Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
File:                     e9PkPRNOUjXpdgPOi6lIa2KpseY.mft (raw, json)
Hash identifier:          rzsYJMCYl/8auwAsGO1a4HerADeqgrteCIeSdk0z4/w=
Subject key identifier:   C6:2D:62:40:CD:5A:DF:89:35:B3:90:87:CE:99:48:6B:0F:06:E4:2D
Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
Certificate issuer:       /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Certificate serial:       0413
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
Manifest number:          03F7
Signing time:             Thu 23 Jul 2026 01:29:03 +0000
Manifest this update:     Thu 23 Jul 2026 01:29:02 +0000
Manifest next update:     Thu 30 Jul 2026 01:29:02 +0000
Files and hashes:         1: e9PkPRNOUjXpdgPOi6lIa2KpseY.crl (hash: sD/DJQc5TxzqmsVcXpJp8yfCrePvOi6H3xJda6hTyEw=)
                          2: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (hash: qadfokkBTWd/thpofhVEGWVL+12kLw5uc1k0Mf3958k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
                          rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
        Validity
            Not Before: Jul 23 01:29:02 2026 GMT
            Not After : Jul 30 01:29:02 2026 GMT
        Subject: CN=6a616e5f-19e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:4f:46:34:ae:5b:9b:98:c9:d0:f1:a8:11:
                    5b:7b:6b:e1:b4:35:7c:a9:52:8c:60:6c:79:b5:02:
                    96:5e:6c:9f:e1:ab:cd:1e:f7:da:1c:70:e4:4a:b5:
                    87:af:3f:a2:b5:bb:ae:37:a1:43:db:c9:58:43:ab:
                    a4:5e:7b:87:e9:b2:22:f1:6c:e2:ca:33:2b:31:0b:
                    58:1e:71:1e:13:90:7e:1e:0c:1e:ee:5f:a2:3b:34:
                    75:05:51:fe:35:33:fc:b6:3a:ff:f0:ef:cc:90:26:
                    d0:c2:74:9c:55:2b:32:66:95:3a:bf:f8:c7:11:fb:
                    2d:11:f9:7a:c0:90:a2:7a:92:29:01:89:2a:76:75:
                    52:4f:a7:5b:6d:0e:25:c0:75:51:63:ec:45:b7:5e:
                    73:f6:58:d4:2f:aa:40:23:1c:f8:ea:67:f0:af:ca:
                    54:84:b5:7c:dc:a9:9c:a2:ed:fd:26:8c:5d:ea:07:
                    fd:0c:24:95:52:89:ea:25:32:82:04:63:c4:6c:c2:
                    ac:fa:38:c5:86:5f:c1:41:c1:21:27:75:2f:ac:79:
                    da:96:2e:91:84:8f:49:6f:48:41:4d:60:8f:a3:56:
                    da:41:fc:43:d2:26:00:a7:0a:db:cb:17:5a:e5:7c:
                    5a:4f:07:b4:bd:ef:0e:be:4f:a1:88:96:71:96:e1:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2D:62:40:CD:5A:DF:89:35:B3:90:87:CE:99:48:6B:0F:06:E4:2D
            X509v3 Authority Key Identifier:
                keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7b:70:06:ed:09:c9:3b:cf:f3:c3:93:17:a2:62:7f:7d:1e:
         45:86:81:e3:78:4d:67:69:2a:fd:13:cf:dc:8e:8c:0e:80:fa:
         84:61:81:bb:0a:4c:8b:99:a3:78:69:25:42:8a:0a:7b:64:48:
         b7:ab:3a:ae:09:f4:6c:12:c9:9e:7e:dc:90:f7:b9:d4:16:f6:
         a0:eb:74:9a:87:99:41:7f:4f:f5:98:6d:ba:1e:52:4a:a0:e4:
         b9:0f:03:76:77:15:a7:18:c6:a0:4c:e1:82:51:b5:08:e8:98:
         6f:b3:50:26:d0:dd:8b:a2:93:d2:db:1a:7f:1b:b3:70:4a:cd:
         0e:fc:26:00:f2:39:20:b1:01:b2:79:5d:af:64:ab:d5:ab:cf:
         1d:f6:b1:78:4a:5c:de:59:d7:96:12:6c:23:a5:23:fb:62:c2:
         76:71:28:bf:0d:97:26:11:95:50:08:39:09:e5:a3:8e:31:e4:
         8f:58:e8:06:7e:ce:64:f5:1f:16:c9:73:5c:ed:fe:ae:a7:a7:
         98:0c:7a:2b:ae:aa:7d:1a:6e:88:7a:83:e7:b6:c9:4d:3e:db:
         bc:c8:43:88:f9:67:91:11:80:19:c9:3d:f6:8d:d5:10:8a:36:
         ed:ad:17:a3:ca:81:65:62:fb:d3:0a:0d:31:98:69:a4:8a:25:
         6b:e7:90:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:52:55 2026 by rpki-client