Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
File:                     7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json)
Hash identifier:          d3WpN7wHPeeKBf+QMa/hEJFBk6WVM09DNScrR1KxvSk=
Subject key identifier:   43:BB:01:E5:F4:14:F0:0B:32:A0:1E:26:34:4F:BD:5E:5D:0F:19:82
Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E
Certificate issuer:       /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
Certificate serial:       07DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
Manifest number:          07CE
Signing time:             Wed 22 Jul 2026 21:58:52 +0000
Manifest this update:     Wed 22 Jul 2026 21:58:52 +0000
Manifest next update:     Wed 29 Jul 2026 21:58:52 +0000
Files and hashes:         1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: qmkIYyeRs65kdg4JSbKwSx2GpiFfuVbDvz5S9KrPKNA=)
                          2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: v0xqswgei3klkM48UKau+ZFSqGoqNY8ubfB94GPpoto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl
                          rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
        Validity
            Not Before: Jul 22 21:58:52 2026 GMT
            Not After : Jul 29 21:58:52 2026 GMT
        Subject: CN=6a613d1c-3d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:f0:e7:23:fd:5a:6f:6e:b9:27:4b:7c:61:
                    72:40:c7:36:35:77:52:b3:14:94:b2:89:e4:83:c6:
                    d7:45:df:1b:9f:f7:6c:69:2f:15:06:a9:88:e2:11:
                    f1:0d:d4:eb:ff:e3:51:66:32:9f:b9:19:14:43:0e:
                    b8:27:b1:1c:23:2f:68:cc:2d:df:2e:ba:54:93:9f:
                    1b:ba:91:e2:b9:3c:71:54:1b:93:13:56:ac:b4:be:
                    82:0b:2b:e5:25:0c:e9:34:76:ae:38:41:1d:e9:51:
                    6e:6b:a1:71:1f:dc:c6:68:cf:9f:eb:af:7b:5a:0a:
                    2e:a7:e7:27:78:51:11:1a:85:06:43:0b:33:f4:56:
                    9f:7b:de:c6:dd:33:62:16:eb:71:b6:55:f6:c2:cc:
                    1d:4c:c7:a2:a4:bc:3f:2e:8d:d3:b3:13:0e:ff:2a:
                    64:d7:a7:58:ad:e8:d3:6e:63:d4:ad:57:6d:7c:1f:
                    a1:7f:dc:02:db:1d:d0:e0:fa:f8:14:02:ad:5e:2e:
                    7d:e1:18:7a:ed:d4:ce:51:92:ff:0d:98:78:c7:13:
                    36:48:36:ec:3d:8e:15:36:04:d6:81:ca:3c:73:cd:
                    f0:e6:c9:b0:64:52:a4:63:be:82:31:ea:bd:21:89:
                    b1:31:96:97:0e:1c:7b:1e:f4:38:88:9e:51:99:55:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BB:01:E5:F4:14:F0:0B:32:A0:1E:26:34:4F:BD:5E:5D:0F:19:82
            X509v3 Authority Key Identifier:
                keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:82:b0:03:23:a0:11:9a:d3:57:8f:7b:ba:cb:b3:06:e9:ba:
         eb:a7:08:b0:1d:28:af:27:4a:59:f6:91:a2:1a:d1:6f:1f:2d:
         c2:fb:fa:d4:21:e5:9e:ac:5f:63:8a:a9:5a:22:65:d9:d2:a7:
         a2:78:7f:2d:16:c3:5c:72:d8:f4:59:58:2d:b4:83:d7:da:30:
         af:78:c0:c8:c4:af:59:24:98:8d:92:be:9b:04:27:8f:03:dd:
         03:57:c1:d5:b5:18:8a:4d:0c:b6:55:49:3d:5c:31:d5:11:c1:
         5a:8f:0a:cb:9c:88:3c:9e:9d:42:c2:5e:c7:7a:56:2e:45:79:
         42:ca:bd:66:24:17:aa:49:aa:78:e5:62:25:9b:8b:48:2d:94:
         42:00:30:c1:d5:c8:6c:49:71:b3:9b:65:c3:cf:bf:aa:74:44:
         03:d9:a1:10:21:3a:bd:fc:f7:fd:93:85:28:e3:5e:78:97:15:
         ba:f3:4e:ea:86:bf:ac:cc:0e:59:76:3d:3b:18:89:14:55:42:
         25:ef:33:9b:55:a3:01:0c:d5:3d:d2:65:25:94:aa:26:0a:8f:
         70:ea:c6:f5:96:3a:02:8b:0c:e4:fb:1c:f0:97:07:1b:cc:bd:
         20:1d:04:6f:3f:5d:5e:dc:a0:47:46:fe:29:73:01:ca:03:ea:
         99:21:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:30:18 2026 by rpki-client