Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File:                     7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier:          9SYDTIf2qvjyo8BQbdFgFOVq+3Iackol6Xto/BjyX9o=
Subject key identifier:   3E:FE:F3:8E:FD:3D:C1:CB:59:AB:B8:05:D6:A6:F5:0E:4B:C1:C1:D6
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer:       /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number:          0123
Signing time:             Thu 23 Jul 2026 07:24:57 +0000
Manifest this update:     Thu 23 Jul 2026 07:24:57 +0000
Manifest next update:     Thu 30 Jul 2026 07:24:57 +0000
Files and hashes:         1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: i/mlgqgXvQ2i6U0iH/TaGH2vvGlvpKNo9R5B1bYUEbE=)
                          2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: zNeCIz79QyLjKaLa6KZk2f88rwvGe93u3cvB8Yfkn+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
        Validity
            Not Before: Jul 23 07:24:57 2026 GMT
            Not After : Jul 30 07:24:57 2026 GMT
        Subject: CN=6a61c1c9-69e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:b8:36:38:c7:5e:3c:11:a6:5f:ad:ba:2f:
                    f4:b6:47:91:ff:52:6e:61:42:ed:bd:0f:f3:f5:6c:
                    56:4b:c5:4c:99:a8:e7:18:b3:f3:39:0d:a8:a6:e4:
                    14:2d:81:21:e4:e6:32:bd:3d:5c:86:76:49:cf:62:
                    ce:89:ef:84:ae:e8:98:f1:60:5d:fb:1b:11:2f:03:
                    a7:05:8c:f2:54:83:90:64:61:78:81:ac:ec:b3:7e:
                    0a:35:c4:5d:1b:c2:80:5e:65:c5:c5:63:24:e0:fd:
                    4e:53:47:4a:7a:89:30:59:fd:60:61:62:3d:58:a4:
                    a0:8f:8f:bb:61:15:20:78:92:05:71:0b:d8:3c:cd:
                    bd:56:38:d5:9c:05:79:08:92:7f:84:52:99:16:63:
                    90:79:d1:c3:e1:49:2e:28:ed:41:30:a5:e4:12:c7:
                    cf:77:a5:20:39:20:48:fd:bf:0b:a3:ba:de:64:68:
                    05:08:87:da:f0:5f:a9:83:9e:89:c9:3c:44:2f:e6:
                    da:c0:91:d0:2c:b7:f7:f8:87:65:8f:b7:d1:c7:e5:
                    bc:d8:ea:a7:e2:14:f2:9d:57:d5:52:cd:18:52:c7:
                    d9:9b:07:ba:30:14:25:34:14:f0:c5:4c:5b:bd:7e:
                    08:49:56:45:41:b0:06:16:8b:07:3d:fc:0b:09:73:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FE:F3:8E:FD:3D:C1:CB:59:AB:B8:05:D6:A6:F5:0E:4B:C1:C1:D6
            X509v3 Authority Key Identifier:
                keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:01:52:24:ef:85:c9:07:24:b8:9a:da:16:b9:81:8f:2c:d1:
         d9:93:d0:63:10:2e:a6:67:b8:52:8b:1c:ff:a0:05:bd:f1:be:
         22:76:0f:fd:d5:14:92:66:60:0a:98:36:08:0f:47:8d:09:24:
         70:69:1a:f9:d3:3f:32:96:97:c5:d8:96:a2:dc:0b:08:a1:ee:
         e6:c9:3d:13:3d:f9:ef:61:de:7d:ce:93:ce:75:0c:ed:67:a8:
         97:21:df:33:d1:95:df:cd:17:ad:5e:2c:f2:0c:72:56:d3:fd:
         9b:66:89:bf:68:35:a5:29:f4:50:05:94:49:b3:a8:8a:9a:22:
         d1:54:74:ab:61:4e:a1:c1:a3:c4:c0:b8:bc:7f:a6:ab:61:83:
         1b:46:61:cf:97:3f:b9:e5:30:06:69:73:6d:19:f0:57:f6:d1:
         3a:3a:0c:14:c4:d4:ba:5e:35:bf:5d:91:77:d2:d2:79:44:51:
         24:6f:0a:3c:be:7e:c0:8f:8a:95:78:0b:13:fc:80:5b:1d:99:
         54:ad:86:a3:de:91:6d:0c:59:af:d5:80:df:1d:4f:84:50:e0:
         f0:af:af:b3:08:79:9a:da:27:b0:eb:81:0b:ea:2f:fa:c8:f3:
         83:9a:46:68:c7:19:62:17:a0:1c:74:f9:15:a0:1e:db:cc:23:
         e8:1c:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:20 2026 by rpki-client