:00:81:2c:7e:e9:cd:cc:8c:cf:f1:
                    d0:c8:a8:5c:43:a2:ad:05:69:30:92:3f:0d:70:8f:
                    b6:b9:05:3e:b0:6c:8b:10:a2:29:9a:4d:c4:d3:87:
                    d6:a4:1e:de:25:51:f2:af:1d:2c:8f:6a:9c:d9:f1:
                    a7:4b:87:cc:a9:c0:3f:67:c9:f5:78:26:3f:f5:74:
                    78:a7:aa:c2:73:11:29:0b:d9:c5:e7:e6:5b:bd:c6:
                    ae:33:1a:a0:a7:df:ab:36:5a:12:c0:c1:ad:71:77:
                    c2:11:04:b5:fd:aa:ab:ce:ee:bc:3e:2b:d7:5b:5c:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CE:33:A2:18:C8:43:A3:5C:21:ED:FB:48:D7:EB:B8:93:8B:E5:52
            X509v3 Authority Key Identifier:
                keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:23:96:1f:48:a2:7f:07:bd:9c:fc:08:05:b3:22:aa:39:f9:
         a7:e0:52:05:d3:f3:29:bb:4b:19:49:a0:45:96:46:ed:33:31:
         e0:ee:2f:cc:10:bc:1f:50:f7:cc:5c:be:fe:79:22:37:b8:85:
         23:72:f0:ad:88:72:16:63:cd:be:a0:d2:46:d0:f7:7b:ef:2c:
         60:7c:81:d0:34:27:5a:c9:40:a7:ed:a0:0e:5d:56:ff:ea:a7:
         5f:81:a5:6b:23:35:7d:72:c7:06:81:3b:c3:fa:2d:4d:71:1d:
         1c:81:98:b9:0d:76:4a:4b:be:64:f4:db:8a:db:14:2a:ed:0e:
         4b:6e:5b:06:4a:ed:b1:a9:2a:fc:69:c6:df:12:83:3d:dd:fa:
         19:e3:81:8a:40:b2:f6:5e:08:b9:9d:6a:e3:19:b3:04:79:14:
         76:0a:9f:b7:0c:81:3a:c1:5e:76:36:5e:85:48:b1:8e:1e:58:
         cd:9e:0a:7c:43:53:e7:91:bc:00:a3:ad:42:26:e5:a3:3a:27:
         8a:d3:bb:6f:03:59:ed:16:16:21:d6:de:e7:28:fd:aa:da:1d:
         55:b6:0f:2b:97:01:70:77:d3:2e:0c:4b:1e:31:5f:95:3b:1d:
         8a:a2:99:b7:e6:0c:59:c7:e9:1f:9d:66:b3:fe:79:a0:be:77:
         e7:aa:3c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:52 2026 by rpki-client