Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
File:                     J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json)
Hash identifier:          DFF+BO3/SFLlNk2YIQfTENgVie4upEo8Msj7yLXfzvM=
Subject key identifier:   D3:E0:8D:77:71:0C:B3:5D:31:B7:BD:A0:08:CB:5E:CD:EB:51:F2:C0
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Certificate issuer:       /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
Manifest number:          020B
Signing time:             Thu 23 Jul 2026 04:20:11 +0000
Manifest this update:     Thu 23 Jul 2026 04:20:11 +0000
Manifest next update:     Thu 30 Jul 2026 04:20:11 +0000
Files and hashes:         1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: opzSTkxn810E4riYKLTVtbnJ9WgVxjHYVZoio0JjI4E=)
                          2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: J6Y3ZNT+bC1GeTc3d3jK1qQ4TJKGsID3LkvkrzzuZw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
                          rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
        Validity
            Not Before: Jul 23 04:20:11 2026 GMT
            Not After : Jul 30 04:20:11 2026 GMT
        Subject: CN=6a61967b-737e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:47:ac:cf:92:b8:21:e1:86:60:88:f9:7a:
                    96:19:8c:4b:62:51:49:0d:d9:83:82:6f:7c:e3:d2:
                    a3:2f:5f:5e:74:13:ab:a5:fa:22:75:21:97:5f:9f:
                    7f:0e:51:1c:06:1a:13:71:04:6d:b2:6b:24:32:25:
                    4d:b8:98:d0:94:20:c5:10:5c:57:6b:18:76:6c:86:
                    5e:a4:c1:4a:c7:ec:e5:46:d9:0c:1a:7e:29:76:3b:
                    cb:c8:4f:81:9e:62:35:2e:f3:cf:dc:5c:db:21:28:
                    c2:48:1b:c8:81:fb:6e:cd:20:82:28:6d:5c:19:1b:
                    db:43:0e:a1:96:4d:63:10:ad:9d:08:e6:32:e3:f3:
                    cf:ea:55:f1:04:8a:5a:16:c2:9b:dc:0f:e3:c3:7a:
                    1f:9e:ee:be:39:fb:3c:58:b5:3e:b2:b5:57:42:c5:
                    3a:8b:e4:d3:37:b6:56:3c:7a:77:bf:7d:00:ba:aa:
                    26:c7:8d:9d:9f:13:74:d3:9e:75:d9:9c:48:59:bb:
                    66:29:00:7c:90:85:f2:0f:44:77:01:e7:fb:b3:70:
                    ac:5f:21:56:27:42:cb:8c:e0:4a:7a:42:fd:31:3d:
                    52:c0:27:44:a6:33:4d:0b:e7:02:e1:dc:e2:64:75:
                    b9:b5:b9:04:70:f5:75:f1:8c:79:4e:44:2e:5f:09:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E0:8D:77:71:0C:B3:5D:31:B7:BD:A0:08:CB:5E:CD:EB:51:F2:C0
            X509v3 Authority Key Identifier:
                keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:a2:54:21:2b:11:d5:37:84:db:33:af:c3:d8:66:f3:52:9a:
         d2:f3:13:6d:b7:06:93:2e:dc:4e:c1:d1:98:57:6f:e0:3c:26:
         02:53:dc:d5:a4:1e:85:c0:0d:44:db:17:88:e2:c3:43:c1:b4:
         cd:65:38:a7:06:1f:dd:bc:4d:6c:97:38:6c:4d:f5:e9:96:1e:
         09:f2:f8:d7:fc:cc:fc:80:ab:39:2d:c5:f1:dd:12:be:96:a7:
         fc:e9:3a:0c:bf:1f:fb:e3:9e:7c:d2:83:56:fb:22:04:1b:8d:
         17:30:22:0b:50:0e:f8:55:10:fc:13:72:1c:94:c1:c5:53:db:
         bb:2b:9b:bb:33:c3:0d:b6:f3:b3:4c:be:1a:7f:b7:ec:62:1d:
         b9:29:40:3a:9c:0f:85:3f:ac:3c:0d:3f:eb:04:1c:7b:db:f3:
         78:05:a3:db:a0:b9:36:aa:7c:18:a0:4d:77:d9:45:f5:93:04:
         57:59:e6:e5:87:75:10:1f:23:2e:80:3b:7c:ce:42:7d:39:db:
         ed:20:14:bd:6f:26:d0:1c:e4:69:42:c9:0c:6d:33:3c:f5:67:
         55:8d:ea:cf:2c:17:19:dc:08:4c:cd:af:ab:cf:05:80:ec:4c:
         b0:2e:b5:c5:5b:d0:4d:59:b9:0c:61:a9:03:a8:a8:a3:91:bb:
         01:43:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:09 2026 by rpki-client