Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
File:                     7tKAkYf96vxUeKw6tWpqtPnBvUY.mft (raw, json)
Hash identifier:          UCUthr7jQtvM4cJKK1FFoEs6Ddg2X5LoEmavEGiOrvU=
Subject key identifier:   EC:94:38:EE:82:FB:17:C4:1B:88:47:13:EE:7C:B3:C4:AD:01:50:AF
Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46
Certificate issuer:       /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
Manifest number:          62
Signing time:             Thu 23 Jul 2026 10:02:29 +0000
Manifest this update:     Thu 23 Jul 2026 10:02:28 +0000
Manifest next update:     Thu 30 Jul 2026 10:02:28 +0000
Files and hashes:         1: 7tKAkYf96vxUeKw6tWpqtPnBvUY.crl (hash: OnXEfwKy5ch4lfpfWktJPYcF64PUH6Qp49samORXqNQ=)
                          2: 856BB842F51811F093E49DB5586F56BC.roa (hash: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl
                          rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46
        Validity
            Not Before: Jul 23 10:02:28 2026 GMT
            Not After : Jul 30 10:02:28 2026 GMT
        Subject: CN=6a61e6b5-ca57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:bb:b2:b7:cd:6e:00:47:97:44:ad:20:c7:
                    31:b5:47:8c:c4:c5:ad:87:cb:18:e9:5c:ad:5c:db:
                    37:9e:d2:24:db:ad:d7:c5:cd:80:f4:43:e6:81:22:
                    34:a3:da:54:60:f2:15:90:64:8a:ea:fe:97:8d:69:
                    05:8c:27:ac:16:23:77:ef:3b:ef:88:63:ea:ff:a0:
                    00:61:10:3a:2b:ce:57:ec:d8:fd:98:b9:e7:c3:8f:
                    9f:62:89:56:27:98:15:3e:0b:ee:da:e8:17:2c:53:
                    e6:03:23:0e:00:8b:2f:71:0c:d0:84:a6:cb:05:f0:
                    b4:05:f6:fc:98:40:25:3a:27:6e:5c:74:43:08:87:
                    50:29:4b:ba:c0:09:08:30:10:76:04:05:7a:7c:27:
                    98:95:ad:08:4c:cd:34:0a:44:f3:4b:4d:b5:7a:0c:
                    6b:58:95:04:2c:50:90:49:95:3a:86:46:92:b1:e7:
                    5a:6f:7f:bd:b7:67:26:5e:cc:14:7d:a2:b4:b5:d8:
                    e0:d8:eb:e5:c1:3d:b0:c7:6a:74:5a:f2:af:9a:b4:
                    77:54:6d:d6:33:91:78:36:fd:82:ba:26:54:ea:31:
                    69:21:4e:c6:a5:a7:fe:74:45:5a:3d:9a:5e:5e:92:
                    1e:47:79:a6:c7:2a:f3:25:c3:ba:8f:bd:4a:ca:66:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:94:38:EE:82:FB:17:C4:1B:88:47:13:EE:7C:B3:C4:AD:01:50:AF
            X509v3 Authority Key Identifier:
                keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7c:0e:dc:f5:5a:0d:67:c4:ac:fa:7e:2d:37:78:a4:b8:9e:
         b9:9a:04:a8:a1:95:09:fd:34:00:b1:56:11:e9:09:52:30:4d:
         27:2c:e0:5c:0e:b7:43:65:80:52:31:a9:5e:48:b3:6c:87:c9:
         75:6a:65:75:7c:72:f3:32:a7:66:a4:e0:60:66:34:55:c9:eb:
         e4:fb:cc:a1:5e:eb:2c:ca:eb:b3:d6:eb:68:db:a5:12:89:bd:
         27:63:46:39:24:6d:5d:c2:cc:18:2d:ff:37:ac:09:c2:30:19:
         f5:a6:14:86:e3:03:49:55:10:cf:17:87:2b:b5:08:3a:04:c2:
         a5:15:8d:d3:63:24:a2:63:66:d1:ac:34:4e:15:71:77:45:6d:
         80:ca:e6:3f:7a:67:f9:fd:8c:0f:d8:cb:4b:ea:5a:4a:6a:94:
         7e:fb:54:a5:b2:91:9c:9a:9c:76:1c:47:ee:d4:2f:1b:4b:be:
         2d:86:86:42:aa:b3:af:13:b7:37:29:69:9a:b1:c1:5c:a7:e9:
         1f:5d:27:2c:5f:0f:f8:c4:b1:ef:c3:b7:87:14:b1:41:ab:00:
         3a:cd:6a:26:0d:52:51:dd:2e:fe:b7:d0:82:47:f8:c8:2b:b9:
         92:5e:af:c8:49:21:8e:a0:59:ec:c4:80:1b:b4:f0:53:d2:4d:
         5b:f9:e0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:38 2026 by rpki-client