Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File:                     0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier:          OQCQEAfxp1mN+hf49FVE+2BYgvt5bKsollD8NuuUP1s=
Subject key identifier:   FB:F1:6C:85:4C:8E:6D:8A:9C:41:F7:07:4B:BF:95:58:FA:23:4B:B8
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer:       /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial:       07D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number:          07B5
Signing time:             Wed 22 Jul 2026 22:08:09 +0000
Manifest this update:     Wed 22 Jul 2026 22:08:09 +0000
Manifest next update:     Wed 29 Jul 2026 22:08:09 +0000
Files and hashes:         1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: zWGCW+Bjc9WJVI0n1c+M9XTGjJlLA4vgT8ZyTiBnN1E=)
                          2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: a0yVbOyKmzsc8MOg+dTg0w6gn2yodW2h3rxYL00GULI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
                          rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
        Validity
            Not Before: Jul 22 22:08:09 2026 GMT
            Not After : Jul 29 22:08:09 2026 GMT
        Subject: CN=6a613f49-663d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:20:4d:28:3f:35:26:d6:e1:4f:2c:9d:25:
                    2c:23:e7:84:98:9a:c9:1f:43:6e:e4:5d:fa:64:de:
                    e5:16:18:8a:7d:56:7f:77:ed:b4:41:91:3d:b6:2e:
                    ae:fe:d1:25:38:f8:bc:ae:77:fc:7d:3b:75:e9:12:
                    dd:f0:bf:f4:86:bb:ac:47:6b:c6:9b:0a:26:fc:a0:
                    93:86:db:bb:83:66:7e:ce:cd:ca:51:50:78:3b:07:
                    c0:c0:2f:42:b0:87:00:81:4b:90:16:7c:f7:75:9b:
                    10:73:88:e7:6a:1c:5c:b9:ba:a2:78:c6:ce:4a:d2:
                    91:43:1a:ee:ba:24:53:16:d0:ad:bc:81:ae:3e:c2:
                    0d:59:f9:49:9e:01:4e:93:78:16:a2:ab:d3:f6:49:
                    d8:46:54:37:66:63:06:83:dd:6b:a4:3a:36:57:10:
                    cf:45:02:a8:f0:fb:28:9e:4e:2d:5e:b9:bf:60:09:
                    e0:da:b2:b2:7e:86:0e:85:9e:98:d3:dc:2e:b7:04:
                    ea:1a:04:ad:d3:8c:66:08:4c:0b:fb:c2:9e:0d:7c:
                    b6:a6:ef:af:88:74:f4:c2:95:f4:26:96:8b:38:ac:
                    af:1f:9b:75:cb:60:19:01:dd:11:dd:2b:c1:94:b1:
                    9e:d8:c1:2f:e4:c8:e4:ba:ae:3e:d7:d8:d9:1b:45:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F1:6C:85:4C:8E:6D:8A:9C:41:F7:07:4B:BF:95:58:FA:23:4B:B8
            X509v3 Authority Key Identifier:
                keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:e8:74:1d:6c:fe:a2:59:3d:76:8b:8a:b3:e7:c9:d3:f4:
         27:6f:68:b5:8f:67:d1:b0:f2:41:d5:e4:b3:d4:5f:af:4e:12:
         9c:5b:13:d9:ac:4a:26:fb:31:53:46:74:b8:f0:7b:0b:78:3e:
         9c:88:d3:bd:3a:42:41:27:77:3f:04:e1:98:41:0f:04:44:8b:
         d5:3b:c2:8b:2c:88:c3:ed:80:3d:eb:50:b6:7b:3c:e7:12:df:
         7d:3d:a8:2a:b0:13:19:72:af:a3:16:cb:db:61:7e:b3:39:39:
         7b:9f:12:2a:9b:93:2d:d6:8d:cc:06:c0:3a:ed:6d:ee:39:5f:
         f0:f5:b6:0f:37:fa:f7:0f:5c:3b:53:a8:48:6c:16:16:8d:d5:
         fc:fe:8e:3f:77:c9:e9:d6:f9:10:bb:8b:72:39:ff:b4:39:60:
         d0:73:b4:0d:f7:99:74:c2:2e:bc:7c:49:8c:2a:54:85:50:e3:
         1a:1c:15:69:0e:23:fa:ab:62:5e:fc:93:28:22:2b:e1:d1:bd:
         bd:c8:52:b4:d6:5b:59:1b:21:e2:3b:1f:05:17:31:80:2c:1c:
         ae:dd:b6:cb:77:51:49:c2:09:1e:e7:c8:b8:34:87:b0:72:8f:
         b7:8e:ca:d0:b7:2e:cb:ba:cb:0f:dc:44:32:f8:fd:da:f3:80:
         a5:2e:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:38:24 2026 by rpki-client