Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
File:                     jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json)
Hash identifier:          eBRbQ6CN8quDa+LcMZnM7Is9hXXCNf3jo9FEkA9at7A=
Subject key identifier:   A2:63:9F:73:69:2F:03:3D:DF:D2:AF:A4:0A:98:92:C1:00:CF:A5:D2
Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
Certificate issuer:       /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Certificate serial:       07DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
Manifest number:          07C7
Signing time:             Wed 22 Jul 2026 22:00:13 +0000
Manifest this update:     Wed 22 Jul 2026 22:00:12 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:12 +0000
Files and hashes:         1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: bpLFJl+aOwBviLHgh30VJJeJQrwzpkQGvJUidBZOhJs=)
                          2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: aF15WV54UPQi+570lsW9w8ZiAccp8MovG9ijIx3Rdww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
                          rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
        Validity
            Not Before: Jul 22 22:00:12 2026 GMT
            Not After : Jul 29 22:00:12 2026 GMT
        Subject: CN=6a613d6d-0f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:82:7f:ce:6a:40:af:a2:1a:a1:02:85:79:
                    84:9e:a5:91:50:27:c1:48:99:d0:b9:b2:b8:d0:48:
                    09:9a:ec:bc:60:a4:9c:9e:6b:d2:4f:f3:be:24:f5:
                    d5:7e:ce:aa:99:fe:09:24:d2:df:a0:cc:25:7a:df:
                    7a:ea:a5:f1:d1:ee:69:61:b9:f5:ca:9b:d8:f8:e0:
                    07:b7:2f:e7:e8:d9:ee:10:5c:cc:ef:17:e8:8b:dd:
                    eb:11:9e:c3:85:b9:51:0b:c5:af:6b:f2:0d:ce:b3:
                    87:d0:09:8b:cf:fc:8e:57:54:18:f2:a4:43:1c:c4:
                    24:04:79:8b:3c:03:91:5b:80:23:76:67:02:40:ef:
                    0c:b3:c1:4a:c7:77:c4:d2:3b:4f:2f:75:85:1e:23:
                    28:20:d2:ff:9a:2b:86:cb:6b:a7:20:bb:cd:33:3b:
                    dd:8d:9c:6a:67:5f:5d:4f:93:25:fe:25:78:19:35:
                    33:6b:ab:a7:fc:cf:38:67:f3:f3:3d:62:93:7f:84:
                    bc:e0:5c:00:ef:12:7f:07:17:8d:5f:04:69:d2:01:
                    be:49:b6:d3:6d:eb:4b:ae:ec:4d:57:47:8d:77:42:
                    cd:20:a9:5c:b0:14:e0:ee:b3:56:6d:8a:0b:45:34:
                    87:d1:0e:12:c2:dc:4a:7c:48:85:1c:2e:83:c4:26:
                    a3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:63:9F:73:69:2F:03:3D:DF:D2:AF:A4:0A:98:92:C1:00:CF:A5:D2
            X509v3 Authority Key Identifier:
                keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:75:d9:29:d2:d0:ad:ec:92:d8:ad:86:7f:3d:b1:cd:1a:aa:
         3e:8d:11:b1:11:66:cc:d1:91:be:68:fc:d2:44:7f:e9:5d:92:
         ad:33:6f:13:1c:6a:0f:27:37:a1:e6:4d:1f:c7:fc:8b:8d:f8:
         ba:94:fa:64:84:fb:7e:05:5e:56:be:70:dc:17:29:05:f0:83:
         d8:10:6d:85:40:a6:2d:ce:43:3c:63:5f:14:45:56:19:e8:8a:
         2a:ed:8f:d7:01:ff:e8:6b:ff:43:b0:04:23:46:9f:ed:48:0b:
         8d:28:72:c2:c4:ce:03:85:58:77:ff:c8:ba:0b:44:fd:8d:44:
         b8:b3:8f:2a:59:52:47:fb:c0:58:1f:7e:05:2a:ea:ae:32:1c:
         6f:07:18:4c:bc:33:06:fc:29:62:22:08:09:f9:80:be:93:c8:
         ae:20:c5:ae:16:09:2f:87:91:2d:73:9c:9c:b3:a5:18:3a:55:
         b2:28:87:73:10:d7:5c:d5:81:6a:a4:c7:72:f4:4d:24:89:1f:
         70:85:8b:d2:5f:7c:67:4a:29:5d:19:0a:7c:24:64:07:6e:9a:
         bd:71:ec:4f:78:32:25:e9:a2:88:da:ad:fd:c9:31:db:bc:a3:
         8d:8c:af:80:89:c0:bd:0e:18:82:fd:f2:f2:5c:7e:66:4f:c9:
         3f:09:f8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:13:18 2026 by rpki-client