Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
File:                     7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json)
Hash identifier:          ms1w7lR82Mj8b+Ya2NSsIhJ/Vxy2mI7WGFslyigwFUw=
Subject key identifier:   B8:6F:84:74:28:B5:64:AB:E1:A0:F7:7D:F4:F4:4A:23:D3:4E:08:CF
Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
Certificate issuer:       /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
Manifest number:          E7
Signing time:             Thu 23 Jul 2026 08:16:10 +0000
Manifest this update:     Thu 23 Jul 2026 08:16:10 +0000
Manifest next update:     Thu 30 Jul 2026 08:16:10 +0000
Files and hashes:         1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: 5jMdmSbjpFHeJ48RP0PDZ+7yZcrji/lAWsQI//Rp9SQ=)
                          2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: wZY9Z53hRF1cqshdzTDBoy+lSHOx94QEX/gy6wO+8wM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
        Validity
            Not Before: Jul 23 08:16:10 2026 GMT
            Not After : Jul 30 08:16:10 2026 GMT
        Subject: CN=6a61cdca-a0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:48:b9:79:81:59:73:4a:1a:82:7d:8d:9b:43:
                    e0:fd:8a:38:89:85:a2:4b:a3:de:d2:06:11:9e:57:
                    aa:28:e0:36:56:1a:41:15:60:e2:70:80:2a:28:45:
                    cd:9b:b6:c5:c9:8b:a4:2d:a8:78:13:a7:45:25:85:
                    70:89:8e:96:c4:c2:0e:be:76:8f:99:f9:20:63:7a:
                    f7:61:f0:bb:07:e4:96:bc:80:c7:98:31:3c:5c:95:
                    ac:48:9f:99:49:4f:41:ac:74:53:34:6f:73:d6:27:
                    45:21:d4:0b:d6:02:30:08:49:cc:17:c4:97:b8:d5:
                    b6:66:10:fd:cc:6d:f5:f7:1c:31:4b:0e:fd:12:45:
                    7c:58:53:25:70:9f:76:6b:2a:0f:ad:30:cc:80:16:
                    db:63:c3:ca:bc:3c:9a:0b:6a:0b:f4:e6:1c:c7:87:
                    8c:d9:76:14:ad:02:d8:74:ef:10:5d:d2:b1:22:af:
                    30:b1:33:9e:c2:d7:35:26:4b:31:01:b1:e2:28:af:
                    97:73:36:b3:3e:69:70:cc:39:ab:f2:57:bd:9a:fe:
                    43:db:69:a0:f0:b7:36:72:3c:5f:0b:f6:57:36:55:
                    76:8c:4f:ee:a3:e5:0f:fe:4b:e5:84:52:35:c9:b8:
                    02:bb:62:02:97:14:a0:9c:9b:d7:5b:56:15:b8:d2:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6F:84:74:28:B5:64:AB:E1:A0:F7:7D:F4:F4:4A:23:D3:4E:08:CF
            X509v3 Authority Key Identifier:
                keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:bf:df:86:b6:01:92:10:85:0f:be:3b:05:da:0d:9a:03:
         d0:05:95:87:e0:79:fd:f4:0c:aa:e1:7f:f9:a5:04:4d:03:05:
         25:b7:65:ad:98:0b:62:2e:59:b9:ad:03:6c:a7:fe:5c:1f:14:
         15:e9:d4:90:9c:b4:58:6d:e6:21:a1:b6:d3:f1:51:46:0e:47:
         69:da:8f:59:56:52:7e:0a:d9:56:96:17:c0:54:1e:76:f0:04:
         44:5a:c6:ba:a5:2d:a4:f3:a7:73:4b:4f:c2:0b:34:dc:1a:59:
         b9:af:c9:01:ac:de:48:20:08:f9:eb:e3:39:00:08:7e:34:0c:
         d9:4d:92:01:d3:c2:7d:ed:24:4b:75:15:26:48:8a:b2:00:d2:
         20:30:53:41:a5:42:df:18:30:91:49:dc:de:33:e4:57:5f:d2:
         f6:03:36:e3:53:91:9e:4f:f9:5b:60:3d:43:a7:7a:c2:3d:cc:
         4b:ae:2b:2d:f8:99:83:cb:26:09:31:3a:d1:31:13:15:dd:a0:
         d5:53:8d:33:17:4d:b7:0f:3e:79:86:1b:a0:ec:2b:18:b5:0d:
         63:7a:01:49:f8:dd:ca:a7:82:87:cd:0b:f9:62:9c:37:e9:0c:
         4e:b8:39:8f:5e:2f:09:e6:c5:50:7b:b8:41:c0:82:98:28:63:
         d2:83:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:23 2026 by rpki-client