Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
File:                     7TFghH3ErtktjFnRmEZbHL7y3yI.mft (raw, json)
Hash identifier:          gvMNFsIaimc3PqGVmbdM9AAUsgLx8oIoEh7MAqdNAZM=
Subject key identifier:   36:7F:15:5C:85:50:3D:8C:E9:F4:B5:48:90:56:12:C8:BA:7B:69:03
Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22
Certificate issuer:       /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
Manifest number:          018C
Signing time:             Thu 23 Jul 2026 05:50:51 +0000
Manifest this update:     Thu 23 Jul 2026 05:50:50 +0000
Manifest next update:     Thu 30 Jul 2026 05:50:50 +0000
Files and hashes:         1: 7TFghH3ErtktjFnRmEZbHL7y3yI.crl (hash: Am2VVdgBkRvs+px9BNJgPxtxmP/QxOUFNo5Opj5ozdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl
                          rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
        Validity
            Not Before: Jul 23 05:50:50 2026 GMT
            Not After : Jul 30 05:50:50 2026 GMT
        Subject: CN=6a61abba-2230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1c:4a:8c:bd:80:ef:92:4e:53:9f:c0:cf:e8:
                    d1:57:0a:1c:d2:92:85:84:e5:19:63:d7:7c:e9:3e:
                    d7:27:fd:3a:7a:17:7a:35:65:b2:7e:4a:5f:c4:01:
                    0c:6a:20:82:b8:e0:4e:3c:d5:e2:12:d4:7c:98:25:
                    72:6d:68:84:15:a7:41:04:d1:26:60:88:e1:32:ae:
                    f7:e1:79:90:44:60:ea:cc:2e:4c:ca:d1:b9:55:e0:
                    94:4f:da:4c:2b:21:14:fd:72:f7:56:d4:98:e4:d9:
                    b8:30:a4:27:33:ee:36:f1:60:b8:e1:4f:69:13:64:
                    2d:80:ce:03:00:bd:d6:44:31:c7:5e:6b:be:79:cb:
                    d5:06:3b:30:c4:0f:ff:13:89:5f:6f:f4:37:b5:ba:
                    d4:9e:33:5d:90:c0:42:f3:dd:a7:9b:f3:62:46:09:
                    9f:50:3a:07:a2:0d:2b:2e:24:07:d2:de:fd:2b:9d:
                    11:56:d9:95:4c:a6:e8:7c:50:70:38:64:2a:5e:fd:
                    a2:81:80:66:8d:f7:07:6d:d6:2e:2e:05:9b:87:36:
                    7f:9e:09:a5:7f:1c:79:2b:de:1c:e2:8f:98:49:62:
                    5a:b0:de:1c:43:2b:07:a0:ac:bb:df:69:51:ad:9c:
                    ff:08:1b:b7:f7:cf:1b:66:32:ec:25:4e:c9:22:a4:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7F:15:5C:85:50:3D:8C:E9:F4:B5:48:90:56:12:C8:BA:7B:69:03
            X509v3 Authority Key Identifier:
                keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:e8:ac:52:6a:0c:f2:fe:7f:55:72:8b:63:a1:0e:f5:1f:
         af:dd:8a:16:d4:1c:7a:f7:f3:b3:0f:54:8a:68:54:85:09:50:
         ce:04:ed:83:85:6c:f3:55:6c:4a:77:30:ba:c4:81:3a:77:a8:
         56:53:43:f6:16:30:d6:de:2b:df:dc:20:b6:57:f6:9a:e8:10:
         04:27:2c:a3:48:51:19:29:03:5f:0a:8d:26:3b:8d:62:76:f2:
         82:23:4f:f6:b4:ce:c0:3e:6b:44:6d:3e:cc:d4:4f:03:be:e4:
         c4:4b:48:03:23:42:87:84:00:b9:11:9c:e5:5a:e9:2a:a6:a4:
         50:f3:b6:ca:76:39:ad:d1:a3:53:78:a6:35:64:59:d7:34:40:
         a6:36:97:5a:af:3b:fb:6f:a3:03:84:59:f4:1b:12:51:e5:d0:
         0e:99:4b:c6:ed:ce:68:98:db:84:4a:d2:33:74:c7:25:42:d1:
         a7:17:c8:4b:07:71:25:1b:2a:7c:58:02:bd:84:19:c9:ab:36:
         e6:1e:25:7d:49:8f:48:9b:e0:29:8a:a5:ea:20:ae:9f:67:36:
         80:fa:13:d4:b6:bc:10:20:42:f9:cf:bd:be:5c:b8:58:70:35:
         d2:23:2b:2e:b8:22:de:94:00:79:05:f1:29:8f:b1:72:15:b9:
         9e:8c:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:50 2026 by rpki-client