Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft
File:                     hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft (raw, json)
Hash identifier:          pmNqyghteXx8V/Vin0F7zjPaZXiDpLRDuEXt7PhRCjw=
Subject key identifier:   2B:8E:D6:73:FC:53:75:56:C5:39:1F:C4:5A:DC:DE:0A:7B:EF:8A:4E
Authority key identifier: 85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4
Certificate issuer:       /CN=A91BF578/serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft
Manifest number:          07
Signing time:             Thu 23 Jul 2026 11:17:43 +0000
Manifest this update:     Thu 23 Jul 2026 11:17:42 +0000
Manifest next update:     Thu 30 Jul 2026 11:17:42 +0000
Files and hashes:         1: hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl (hash: s97B05AE2u9WGJRllW9GGJ4STVj+QFW1mSfSQ3xBcrE=)
                          2: EDD96AAE7F4811F19E46568395A30FBC.roa (hash: Wmt85iJENOVXXmg3SFuE0XKh364Rsjv2WardtpRUQfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF578, serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4
        Validity
            Not Before: Jul 23 11:17:42 2026 GMT
            Not After : Jul 30 11:17:42 2026 GMT
        Subject: CN=6a61f857-6a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:bc:b7:a7:93:b6:2d:e9:fd:7b:0b:2b:73:
                    96:eb:e6:e8:c3:1e:63:40:71:0b:24:d9:7b:32:37:
                    12:6e:42:5b:f2:9b:4e:0c:28:14:3d:78:af:8e:b4:
                    9a:76:25:e5:da:9e:df:7e:20:40:a0:0f:59:0e:46:
                    54:f7:23:d5:27:a5:61:d4:2f:ff:28:4c:ac:6d:be:
                    94:a9:1e:79:2c:ab:a8:26:dc:89:56:7f:3b:6f:b2:
                    24:a3:b5:fe:32:cf:03:53:45:43:07:53:f9:65:bd:
                    20:93:83:19:48:aa:2d:53:36:c7:2c:2b:55:ea:81:
                    c7:4b:20:03:cf:a7:71:d6:07:86:64:cf:c8:42:04:
                    36:5b:0d:14:03:1f:c3:1f:53:fb:e9:cf:d2:4f:d2:
                    83:5f:26:d6:64:3f:79:34:6a:d3:32:7a:78:b2:92:
                    6c:76:e8:49:16:82:df:09:91:30:0a:e6:d8:e9:eb:
                    7a:de:3b:0b:d1:87:43:31:fd:f6:ba:f4:ca:52:05:
                    15:e6:9c:29:49:30:60:68:89:16:be:0d:da:2e:32:
                    91:3d:29:0a:7b:07:d8:db:e3:2d:2b:88:a0:db:b6:
                    a6:b7:f9:9d:29:7f:2b:95:5b:46:f0:f7:e6:02:50:
                    9e:15:05:52:ca:64:34:16:ee:ef:64:72:19:aa:6d:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8E:D6:73:FC:53:75:56:C5:39:1F:C4:5A:DC:DE:0A:7B:EF:8A:4E
            X509v3 Authority Key Identifier:
                keyid:85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:42:7d:b1:24:21:78:12:aa:60:73:9c:75:04:71:5c:2a:ef:
         84:e0:0d:2c:8f:d2:70:be:ec:df:ca:38:7b:3a:60:59:c7:67:
         a9:d4:4f:67:7d:ad:c6:a0:56:2e:52:37:d9:69:43:7d:27:40:
         3a:c5:a1:8a:9e:b1:f9:98:5b:68:3d:8b:a6:6f:e1:0e:f4:03:
         23:31:9b:f4:2a:74:55:1b:cc:23:c9:7e:10:6a:bc:c2:ea:10:
         b7:c3:2b:6f:1f:ad:c1:fc:e8:b7:1f:0e:03:a2:1a:e4:4a:64:
         c8:82:6d:4c:ed:3a:57:b1:28:6b:d1:c8:e6:94:28:5c:98:5b:
         c8:e9:68:e7:7c:98:1d:39:bb:5a:12:7f:52:2b:10:03:9e:b5:
         0c:1f:88:51:1f:4b:1d:d1:3d:6d:0f:66:f8:7a:5a:77:10:74:
         48:8e:9b:b6:8b:3a:b7:76:c2:9f:ac:dd:5d:56:40:75:ca:a5:
         35:81:19:62:65:0d:3a:0b:4c:35:68:2e:15:25:4f:68:ec:26:
         55:f0:c7:32:57:7c:87:b0:3f:0a:62:9b:c3:0b:a1:13:a6:2d:
         ab:b2:6c:43:f0:71:87:32:64:9c:85:d5:5a:21:25:e9:21:d4:
         8d:61:8c:23:e5:63:1e:94:4d:a0:72:74:1d:5c:41:fe:36:94:
         f2:5c:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:14:38 2026 by rpki-client