Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
File:                     E7pcaYHZl-kImp3nvIorcpwiE2g.mft (raw, json)
Hash identifier:          jvDkRqU0H2OJAw+iKZfAZlip5U71hJ89TaQ+GjqgaPQ=
Subject key identifier:   C7:35:4C:AD:C1:92:0C:F1:39:91:DD:17:27:C7:01:77:2D:06:51:79
Authority key identifier: 13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68
Certificate issuer:       /CN=A91AE7C5/serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
Manifest number:          47
Signing time:             Thu 23 Jul 2026 10:24:29 +0000
Manifest this update:     Thu 23 Jul 2026 10:24:28 +0000
Manifest next update:     Thu 30 Jul 2026 10:24:28 +0000
Files and hashes:         1: E7pcaYHZl-kImp3nvIorcpwiE2g.crl (hash: mBed98PaSthshKQ9RHDjLo5X8DPOvb8g1D71uFHrTVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl
                          rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE7C5, serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368
        Validity
            Not Before: Jul 23 10:24:28 2026 GMT
            Not After : Jul 30 10:24:28 2026 GMT
        Subject: CN=6a61ebdd-c690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:72:75:9a:db:14:b0:50:c3:82:d3:f6:e7:
                    64:16:22:21:d4:80:8e:d9:0b:6d:00:75:05:cd:c2:
                    50:df:b1:ea:ca:38:d8:c7:fa:de:dd:e3:ca:e3:72:
                    8c:82:c1:02:7b:ad:1e:dc:b0:89:79:ae:bc:b8:72:
                    58:61:c5:b4:74:17:8a:4e:54:78:df:3a:0d:7c:c2:
                    82:ec:8c:eb:08:b3:4d:35:c3:16:62:e0:ca:38:13:
                    3f:30:6f:f9:de:14:44:90:72:ad:db:0f:e8:60:09:
                    18:ad:af:31:da:9e:12:0d:89:5e:a3:a1:13:0f:8b:
                    cf:93:e7:ac:53:2e:87:7d:11:7a:11:f4:dc:cd:93:
                    b9:0d:ab:2c:4f:d2:17:9e:a8:20:46:f6:88:44:7c:
                    39:22:4f:73:cd:af:09:a3:02:8a:97:26:38:0d:f7:
                    3d:7a:05:b9:3b:4f:e9:86:bf:81:fe:37:67:ca:19:
                    bc:5b:c7:33:87:01:3e:5b:36:42:f6:86:9a:3f:ab:
                    b6:99:b4:4d:9a:92:62:11:0d:bc:ec:ef:fa:a1:5a:
                    2c:68:9e:f5:3c:68:86:34:cc:b2:82:2a:4a:31:6e:
                    58:19:7c:45:3e:09:9e:09:2c:72:dc:24:17:40:42:
                    f0:97:a2:0a:7d:de:0d:36:0a:e3:b4:bb:07:ec:ce:
                    87:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:35:4C:AD:C1:92:0C:F1:39:91:DD:17:27:C7:01:77:2D:06:51:79
            X509v3 Authority Key Identifier:
                keyid:13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ce:07:10:ef:a3:87:38:6e:3a:ec:fd:34:6c:34:73:04:a5:
         93:d3:31:ec:9f:5f:27:09:20:54:e6:78:1a:d8:c2:5a:98:17:
         72:02:c7:f9:00:ee:63:7c:cd:9a:7e:14:ff:91:d8:6e:a7:cc:
         79:9a:d4:c6:e4:b9:d7:6a:9c:e4:0f:46:b2:69:81:8d:2a:47:
         fe:41:59:9e:21:59:7f:84:6a:38:6e:15:56:55:33:dd:47:44:
         59:45:31:8e:94:7f:f8:d3:0d:19:23:b4:49:89:96:78:e5:e7:
         8f:7d:18:9b:a6:40:f1:36:93:bd:b5:f0:c8:89:23:29:21:7c:
         a8:5b:6a:25:38:cf:df:4c:92:3e:bb:45:b6:ba:56:bb:75:ab:
         a2:e7:ab:f8:dd:94:02:7d:ee:48:23:df:95:24:f4:c9:89:ea:
         56:df:f7:f3:d2:d0:90:b4:fe:58:af:0a:0a:7c:d7:5c:b4:06:
         3f:f8:ee:ac:92:2c:2c:33:3a:98:6d:c2:60:82:86:14:c9:f2:
         11:a9:a4:6b:ce:a6:a4:b7:9b:b9:b8:74:2e:db:02:fb:38:7a:
         92:f7:78:03:ba:d0:de:25:4e:c5:d0:ba:f9:4a:75:0b:18:19:
         68:cc:c9:5c:77:48:ad:28:97:ab:04:2a:0e:36:f0:dd:ed:ca:
         2d:ca:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:21 2026 by rpki-client