Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
File:                     dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft (raw, json)
Hash identifier:          KoZCEWb/6jsNfA1oWCRLg1o02VlFoK+uhCx3oYUUnfQ=
Subject key identifier:   60:5D:6E:9A:1E:53:6A:15:8F:C8:9F:1F:EE:1D:5F:AA:C6:0F:6D:D1
Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F
Certificate issuer:       /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
Certificate serial:       0732
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
Manifest number:          072A
Signing time:             Wed 22 Jul 2026 22:34:48 +0000
Manifest this update:     Wed 22 Jul 2026 22:34:48 +0000
Manifest next update:     Wed 29 Jul 2026 22:34:48 +0000
Files and hashes:         1: dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl (hash: nzNvVO9j97od4V+iSSLj+e20lrWhBDUlFPPZNJEGSNc=)
                          2: 87F6FDDC880911EB96D8882DC4F9AE02.roa (hash: nya9dv0nfdtT56zwG/wSYGtmj0pyX/94TyasLPF8tJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7E17, serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
        Validity
            Not Before: Jul 22 22:34:48 2026 GMT
            Not After : Jul 29 22:34:48 2026 GMT
        Subject: CN=6a614588-f767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5d:b5:94:44:ac:bc:82:bf:ec:8e:48:a8:07:
                    31:df:3f:60:75:9d:d0:31:c8:6c:6d:5a:96:15:81:
                    58:df:aa:43:3c:2b:98:21:fe:14:9f:0c:29:43:02:
                    ba:9c:4a:dd:da:3f:1e:f0:44:65:11:a9:45:c6:15:
                    6f:80:0a:a8:79:71:1a:85:17:70:ed:03:95:91:e1:
                    e6:b8:e0:47:78:69:45:c0:8c:08:3d:f8:ac:4c:d3:
                    5d:5c:45:7d:e0:98:3b:8e:d9:f2:fb:f0:ba:c4:fb:
                    23:59:bd:96:6f:7a:0f:88:43:0b:1b:2e:25:a8:71:
                    a2:49:eb:bc:20:28:f2:a6:34:ff:31:75:84:ec:59:
                    38:46:bb:cb:4f:1c:72:89:12:f7:ad:e7:ed:18:15:
                    5d:2e:b9:11:0a:b0:d6:e5:c5:45:ed:14:a9:c9:f9:
                    3e:a1:91:b0:a1:d6:0a:0a:e6:03:7f:85:9b:8b:9a:
                    b1:63:fe:1b:fd:33:0f:0c:a0:72:78:02:36:11:bf:
                    c7:a3:5b:3e:a4:18:10:48:f4:78:db:4c:48:83:79:
                    0f:f7:49:7a:c3:f0:40:6f:0f:65:e1:7f:a8:c6:12:
                    8e:4f:bf:9c:03:f8:59:de:61:c4:5c:05:ee:4c:9e:
                    e0:ae:59:bc:57:99:dd:e7:9d:c9:dc:ac:56:ca:d0:
                    1c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5D:6E:9A:1E:53:6A:15:8F:C8:9F:1F:EE:1D:5F:AA:C6:0F:6D:D1
            X509v3 Authority Key Identifier:
                keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e8:90:6e:ee:28:64:e0:df:7e:ce:2a:4e:f4:5b:e5:e7:42:
         7d:f2:04:a6:d2:96:8b:b3:10:6c:e9:b0:e3:12:83:0d:36:11:
         82:89:28:d8:5d:12:b7:e6:a5:5c:f8:c1:33:f4:90:04:20:1f:
         df:14:a2:13:94:fa:fe:1d:23:c1:0c:75:97:62:0a:21:65:ef:
         71:0f:6d:48:dd:1c:65:fc:a3:9b:8a:5f:31:27:90:14:90:3e:
         7a:22:b5:2f:4a:99:fc:1f:54:e3:f1:44:2f:ed:0a:92:30:f4:
         a7:2b:fe:ed:00:16:be:2f:8f:b5:19:88:d5:73:87:b3:e3:84:
         d3:66:1b:dd:ac:26:b6:a9:c7:1d:a4:42:89:9c:c5:6c:68:b5:
         3a:3d:a4:d8:aa:4a:da:26:90:8c:a1:76:75:f5:21:61:b8:ef:
         58:51:2f:ea:30:bb:38:30:86:bd:48:88:64:81:09:5c:62:c8:
         59:d2:7a:af:87:28:ae:c1:d8:86:bc:ac:6e:f3:a6:e2:fe:bd:
         b4:bb:5a:38:45:0b:b7:5c:00:5d:9a:df:00:6d:38:af:35:87:
         0d:47:6e:65:91:2c:af:f2:11:f9:a7:7c:82:f8:97:f5:df:4f:
         6e:56:6b:a4:89:52:35:6a:31:cb:5c:74:a9:20:c0:da:c8:e2:
         67:b0:a2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:05 2026 by rpki-client