Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
File:                     gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft (raw, json)
Hash identifier:          7BHqys6yEGh3bersVzrkcD8IvTB43YqQ+07ohLFZuZ4=
Subject key identifier:   DB:D0:91:FE:5F:0B:EC:D4:E5:B6:98:A8:D8:6E:F7:93:F4:70:29:14
Authority key identifier: 80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
Certificate issuer:       /CN=A91B3316/serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
Manifest number:          71
Signing time:             Thu 23 Jul 2026 10:01:43 +0000
Manifest this update:     Thu 23 Jul 2026 10:01:43 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:43 +0000
Files and hashes:         1: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl (hash: NrpFW5ssAyLL22CsYiVMI6mNd2AYMQTpx9JuoRrbD7Y=)
                          2: 10B9878C243D11F1979A5CDAB9833773.roa (hash: zVqpLd7j0J+K3oi88p50tmt71zBHPtzbECf2RGbri0o=)
                          3: C96483E226B111F1829C23D9C3833773.roa (hash: xDH8tBv3qmVSVr8LAJxQ8B2DT/UTFhcoFnYkcj6WUeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl
                          rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3316, serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
        Validity
            Not Before: Jul 23 10:01:43 2026 GMT
            Not After : Jul 30 10:01:43 2026 GMT
        Subject: CN=6a61e687-10ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:c8:2b:01:b0:c3:e2:26:c8:ed:a2:91:82:
                    eb:f9:6c:3e:7a:ad:28:8a:64:b6:39:58:42:47:46:
                    b1:65:48:34:54:5e:76:c6:ec:05:19:b6:60:c6:31:
                    38:94:72:d7:01:ef:ff:cf:48:36:f8:ec:a7:64:2a:
                    97:e1:0b:f4:cb:c0:41:78:10:40:49:98:0b:93:b5:
                    04:9e:3f:c4:97:a8:9a:be:d4:92:37:58:7c:c6:cb:
                    4e:46:25:f0:99:ef:82:fe:c3:3f:b2:26:28:6b:c7:
                    93:c5:74:f5:ae:ec:06:c8:57:77:18:6d:1b:c1:b9:
                    39:59:62:9e:05:2c:81:b6:a8:7c:22:06:81:d4:3c:
                    10:14:97:fe:2d:db:c2:02:98:d3:4c:96:bd:75:c9:
                    55:19:45:55:5f:8c:b1:f9:be:91:11:03:81:a3:90:
                    2e:a2:e2:0d:05:de:ff:42:80:29:34:4b:17:42:d9:
                    36:70:81:66:65:5e:3a:28:1e:35:74:2e:67:6b:f3:
                    ce:d9:fd:5f:45:4a:81:1b:77:18:c5:32:eb:b7:c0:
                    2a:ed:5b:3d:00:1a:d9:84:b9:4d:61:6e:62:2b:ec:
                    86:2d:14:7b:20:1f:e9:2f:40:33:cf:7e:24:2c:8a:
                    af:20:5e:8e:de:f4:d1:42:7f:70:fd:57:c4:52:af:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:91:FE:5F:0B:EC:D4:E5:B6:98:A8:D8:6E:F7:93:F4:70:29:14
            X509v3 Authority Key Identifier:
                keyid:80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:98:35:eb:93:17:3b:db:30:20:ff:3e:0a:69:fc:74:41:45:
         37:35:63:8f:9d:a0:63:94:51:f5:cf:46:63:46:6a:37:df:38:
         e7:0c:51:47:ad:f2:d3:44:86:b9:87:24:dd:c3:82:dd:cf:0a:
         e4:8c:e5:2f:f5:8a:8a:ec:7a:6e:3a:ea:42:29:68:24:b2:c9:
         dc:fc:f5:ad:08:ea:6f:57:34:4a:fa:34:3e:a4:c5:c5:88:98:
         7d:88:6a:27:a8:c8:3c:a1:f5:53:37:59:25:50:63:54:98:11:
         09:77:6d:aa:d1:6a:40:a5:92:0b:80:70:6c:4f:97:33:b6:a9:
         d4:73:f7:c8:e6:9c:ad:8b:af:b4:44:d1:e0:c2:42:f1:49:fa:
         45:84:f3:86:31:3d:ea:1a:0a:c3:2f:d0:c9:ba:da:7f:70:23:
         ca:88:32:00:7e:be:85:f6:38:5e:d5:f6:1c:e0:60:f1:fe:5e:
         00:0f:bd:ab:d4:ea:c1:02:b1:13:5a:44:06:52:23:94:db:5a:
         d4:af:d6:37:3d:a5:14:bd:d6:92:4f:e3:92:73:7b:c2:3e:c9:
         3b:b1:46:22:f6:b8:72:c3:a9:1c:27:dc:27:e4:fb:ef:00:d3:
         7b:9f:5d:cc:b9:97:e9:4d:cd:e7:21:8d:c8:b4:55:47:33:25:
         97:db:9a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:41 2026 by rpki-client