Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File:                     R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier:          InJYgrImwcq/YN6iPKdvKN3sytD1+L741Ln8kbAsDvs=
Subject key identifier:   50:32:FA:D6:AA:72:FD:64:F9:FE:B5:A4:74:1F:C1:A5:CD:C0:A4:59
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer:       /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number:          99
Signing time:             Thu 23 Jul 2026 09:13:18 +0000
Manifest this update:     Thu 23 Jul 2026 09:13:17 +0000
Manifest next update:     Thu 30 Jul 2026 09:13:17 +0000
Files and hashes:         1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: qMzFKRu9G2cSR+QMEjF6LbViy0gJnw1ISvQAhezNBUU=)
                          2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: 1KJtvHLYngoP+8r1UhG8albB+7arFBcFljE2p+6yMsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
                          rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
        Validity
            Not Before: Jul 23 09:13:17 2026 GMT
            Not After : Jul 30 09:13:17 2026 GMT
        Subject: CN=6a61db2e-92f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:8d:3b:ef:81:c8:75:62:d0:b3:d1:19:a8:
                    4d:ad:14:c0:bc:17:20:cf:69:a6:b5:c9:b0:af:7d:
                    63:df:f6:fb:8e:2c:4a:80:6a:3e:5d:81:fd:9c:67:
                    e9:29:42:e4:7e:0b:48:69:f1:b2:29:f3:07:18:dd:
                    c2:99:c0:d3:e5:2c:a0:68:26:df:b3:67:8e:d9:57:
                    ce:c2:1d:9e:9b:51:1d:5d:fc:61:58:6c:30:ec:2a:
                    f9:99:0f:7b:17:92:03:8f:4d:33:96:d7:12:54:45:
                    84:04:1a:3c:df:5a:a1:39:be:e0:26:56:41:6c:49:
                    4b:d7:ae:4e:7b:4c:6d:6e:ea:fc:52:17:25:ed:fd:
                    bf:15:52:e3:2c:1d:28:7a:dd:f4:0f:da:f8:a6:d9:
                    0c:31:ad:2b:27:14:40:ab:92:09:b8:10:23:91:d2:
                    33:91:ec:65:bc:c2:f1:66:b5:94:5c:1d:65:73:59:
                    2c:18:de:0a:18:76:6f:1b:00:7c:39:e6:3a:2d:da:
                    91:f4:bc:8c:7d:26:8b:76:93:b3:6b:08:96:90:88:
                    b7:a3:19:ef:dd:bd:4b:15:42:d7:af:f4:13:76:83:
                    fc:02:4a:d6:51:3c:ed:f4:a2:c9:98:ed:60:da:51:
                    c5:04:89:a6:9b:3e:d9:bf:68:af:8a:06:51:00:25:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:32:FA:D6:AA:72:FD:64:F9:FE:B5:A4:74:1F:C1:A5:CD:C0:A4:59
            X509v3 Authority Key Identifier:
                keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:59:3b:30:a4:70:36:e9:49:ad:70:3f:52:68:aa:6e:13:e2:
         75:fb:74:a5:d2:80:3d:5b:1a:cf:e4:a8:ea:c8:45:95:cb:5a:
         85:22:8d:d2:b8:93:c6:75:17:b1:81:07:22:78:e9:e2:85:61:
         48:ed:47:8f:94:81:f5:6c:35:89:3d:69:a1:8a:3c:fb:db:f3:
         d8:7f:47:da:63:cb:d1:87:e3:81:d7:d2:1b:44:d9:63:12:2a:
         f3:a9:7a:d4:44:74:14:a4:40:ae:f6:88:eb:e4:f3:50:4d:c9:
         92:02:58:25:60:8a:61:24:3f:2a:f1:0a:d7:54:09:38:18:99:
         3d:aa:99:eb:45:3e:51:a7:cc:7a:2e:dd:60:fd:6e:d6:a6:7a:
         a9:78:b6:6f:77:41:3e:5b:e3:18:7b:30:52:91:c4:0e:d7:f7:
         77:8b:51:77:5e:b5:97:64:72:7a:58:ac:d2:ee:d8:9f:64:b2:
         3c:59:44:32:1f:30:a2:57:4a:f4:07:00:dd:0b:12:f6:e6:35:
         fc:ba:d2:0b:09:19:75:62:d7:e3:40:cc:59:7a:76:51:ae:cc:
         81:5a:f0:d3:b4:4d:ae:50:4c:e6:b1:af:88:57:21:2f:b8:38:
         91:93:b1:4b:20:b7:83:55:e8:70:14:83:d9:22:fe:37:ad:8d:
         50:ca:ba:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:29 2026 by rpki-client