Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft
File:                     7wP9th1kvpTlo3YNxbxgjOSr0r4.mft (raw, json)
Hash identifier:          mYX5AGTzpD0y0YBrekLu+81caY0FwJGJu7nMMbm2ou0=
Subject key identifier:   AB:D0:90:38:D6:03:59:8D:02:C4:31:93:B7:91:DD:BF:BA:34:64:95
Authority key identifier: EF:03:FD:B6:1D:64:BE:94:E5:A3:76:0D:C5:BC:60:8C:E4:AB:D2:BE
Certificate issuer:       /CN=A9189C03/serialNumber=EF03FDB61D64BE94E5A3760DC5BC608CE4ABD2BE
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wP9th1kvpTlo3YNxbxgjOSr0r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft
Manifest number:          5B
Signing time:             Thu 23 Jul 2026 10:07:53 +0000
Manifest this update:     Thu 23 Jul 2026 10:07:52 +0000
Manifest next update:     Thu 30 Jul 2026 10:07:52 +0000
Files and hashes:         1: 7wP9th1kvpTlo3YNxbxgjOSr0r4.crl (hash: POxXhTkPE/6lgivEXwRoL77he1XjSr12wFLGp7VsK6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.crl
                          rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wP9th1kvpTlo3YNxbxgjOSr0r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189C03, serialNumber=EF03FDB61D64BE94E5A3760DC5BC608CE4ABD2BE
        Validity
            Not Before: Jul 23 10:07:52 2026 GMT
            Not After : Jul 30 10:07:52 2026 GMT
        Subject: CN=6a61e7f9-dd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:b3:75:8b:62:26:0e:9e:6d:a7:53:32:59:
                    6d:eb:26:66:f6:0e:9c:b7:c0:9e:b4:dd:6e:05:d6:
                    13:c8:83:5a:52:3c:17:82:c3:a1:3f:27:31:9b:b0:
                    13:1c:a2:3a:37:a6:f1:da:ae:33:50:cf:03:61:d2:
                    7c:e2:64:ae:44:68:71:d1:20:19:5a:44:fb:1d:db:
                    fe:51:dc:e0:9e:9f:fd:07:23:65:6b:18:75:d1:60:
                    23:c6:d6:b7:87:a0:3b:47:b0:ad:0e:10:e0:e9:14:
                    95:f5:07:d2:29:96:7f:4d:ee:a4:30:22:43:60:5d:
                    79:a7:44:a9:4f:0e:61:96:7d:78:d5:a5:09:85:fb:
                    c0:23:89:16:f8:72:5c:e6:bc:51:c8:66:61:61:80:
                    1d:49:af:86:60:ec:b9:cc:ae:4d:96:84:9f:cc:e4:
                    20:f1:5c:9e:4a:c6:42:2f:83:c5:5d:df:d2:59:15:
                    ba:cd:d3:e4:0c:41:64:6b:60:c0:67:6c:79:e9:32:
                    64:5b:e1:ee:70:24:16:b1:43:c0:87:10:d2:cb:7c:
                    60:1d:6a:78:b1:32:6a:c2:cb:6f:bf:38:db:0f:98:
                    16:45:61:5c:e3:93:f7:9a:82:4e:20:dd:15:d3:b1:
                    d1:5e:1f:ac:4b:1c:07:41:f8:ab:37:1a:06:66:d5:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D0:90:38:D6:03:59:8D:02:C4:31:93:B7:91:DD:BF:BA:34:64:95
            X509v3 Authority Key Identifier:
                keyid:EF:03:FD:B6:1D:64:BE:94:E5:A3:76:0D:C5:BC:60:8C:E4:AB:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wP9th1kvpTlo3YNxbxgjOSr0r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:21:0c:9b:f3:e3:75:e6:84:c2:dd:da:5a:ec:c7:07:e5:76:
         ce:f6:db:39:5d:87:4d:72:c3:0e:7e:d1:94:d8:52:fd:1b:ea:
         7d:78:60:4c:ca:61:5b:ce:11:1b:86:b1:90:66:38:06:52:c8:
         a8:91:4e:6b:c8:7d:06:2a:f0:f4:3c:c2:9b:65:0b:9f:42:8d:
         b1:35:7b:e0:c6:a6:f4:f5:24:1a:29:ea:45:20:c2:60:b7:dc:
         4f:5a:ee:f3:76:8c:37:b6:c9:2e:22:32:b2:71:af:35:6a:48:
         96:09:e7:82:f3:d4:91:5d:da:70:01:88:e0:92:32:c7:79:42:
         e4:38:e0:d7:37:8a:ca:e4:cd:59:53:ec:e2:96:5a:58:e6:d5:
         ff:81:2d:89:bc:2b:92:a7:17:30:3b:af:7e:95:09:06:d2:8f:
         78:cd:e2:f8:88:d5:d2:6b:ca:fb:fa:3b:3d:a5:57:c2:3d:8f:
         48:89:7a:41:d8:66:e3:db:48:b9:e0:aa:ad:5a:d7:8c:bd:34:
         d9:22:0c:33:0d:a9:29:54:c6:27:45:f3:2c:71:5f:25:be:98:
         04:a8:1c:32:8d:73:1a:7f:34:7f:cc:fc:f3:44:71:c1:0e:f7:
         f9:15:49:81:3c:57:69:81:35:09:f1:53:73:ec:83:88:e9:92:
         7d:7a:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:23 2026 by rpki-client