Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
File:                     E0_EgN8WeugPs_TETe9qm6mZWpE.mft (raw, json)
Hash identifier:          MXakv/3Gohmg72sUq1cyGiUet0TP4TqDQW6oGYzH50g=
Subject key identifier:   C3:B0:DD:DF:BD:F2:A8:04:8F:3C:7D:1C:F1:A9:25:07:95:43:D3:1E
Authority key identifier: 13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
Certificate issuer:       /CN=A91736F5/serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
Manifest number:          72
Signing time:             Thu 23 Jul 2026 09:54:23 +0000
Manifest this update:     Thu 23 Jul 2026 09:54:22 +0000
Manifest next update:     Thu 30 Jul 2026 09:54:22 +0000
Files and hashes:         1: E0_EgN8WeugPs_TETe9qm6mZWpE.crl (hash: k/MxU0G0qlKa/tgLjtZMafaWXcfUN7C1Kr6YBGAkBo0=)
                          2: 17CFC78AFBA611F084AB06C85C6F56BC.roa (hash: EFiAI8HriNBWNG3CIQNK3bGdXLBEF+nSIaNzRbQQUMk=)
                          3: 378C2C42561111F1AB5F48A6BE833773.roa (hash: WN8uGZEuk7h+8OFa+x+lBRN+oylNBbQqtfAltmIrj+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl
                          rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736F5, serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
        Validity
            Not Before: Jul 23 09:54:22 2026 GMT
            Not After : Jul 30 09:54:22 2026 GMT
        Subject: CN=6a61e4cf-113a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:8f:a2:32:4b:6b:54:81:9d:ef:2d:05:6f:
                    81:79:77:b6:6f:53:6c:5c:8b:fe:f7:c3:99:58:15:
                    ba:e2:52:80:c8:77:da:37:d7:90:79:fd:c7:4c:4a:
                    9b:50:6c:e4:bc:d1:f4:0a:41:c3:c9:88:ae:91:30:
                    9b:a1:e2:97:5a:0c:db:b0:49:ca:c8:c6:fd:65:2b:
                    2c:3f:08:29:36:1f:93:34:8a:07:38:da:3c:ed:e4:
                    5a:da:23:b3:fd:a5:d7:95:5c:3c:27:ce:0d:cb:0a:
                    a1:cb:6e:ed:ad:50:3e:6a:fb:9b:78:d9:87:0c:36:
                    bb:da:c3:bb:a0:9f:7c:f9:79:a9:3b:50:80:f6:71:
                    ca:82:36:9c:64:e7:84:fb:77:65:9a:a0:eb:ff:f4:
                    d5:17:84:54:f7:07:a1:cf:65:95:26:bd:26:a4:aa:
                    4c:97:cd:fe:29:63:5f:56:9d:ef:ac:b8:0a:15:19:
                    0e:69:64:7c:29:64:d6:66:c1:49:76:09:aa:23:86:
                    be:53:57:3a:0b:2a:80:40:a1:36:b1:95:5e:43:83:
                    f2:48:03:35:bc:de:68:54:23:9a:f8:8c:df:e6:e1:
                    c2:2b:30:c4:9e:7f:17:49:65:ad:e1:9a:e3:10:db:
                    ec:aa:84:f3:22:49:b4:a0:05:c8:a4:0b:41:63:cc:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B0:DD:DF:BD:F2:A8:04:8F:3C:7D:1C:F1:A9:25:07:95:43:D3:1E
            X509v3 Authority Key Identifier:
                keyid:13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:63:6f:af:5d:3e:b0:cb:23:05:46:24:f7:a1:4d:eb:2e:03:
         18:12:20:14:c3:15:78:ee:3d:3a:15:3e:7f:9e:6d:72:ae:a5:
         a4:e8:d4:af:38:5a:52:5f:5b:4b:59:0b:c0:7d:93:99:14:c8:
         81:88:eb:d3:a9:c8:a6:3e:6c:d7:20:78:c3:57:f5:1e:ec:0a:
         bd:c5:b8:cc:32:35:fe:47:bf:e1:2d:8d:63:3e:3d:85:3b:08:
         27:7e:31:2c:51:ec:b4:4d:15:1d:7c:14:94:c3:49:0b:b1:6e:
         70:45:86:8b:fd:63:d2:d4:50:48:d7:56:88:72:c5:06:58:3a:
         96:f0:84:7b:c8:24:83:dd:d5:81:07:da:09:96:05:09:6f:7b:
         39:79:a5:ea:02:7b:61:7f:45:5a:a6:23:65:6e:c5:df:16:8c:
         55:3e:8e:1e:58:ee:d3:f0:18:b8:07:a2:b9:d3:88:09:f8:f9:
         26:c8:a0:f0:52:6e:3a:2a:fc:65:be:43:67:a0:60:ac:63:70:
         25:fa:21:23:ec:aa:95:b5:74:e5:2e:72:45:37:ab:d8:e4:37:
         de:b1:b2:52:d3:9e:19:3c:34:4a:63:e5:8d:4f:16:6e:14:40:
         8c:84:a5:92:02:15:d9:4a:b0:e7:76:b2:ea:60:30:8e:e8:04:
         01:e1:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:47 2026 by rpki-client