Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
File:                     -7tvOPZwPQLXJu3kYjmzvtih8eQ.mft (raw, json)
Hash identifier:          2d5t3BicRIftUFVfNxvyifL3ixzBmqvxWW2rkRgefuM=
Subject key identifier:   CA:61:5F:35:29:64:CA:85:BA:8E:0F:DF:5F:C8:AA:43:47:18:7B:33
Authority key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
Certificate issuer:       /CN=A9141B4C/serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
Manifest number:          58
Signing time:             Thu 23 Jul 2026 10:13:52 +0000
Manifest this update:     Thu 23 Jul 2026 10:13:51 +0000
Manifest next update:     Thu 30 Jul 2026 10:13:51 +0000
Files and hashes:         1: -7tvOPZwPQLXJu3kYjmzvtih8eQ.crl (hash: Vu9xXzXlXB71e81HosaYa7beOSa07lUDetqQTEXaxpc=)
                          2: A8CF90D807E711F1BD5B02F0213D8C67.roa (hash: hV/y2S97hrz2Q67W/IE/R1j506bwev+zG5Z7LB9xvfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl
                          rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4
        Validity
            Not Before: Jul 23 10:13:51 2026 GMT
            Not After : Jul 30 10:13:51 2026 GMT
        Subject: CN=6a61e960-4fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:c8:98:86:bb:d9:d4:90:31:4f:f1:b8:3a:
                    3a:d8:35:19:1e:96:c4:15:a4:88:be:73:d8:e6:45:
                    aa:6f:18:72:1b:37:85:83:1a:a6:27:85:de:03:de:
                    e8:f5:03:0e:b1:c7:15:27:37:d7:9e:8f:d5:63:1b:
                    4e:09:84:69:78:46:ed:cf:a7:8a:db:95:6d:aa:60:
                    0e:89:1a:3d:79:12:bb:50:c0:9e:34:2e:ae:1c:2c:
                    ca:e8:b1:3c:26:50:20:bb:53:33:e7:57:9a:88:dd:
                    e8:78:85:ea:96:b2:2c:52:29:80:50:4d:c7:71:63:
                    47:02:67:81:71:e9:fb:5a:8c:00:35:31:a6:ee:60:
                    59:eb:ff:76:70:9d:16:c3:91:d4:87:48:2f:e6:dd:
                    27:e8:b8:d4:96:8b:dd:2f:f9:2d:df:63:ee:96:64:
                    39:14:07:54:79:0c:76:93:9a:1b:03:78:18:9d:65:
                    c9:ea:bf:a6:93:1f:bb:0f:e2:36:c9:ec:56:f1:9a:
                    c0:29:2d:7f:2e:8e:37:84:17:e0:32:2f:ef:07:b2:
                    4c:e7:6b:e2:e3:71:c5:51:53:1c:3b:c2:c3:48:f3:
                    d2:d2:eb:29:32:25:46:52:cd:c1:9b:e7:78:e4:27:
                    04:01:00:62:d7:e6:75:8d:8f:5d:3c:16:c9:8f:37:
                    19:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:61:5F:35:29:64:CA:85:BA:8E:0F:DF:5F:C8:AA:43:47:18:7B:33
            X509v3 Authority Key Identifier:
                keyid:FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:97:bc:3c:91:7b:d4:d0:7d:a3:5a:a4:e4:df:45:0e:7b:77:
         3e:e7:be:96:54:53:a9:2b:aa:d3:d9:04:64:6d:3e:6e:cb:c9:
         8b:58:5c:08:3a:2c:94:2e:4a:7c:ec:6c:01:ea:70:13:e7:1c:
         bb:1f:24:9d:68:1e:bd:5c:02:13:1a:3e:13:67:7f:f6:f6:10:
         89:79:f3:9f:8a:1d:c7:c7:1e:76:c6:ed:65:58:ac:61:86:30:
         9a:df:5e:35:53:56:d8:ec:83:79:ce:ab:fb:2d:a5:1c:92:92:
         d0:dd:f4:94:22:d1:8d:28:c4:9a:23:b5:8b:2a:9f:dd:8b:c1:
         24:0e:e0:16:c4:ab:f0:32:6a:36:b2:4f:1c:f2:3c:de:34:a2:
         ce:23:25:b1:f2:48:e7:9c:d1:41:25:22:45:2b:d1:39:22:e2:
         39:da:08:0a:d4:d1:45:56:ba:f5:5c:14:db:db:1f:42:f2:17:
         56:a7:84:b7:95:3e:0d:f1:87:b8:25:d7:d2:4f:5c:1b:40:e5:
         05:58:c9:8c:a9:e9:eb:9e:21:cb:60:29:83:ff:e3:c6:ce:fc:
         c2:fa:37:25:d6:83:af:92:bb:b4:49:a0:0b:5e:d5:68:5d:e0:
         9b:de:a4:19:3a:17:47:5d:bd:48:fe:a1:54:1a:89:ea:84:bd:
         62:26:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:24:03 2026 by rpki-client