Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
File:                     7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft (raw, json)
Hash identifier:          UGsZVpWKy1veQUWD4/X8CL9Og0ZSLN+A5QdQi6jZ9tk=
Subject key identifier:   FC:BA:ED:BF:AD:D2:1C:32:BA:23:28:90:BE:75:B8:60:52:A4:F5:67
Authority key identifier: EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D
Certificate issuer:       /CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
Manifest number:          0586
Signing time:             Thu 23 Jul 2026 00:05:16 +0000
Manifest this update:     Thu 23 Jul 2026 00:05:15 +0000
Manifest next update:     Thu 30 Jul 2026 00:05:15 +0000
Files and hashes:         1: 7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl (hash: SDx4w8IXB3CkxWSUg+R+YzqB71+V2JMr0BZgGOsV5w4=)
                          2: 1E6E1BE8DB0711EFBD49DC56C4F9AE02.roa (hash: 756Zzl0o4njANAd0t3+VyjxWknmFUMorz/BPX+za6gk=)
                          3: 18612BE6DB0711EF9B67D356C4F9AE02.roa (hash: IwCGTDQFgeGOo+eyKLm2XgY/XKX3vRqKcgc0GDDLSRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl
                          rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC07, serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
        Validity
            Not Before: Jul 23 00:05:15 2026 GMT
            Not After : Jul 30 00:05:15 2026 GMT
        Subject: CN=6a615abb-db41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:b0:40:58:db:09:c5:6a:00:b5:c1:ef:f7:
                    4f:70:3a:eb:22:0a:bf:cf:d5:1d:9e:32:52:8d:d1:
                    78:03:2a:06:3c:fa:79:8d:79:ca:47:c9:86:45:fc:
                    8c:18:24:56:f4:95:36:0a:e9:f3:10:5f:c2:ed:82:
                    20:63:cf:6d:02:42:fb:4f:46:97:2d:4b:31:56:72:
                    80:ef:0a:eb:ff:e6:7c:da:ce:85:35:7c:28:61:75:
                    cc:ce:4d:00:e2:5b:a3:92:a0:23:f4:94:fa:aa:22:
                    1a:cd:ce:de:64:92:8c:78:03:72:00:04:dc:3f:12:
                    92:87:55:bd:46:fa:6a:3e:b3:89:9b:98:02:d1:20:
                    b4:c7:6f:0b:f1:a0:83:86:32:29:0b:b4:82:bc:3d:
                    c5:e4:e5:63:dc:62:02:13:59:9d:6c:ac:81:86:6b:
                    cb:48:e6:e1:02:a0:68:29:61:f8:e6:81:cc:5d:ab:
                    ae:15:da:2f:ef:2c:f7:a6:48:1b:da:74:9e:cf:18:
                    ad:83:b5:ec:6c:ab:fa:51:5f:47:cf:67:59:ad:9f:
                    49:ea:12:bb:23:53:5c:a4:63:44:c7:ad:3a:2b:b5:
                    94:94:36:ef:f6:90:44:41:07:5c:87:30:cb:9c:5f:
                    e5:b0:4b:19:aa:e1:95:65:2f:05:95:7c:9d:fd:0a:
                    1e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BA:ED:BF:AD:D2:1C:32:BA:23:28:90:BE:75:B8:60:52:A4:F5:67
            X509v3 Authority Key Identifier:
                keyid:EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:18:f8:c7:02:71:19:d4:c0:1e:df:85:b5:c4:03:3c:e7:
         29:24:6f:14:d7:11:03:fb:eb:8f:62:82:7b:e9:c5:d5:83:17:
         45:e8:9d:a8:fd:4d:92:7e:a3:74:2c:55:fb:d8:6e:74:69:e3:
         32:e8:6b:d8:29:ae:9d:f4:77:34:cb:ec:31:ff:84:7b:26:7f:
         93:c1:ac:99:37:67:3b:29:55:e8:28:87:bf:32:3a:de:e2:13:
         95:5c:7a:c1:25:3a:73:2d:98:a6:d3:05:df:73:dc:58:80:e8:
         bb:5d:5a:4b:5b:62:ea:03:93:12:9c:77:d7:c2:ef:f3:a4:7a:
         58:df:ef:b8:42:90:8c:34:de:36:61:5d:7e:b4:3b:63:45:e4:
         84:11:10:59:e4:ad:93:9b:19:9a:bb:99:4e:3e:91:17:f5:47:
         08:65:3b:4e:00:f8:fa:8b:e8:28:85:87:ff:b6:15:bf:f4:5a:
         d8:18:a9:f2:0f:73:1a:61:68:29:94:ce:f1:c4:df:2b:13:97:
         b3:b4:32:cd:a0:a5:12:92:6d:82:24:2b:1e:a1:66:c0:c5:a0:
         0a:ad:e4:4c:8d:51:34:b2:f1:56:f1:37:ee:aa:ed:17:9c:15:
         2b:85:1e:10:c6:0e:dc:6a:e2:f4:36:1b:87:4f:49:4e:eb:92:
         b6:68:c5:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RDMDcxMTAvBgNVBAUTKEVDQUEzRDE1RkE4QjE0REFBQUZFMjA1OUE0MDE5QjIw
RjUyN0Y4M0QwHhcNMjYwNzIzMDAwNTE1WhcNMjYwNzMwMDAwNTE1WjAYMRYwFAYD
VQQDEw02YTYxNWFiYi1kYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArLCwQFjbCcVqALXB7/dPcDrrIgq/z9UdnjJSjdF4AyoGPPp5jXnKR8mGRfyM
GCRW9JU2CunzEF/C7YIgY89tAkL7T0aXLUsxVnKA7wrr/+Z82s6FNXwoYXXMzk0A
4lujkqAj9JT6qiIazc7eZJKMeANyAATcPxKSh1W9RvpqPrOJm5gC0SC0x28L8aCD
hjIpC7SCvD3F5OVj3GICE1mdbKyBhmvLSObhAqBoKWH45oHMXauuFdov7yz3pkgb
2nSezxitg7XsbKv6UV9Hz2dZrZ9J6hK7I1NcpGNEx606K7WUlDbv9pBEQQdchzDL
nF/lsEsZquGVZS8FlXyd/QoekwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPy67b+t
0hwyuiMokL51uGBSpPVnMB8GA1UdIwQYMBaAFOyqPRX6ixTaqv4gWaQBmyD1J/g9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREMwNy80RUI5RURENjMz
NjIxMUVDQTdBQzUxMzFDNEY5QUUwMi83S285RmZxTEZOcXFfaUJacEFHYklQVW4t
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdLbzlGZnFMRk5xcV9pQlpwQUdiSVBVbi1EMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REMwNy80RUI5RURENjMzNjIxMUVDQTdBQzUxMzFDNEY5QUUwMi83S285RmZxTEZO
cXFfaUJacEFHYklQVW4tRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAncEY+McCcRnUwB7fhbXEAzznKSRvFNcRA/vrj2KCe+nF1YMXReidqP1Nkn6j
dCxV+9hudGnjMuhr2CmunfR3NMvsMf+EeyZ/k8GsmTdnOylV6CiHvzI63uITlVx6
wSU6cy2YptMF33PcWIDou11aS1ti6gOTEpx318Lv86R6WN/vuEKQjDTeNmFdfrQ7
Y0XkhBEQWeStk5sZmruZTj6RF/VHCGU7TgD4+ovoKIWH/7YVv/Ra2Bip8g9zGmFo
KZTO8cTfKxOXs7QyzaClEpJtgiQrHqFmwMWgCq3kTI1RNLLxVvE37qrtF5wVK4Ue
EMYO3Gri9DYbh09JTuuStmjF5Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:52 2026 by rpki-client