Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
File:                     R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft (raw, json)
Hash identifier:          741i8Tq5ABTuIbMouIp3+JohK1AI94QkUJa6tsYCnT8=
Subject key identifier:   55:BC:4D:34:BA:79:AE:1A:13:58:C1:5D:F5:97:D0:C5:FA:87:54:E6
Authority key identifier: 47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
Certificate issuer:       /CN=A91676C8/serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
Manifest number:          3A
Signing time:             Thu 23 Jul 2026 10:48:04 +0000
Manifest this update:     Thu 23 Jul 2026 10:48:03 +0000
Manifest next update:     Thu 30 Jul 2026 10:48:03 +0000
Files and hashes:         1: R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl (hash: /+LNtT6UhC0sUtyWgCa9thWI8Vj/3zKCd0x2WwXFy78=)
                          2: 83E78C14713511F1AE5C985D73A30FBC.roa (hash: l/vRgwoEsx8MvAV5uaw1m2BHaiwrdgs1W/jJQWqVTjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl
                          rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676C8, serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
        Validity
            Not Before: Jul 23 10:48:03 2026 GMT
            Not After : Jul 30 10:48:03 2026 GMT
        Subject: CN=6a61f164-eaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:e0:cb:4a:85:c0:49:22:37:15:c6:e8:00:
                    f2:c6:dd:41:ce:09:ee:f7:c5:be:e4:65:0b:55:78:
                    d0:7c:13:cb:16:7c:db:a2:f9:48:2e:78:40:b3:67:
                    33:a9:cc:d9:50:35:f7:7e:c8:c3:f5:83:7e:59:ac:
                    cb:48:5c:47:b7:1f:41:fe:ee:6d:b3:cd:10:ed:a6:
                    6e:a0:89:36:f0:dc:c1:df:53:ff:f9:39:b3:b4:1f:
                    2d:0a:b5:77:96:b1:e9:a7:71:8f:47:82:26:59:91:
                    e1:ee:b4:e9:fe:22:be:20:92:9d:65:5f:05:67:08:
                    26:f4:f2:cb:3f:a9:92:a9:76:d7:2e:96:6e:f0:37:
                    e0:5e:17:30:59:06:02:26:13:35:24:27:eb:0e:85:
                    07:c3:55:c3:fa:dd:2a:d5:77:9c:22:4a:5e:1f:ae:
                    d9:32:fd:6a:bc:a7:3b:04:3d:00:00:ee:56:cb:9a:
                    f0:3b:f0:98:ae:23:0e:7b:49:9b:bc:15:cb:5d:10:
                    85:ad:63:cf:c9:04:1d:89:b7:0e:6e:de:fc:08:ce:
                    82:52:7b:78:8f:60:6b:dd:09:bd:2e:35:c4:d6:e1:
                    9d:d3:b2:09:39:f7:64:7d:2f:e2:f1:ae:86:96:c2:
                    c5:3b:89:f4:59:5c:10:5a:e9:49:02:28:85:01:ea:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BC:4D:34:BA:79:AE:1A:13:58:C1:5D:F5:97:D0:C5:FA:87:54:E6
            X509v3 Authority Key Identifier:
                keyid:47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b3:8e:75:b1:8e:41:91:93:e4:50:e8:8d:78:3d:ba:47:b4:
         10:f6:11:b4:5d:e1:0c:1b:24:94:9b:28:9a:54:32:38:da:bb:
         a8:91:33:90:c1:67:66:fc:e0:53:9e:7f:cd:c2:8b:bf:65:0f:
         54:e8:56:93:81:ef:39:4b:e2:e3:19:86:bd:e4:0a:ea:ef:61:
         39:e3:94:4d:ab:ed:c2:00:a4:2e:45:70:31:fa:e6:53:7a:60:
         2e:bb:ba:13:b9:f0:cb:9c:d8:59:9b:70:8e:e0:1b:5a:af:e4:
         93:ef:a6:1b:47:45:4f:f9:9b:f1:0c:07:e6:e7:20:cf:45:94:
         82:69:e8:dd:3f:7e:d2:9d:82:04:f9:55:a8:74:bb:cc:36:50:
         3b:5c:ef:a9:33:c9:65:4b:fa:8b:c6:ac:26:85:f6:3e:e3:0d:
         bb:4a:1d:82:d3:78:36:c9:7f:aa:3c:69:1b:ed:29:c4:78:67:
         a1:b1:42:02:30:56:bd:15:dc:ab:06:85:2c:91:6d:56:72:9c:
         72:6b:1e:65:3c:39:04:1b:e5:a8:08:19:fd:ed:9b:3d:e0:16:
         ff:51:e5:d7:c2:48:2a:ca:91:d0:d7:ea:b7:78:5f:9e:db:97:
         f8:f6:12:9f:75:ae:fe:54:f0:37:c1:43:e3:ee:da:64:d8:48:
         5c:ad:96:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:24 2026 by rpki-client