Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
File:                     tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft (raw, json)
Hash identifier:          c4J5NLAz1jNFvQD0+NFt7OgeWfefh5v8TENZ+k3Wpvw=
Subject key identifier:   8C:6C:68:76:FF:06:4E:E9:58:08:4C:D8:6B:8D:D8:DE:04:58:45:00
Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB
Certificate issuer:       /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
Manifest number:          7D
Signing time:             Wed 22 Jul 2026 21:06:29 +0000
Manifest this update:     Wed 22 Jul 2026 21:06:28 +0000
Manifest next update:     Wed 29 Jul 2026 21:06:28 +0000
Files and hashes:         1: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl (hash: sAkyoQsEu4U3TSErz2+zQGCU0kx0oaz2DSKYxerZbno=)
                          2: 527245ACD42311F0A8A37057C4F9AE02.roa (hash: 90KcSYGKJ6Yif8EcJa/nVE5hc/e19RIZHwPBzlm+xR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB
        Validity
            Not Before: Jul 22 21:06:28 2026 GMT
            Not After : Jul 29 21:06:28 2026 GMT
        Subject: CN=6a6130d5-d022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d4:56:8b:89:ca:6f:2f:ad:41:e4:a4:dc:2b:
                    00:95:21:cb:49:10:cb:40:d8:8d:8b:51:69:69:b9:
                    9e:a3:20:85:15:1a:7c:7d:b9:07:ab:8e:bb:8c:69:
                    ef:14:58:1a:7b:f0:4f:b4:b4:aa:79:31:03:9b:b7:
                    ca:8c:fc:f2:99:7c:5e:49:e3:fa:23:2a:0d:51:99:
                    04:44:e6:a9:00:e7:a7:b0:a8:9e:c3:d8:83:f0:34:
                    f4:1a:cf:e8:69:69:28:b9:36:a0:f8:30:00:35:4f:
                    71:fe:aa:f1:48:65:f3:bf:ba:b9:f9:b2:17:5c:20:
                    03:b5:1c:3a:20:c5:31:ea:05:d9:fd:4d:e2:4a:1d:
                    65:c9:ca:b6:41:6f:b2:08:84:c6:57:b7:4d:02:1a:
                    a2:52:f8:4e:b7:05:a2:12:b0:46:e2:ab:5e:3f:36:
                    35:23:4d:a6:00:6d:29:99:bc:f8:6f:0f:8d:d4:5b:
                    b5:be:f0:5a:31:fd:c1:a6:cf:4a:69:ff:ca:00:66:
                    4d:8b:da:ce:d3:fe:3a:8c:c2:c1:5e:77:38:f7:5a:
                    4a:78:f3:2e:5f:26:66:6e:bc:21:7d:65:42:e5:e3:
                    75:dd:03:41:aa:3b:42:d2:f8:eb:2d:75:c8:ed:df:
                    8a:9f:d0:61:fb:5e:0a:8b:6a:88:26:0c:1b:50:2e:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6C:68:76:FF:06:4E:E9:58:08:4C:D8:6B:8D:D8:DE:04:58:45:00
            X509v3 Authority Key Identifier:
                keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:cf:59:fe:b8:83:22:a2:a8:4b:3b:6b:5d:ba:e4:b8:5e:8b:
         ff:13:9e:ab:8b:66:46:72:0d:ee:b6:54:96:a6:b2:ce:e5:1d:
         ce:f6:2b:af:ed:29:a0:e1:a8:9a:2b:52:5f:b4:e1:1f:e3:b3:
         40:88:1b:22:ba:eb:99:f9:da:e6:af:60:0e:5d:c0:44:e2:c7:
         65:a0:1a:29:18:47:43:93:8e:56:8e:7a:32:43:06:97:e5:15:
         3f:a5:78:7a:3d:23:bc:51:6b:01:8a:03:72:4a:3c:04:51:63:
         30:c3:9b:16:54:d2:7f:5d:22:70:19:e1:bc:13:4b:af:dd:07:
         09:e5:18:05:17:f6:19:8d:3c:5f:23:31:27:65:65:68:aa:6c:
         28:1f:e7:14:a4:e5:13:a0:d8:c7:78:80:d2:3c:20:85:3e:2f:
         0e:34:9b:ec:ac:1a:5d:cc:47:b8:52:59:02:4e:c8:b2:3d:c3:
         44:f3:62:a8:3e:d6:ab:52:fd:16:7e:28:ed:c1:25:e0:2d:a9:
         ee:7b:cf:3d:55:c0:d5:f2:01:fd:3c:d5:37:25:96:e3:60:b0:
         29:cf:6a:ef:5c:ae:cf:32:1c:8f:a3:98:5b:b4:67:ec:f3:f4:
         80:ff:fb:88:dc:af:7f:80:09:60:c1:43:ca:69:84:63:1f:8a:
         a8:bb:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:41:35 2026 by rpki-client