Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
File:                     7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json)
Hash identifier:          DV7VT87KuctTIIKtWdwDJnCwzQbRCiQvjYgnUxXDsjs=
Subject key identifier:   1B:B5:EE:E9:3D:64:ED:9F:C4:DC:79:00:A6:7A:F1:FD:D0:8B:91:45
Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
Certificate issuer:       /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Certificate serial:       355B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
Manifest number:          4171
Signing time:             Wed 22 Jul 2026 14:51:12 +0000
Manifest this update:     Wed 22 Jul 2026 14:51:11 +0000
Manifest next update:     Wed 29 Jul 2026 14:51:11 +0000
Files and hashes:         1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: y0wcMSdzgIZH+OCqFMVMgYOgdDUk7Odo+noAMM6jT+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13659 (0x355b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AAA, serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
        Validity
            Not Before: Jul 22 14:51:11 2026 GMT
            Not After : Jul 29 14:51:11 2026 GMT
        Subject: CN=6a60d8df-2474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:22:9e:f3:27:df:87:6f:2c:c3:97:df:dd:
                    31:42:da:7d:fc:84:62:49:7b:b8:db:99:9a:f1:1a:
                    cb:50:f4:bc:29:d6:40:43:0c:9c:ee:77:31:5a:5c:
                    66:9e:fa:13:dd:ac:23:a1:94:3b:a3:15:29:b4:bd:
                    df:79:9a:e3:a1:02:37:8d:37:f7:9c:4c:a4:05:9b:
                    fe:22:26:a7:ef:95:3c:57:28:89:07:65:42:c0:81:
                    0c:e7:17:4b:a9:44:01:80:19:ea:20:e7:a8:f4:f5:
                    d9:a3:6b:b3:70:bd:4b:09:64:13:d5:16:17:95:f0:
                    3b:19:3e:53:90:6e:97:09:1b:c6:85:ed:2c:a1:f3:
                    9a:35:ad:13:bd:37:42:49:69:71:11:42:3e:15:91:
                    30:f8:e9:59:93:6d:b9:15:bc:f6:7a:d8:13:40:1f:
                    ea:b5:13:5c:a6:4b:23:93:8a:72:6e:73:73:53:c3:
                    f9:ce:ee:53:82:bc:ee:66:ea:3d:f2:bf:bb:89:59:
                    13:49:98:d6:e3:7b:2a:be:d1:3f:5f:83:24:7b:93:
                    22:95:9e:b0:3a:e6:70:82:78:d4:5f:5d:e7:d9:f3:
                    72:75:ef:ff:d7:13:c1:61:d7:e3:36:fc:9e:b3:80:
                    22:5c:32:0e:b6:3c:af:fe:49:0a:0c:46:40:67:b9:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B5:EE:E9:3D:64:ED:9F:C4:DC:79:00:A6:7A:F1:FD:D0:8B:91:45
            X509v3 Authority Key Identifier:
                keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:9e:0a:0a:48:c3:9b:c8:37:b3:31:1a:e6:45:f1:92:ba:
         fb:11:0b:8d:cb:cd:7a:c3:29:7e:47:6e:39:de:4a:b8:db:ef:
         67:1c:15:4b:cd:f1:18:b3:fd:c4:70:4d:82:3d:bc:7f:fa:fe:
         c9:ec:6d:1f:cc:f2:c0:09:a6:10:f0:a1:2f:c6:59:60:cb:da:
         63:3c:23:96:e4:0a:4c:76:0b:f2:b4:c9:e9:ee:5b:fb:fb:df:
         98:7e:80:84:cd:40:89:c5:e3:5e:fe:f3:ff:4b:61:98:a5:c9:
         2c:ff:24:57:61:9c:8f:8b:22:29:c8:17:2e:dc:81:af:ac:fa:
         da:b2:17:6e:7f:bc:42:d4:89:f6:62:60:22:26:f4:f6:ef:2f:
         a3:56:6f:70:f8:75:26:6c:bc:4f:2a:7a:a5:a4:33:6c:28:22:
         7b:48:8d:31:a3:4a:c3:24:f3:b7:a4:5b:66:fb:10:ff:35:20:
         86:b5:e3:a1:0f:34:58:92:9f:cb:68:b3:87:29:d1:77:f9:10:
         9d:54:20:26:ac:61:b6:ef:c7:87:eb:c6:ef:66:4a:70:2f:99:
         46:07:30:21:22:92:b8:ca:fc:b8:c7:2b:97:ed:39:80:b9:22:
         c3:51:a2:94:04:33:44:d6:06:53:48:5c:2c:58:65:ae:6e:9a:
         bb:e9:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:39 2026 by rpki-client