Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft
File:                     8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft (raw, json)
Hash identifier:          vc/gy4TBG1cM0fm6MR30rA9/KgkOmF6v94/5o0DzeNg=
Subject key identifier:   F7:A4:E7:52:46:2C:F4:B1:B3:9F:7B:48:0B:24:94:85:34:BB:96:FC
Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66
Certificate issuer:       /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft
Manifest number:          7A
Signing time:             Thu 23 Jul 2026 09:46:29 +0000
Manifest this update:     Thu 23 Jul 2026 09:46:28 +0000
Manifest next update:     Thu 30 Jul 2026 09:46:28 +0000
Files and hashes:         1: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl (hash: 7eSEQVrVF8csMZeiMIMLdAenylDBTP6hTx1DsDT6m/I=)
                          2: F23251501D1A11F1B3DF5E87103D8C67.roa (hash: hgGzaQ1cBrypk5ytpqpU7GEjdnOL4DAirIqjQZnghOs=)
                          3: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (hash: 9RLAoZXHDep7ikUMuUeuOPjnOmGwHrIkt6BqprZz7KA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl
                          rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266
        Validity
            Not Before: Jul 23 09:46:28 2026 GMT
            Not After : Jul 30 09:46:28 2026 GMT
        Subject: CN=6a61e2f4-b161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:7f:df:55:83:f5:ae:79:3b:7b:99:b3:77:
                    33:fc:1a:29:4f:62:82:02:36:10:be:03:df:7f:33:
                    c2:e0:17:de:39:fc:88:8b:ee:92:b1:50:7a:12:b5:
                    37:09:9e:cb:eb:39:d0:e2:3f:8d:49:59:a1:54:29:
                    5f:2b:5a:0e:55:00:9f:e5:6d:6c:f1:15:a5:15:0f:
                    50:69:b9:dd:dc:61:aa:59:fe:2c:37:59:f6:73:9e:
                    23:1f:69:39:6b:50:c7:07:a3:b6:93:30:df:cb:44:
                    47:df:e6:fe:1d:f0:97:ec:15:82:f9:64:78:90:56:
                    2b:b5:8c:99:06:a7:14:bb:70:79:3b:8d:6b:2e:9b:
                    7b:0b:46:30:f9:6b:a3:81:8d:76:12:f7:4c:95:de:
                    ae:9e:6c:c5:48:57:fd:7f:4d:1d:ba:74:c0:a8:42:
                    4f:f1:5f:60:93:27:8a:46:1a:df:fc:7c:cf:72:a3:
                    b8:a3:6f:19:22:8d:fc:3c:49:2d:60:69:27:a3:ca:
                    a5:0a:ed:aa:54:12:75:0d:cf:18:29:fc:b9:e4:5e:
                    8f:ee:18:6b:2a:a5:db:af:4b:ad:a8:ed:e6:f5:2d:
                    31:a0:46:46:24:88:bf:81:a9:a7:1e:86:0c:9e:ab:
                    e8:9f:76:3f:42:21:fe:6b:10:42:95:3c:2b:6d:ac:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A4:E7:52:46:2C:F4:B1:B3:9F:7B:48:0B:24:94:85:34:BB:96:FC
            X509v3 Authority Key Identifier:
                keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:17:94:5d:84:f4:68:12:6d:84:08:15:5e:51:78:e5:5b:1a:
         20:f1:2f:53:66:12:5c:2f:cf:e4:1e:27:90:7a:7e:90:f5:3f:
         c6:72:58:35:9d:f7:17:93:55:77:d1:1c:87:33:6d:2f:51:a9:
         63:8d:2b:a8:36:8d:cd:3f:ac:4c:b8:46:c9:c2:62:7c:b7:5f:
         e2:39:a8:59:11:cd:3e:01:83:fd:e7:c3:b4:0c:17:a0:1e:7e:
         3a:de:3a:a5:0a:8e:75:ee:4c:50:14:46:64:13:09:3f:75:96:
         13:5c:ca:20:19:8c:82:57:e1:5e:4d:c5:b0:30:0a:bd:84:07:
         71:4e:ff:ba:12:50:0d:cc:5b:b4:e6:a8:aa:46:e4:bb:51:0a:
         06:cd:30:39:a6:62:b1:d5:e8:b1:d1:41:0f:b9:4c:69:22:4e:
         e0:58:f9:0b:2f:5f:e9:67:b6:b6:58:f4:d9:8e:04:8b:21:2d:
         a8:f2:80:06:06:66:60:93:d5:52:b4:7a:67:f0:9d:15:71:59:
         c2:35:51:9a:ce:4d:2d:fc:90:05:34:e4:1e:7f:47:1c:e3:13:
         e0:22:64:2b:ac:f6:6d:a1:7d:e8:08:91:56:2b:c7:43:5d:e1:
         d2:e5:65:26:5a:25:31:fb:3c:b6:67:22:9a:b2:43:6e:fd:38:
         7d:23:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:27:59 2026 by rpki-client