Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File:                     7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier:          KHZWw6rKhEasmE8Dl2Z9Q07/fnuUQ8rGBV2JkAyICEc=
Subject key identifier:   12:3F:BF:C0:41:CE:BA:1A:97:4F:0A:92:C4:93:9F:03:A5:76:FA:6D
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer:       /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial:       0BFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number:          0BE8
Signing time:             Wed 22 Jul 2026 19:18:31 +0000
Manifest this update:     Wed 22 Jul 2026 19:18:30 +0000
Manifest next update:     Wed 29 Jul 2026 19:18:30 +0000
Files and hashes:         1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: bt3PyDx1sLOdJpQttdMUeFYGlG6Qb8L0hIeBm7Pz9Tk=)
                          2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3066 (0xbfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
        Validity
            Not Before: Jul 22 19:18:30 2026 GMT
            Not After : Jul 29 19:18:30 2026 GMT
        Subject: CN=6a611787-dfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:ae:58:ce:2d:96:08:b2:21:05:a5:80:c7:
                    3f:e4:51:76:ce:d0:36:85:a0:c2:97:fa:a0:f9:5f:
                    97:ee:05:81:c7:45:4d:f7:c3:63:ff:ef:c1:15:7a:
                    e8:56:ac:a2:85:aa:ab:fe:5a:ab:12:01:dd:27:3f:
                    39:dd:ea:6b:f7:7f:15:e0:da:7d:90:0e:95:2f:6e:
                    08:c1:ec:20:86:5d:17:8d:d8:1c:d3:5a:67:a2:3e:
                    d4:e4:7d:b9:7c:2c:c4:6a:fb:19:92:95:13:12:45:
                    6a:f6:86:ce:8f:f8:a6:91:39:26:f7:f4:b2:8a:91:
                    fa:c0:31:b0:57:f2:36:15:f2:95:d9:f0:7f:7c:14:
                    b6:65:bd:3d:e2:73:72:87:29:78:46:a3:f8:b7:d5:
                    8d:89:07:53:52:25:60:1e:ad:63:3a:06:d2:de:2e:
                    21:db:a1:67:50:68:ec:24:4d:9b:15:f5:bc:57:c8:
                    e1:15:f9:8d:37:98:e6:9e:12:64:ac:34:9a:83:92:
                    b6:3f:68:81:46:07:40:7c:2b:91:b5:a2:51:a0:f0:
                    ea:fc:a2:05:8b:f1:dd:21:a4:44:44:66:9b:ea:5a:
                    ca:f4:cd:41:d7:a4:5b:17:b8:bd:87:f0:de:53:2f:
                    a2:b8:e3:86:33:b2:61:02:c4:25:d5:b9:f9:1f:71:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:BF:C0:41:CE:BA:1A:97:4F:0A:92:C4:93:9F:03:A5:76:FA:6D
            X509v3 Authority Key Identifier:
                keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:16:48:2e:5d:39:36:36:24:4b:7f:24:e6:ce:b9:62:05:f0:
         28:48:22:6b:9d:f4:92:91:5f:5d:5c:18:34:fe:ad:c7:4b:44:
         8c:4c:74:16:64:d4:1c:3a:d9:b8:7a:9e:01:3c:b9:60:8c:a1:
         6e:44:ce:e0:26:41:fb:ba:5a:ed:6f:dc:a7:d4:4e:30:fa:7f:
         b1:45:17:30:f8:31:c0:1d:54:34:e2:3d:d3:19:f2:66:a5:b8:
         fc:55:fa:01:2c:95:34:ae:1b:52:ee:05:67:7a:93:d9:ed:37:
         69:79:9d:9e:d2:dc:b4:fb:24:2a:5c:7e:94:6b:1d:3a:44:79:
         ad:dd:f9:5d:cf:44:af:37:b8:d2:9e:5b:8b:24:29:5a:29:43:
         1a:ed:ca:f0:15:47:94:0e:64:38:39:d5:4d:06:64:02:02:80:
         77:13:8a:40:c1:c7:9a:0c:c9:9e:0a:0b:a8:4e:cc:11:b2:58:
         fd:30:bb:b9:84:bb:e9:89:4e:ae:13:53:b7:05:78:92:a9:8c:
         10:a4:7f:68:3b:9f:4e:9a:42:b3:ce:e9:13:52:c3:05:a5:bf:
         9c:a0:3a:73:47:11:04:60:e2:6d:c4:78:7e:0c:40:40:77:12:
         90:c9:e0:55:42:6c:c1:24:66:33:3a:5e:70:98:24:15:78:6d:
         a0:92:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:43 2026 by rpki-client