Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
File:                     l7tUs9I8N8PdPgFpypdNJ9up8FA.mft (raw, json)
Hash identifier:          0L46QmJjDYZf9m8tScgwMQ1NptbEOIsAYyWocBUC64o=
Subject key identifier:   1D:73:D9:C0:D1:93:67:43:90:99:8A:96:7E:42:E2:43:20:66:DC:F9
Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
Certificate issuer:       /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Certificate serial:       06AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
Manifest number:          069F
Signing time:             Wed 22 Jul 2026 23:09:34 +0000
Manifest this update:     Wed 22 Jul 2026 23:09:34 +0000
Manifest next update:     Wed 29 Jul 2026 23:09:34 +0000
Files and hashes:         1: l7tUs9I8N8PdPgFpypdNJ9up8FA.crl (hash: 8EzkyHKdWrdmgs5tnZ5ruT/a/g7qwTE8RyeLOM3Y+9s=)
                          2: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (hash: 3hykLcorYgLEfCJWHrkkPwMpO+Se/Lm85HODusfioqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
                          rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51C1, serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
        Validity
            Not Before: Jul 22 23:09:34 2026 GMT
            Not After : Jul 29 23:09:34 2026 GMT
        Subject: CN=6a614dae-fb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:2f:71:63:a5:0d:64:c4:f6:77:ff:ad:74:
                    ef:9c:ac:24:cf:dd:7a:08:dc:b4:c4:aa:5c:ea:4a:
                    11:06:55:ca:ca:d4:a7:f5:2d:c7:e5:c0:f2:d6:fa:
                    d3:fb:24:54:c2:99:2f:b2:47:db:ae:b0:7f:a4:af:
                    cb:2b:0d:dc:56:18:bf:88:d1:0f:cd:3e:8a:0f:54:
                    e8:3e:04:e8:ec:16:53:37:9d:9d:e4:96:ee:ea:d4:
                    e0:74:85:58:a0:d5:15:16:b6:f9:1e:86:f1:df:8d:
                    16:4f:4f:6c:01:1c:00:8b:12:f1:08:94:e3:81:cd:
                    d9:7a:8b:0f:78:2d:d2:d5:2a:32:53:73:b1:08:f3:
                    bc:d3:b0:68:16:0d:b1:d7:7f:09:6a:ad:2d:65:be:
                    05:8d:03:7a:86:42:04:fb:70:fe:7e:4d:dc:85:e4:
                    d7:a9:98:e9:cd:31:b2:59:d6:43:7d:c4:13:2f:c9:
                    6b:8f:99:b9:7b:85:d8:13:2f:76:0d:a0:82:99:c0:
                    35:cb:8a:6a:d0:1b:7f:63:da:b2:2e:28:25:30:65:
                    fb:1e:b5:80:e1:82:1b:bf:b2:67:7c:c0:53:c6:92:
                    2d:22:08:2c:78:77:c8:47:84:65:51:76:07:eb:55:
                    b8:21:b0:b4:46:e6:30:47:40:20:25:d3:2e:ca:52:
                    c6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:73:D9:C0:D1:93:67:43:90:99:8A:96:7E:42:E2:43:20:66:DC:F9
            X509v3 Authority Key Identifier:
                keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:00:d9:fc:0c:4d:ff:87:d6:48:90:1a:e1:27:51:62:73:2f:
         ec:b9:f1:33:fc:50:1e:c4:4c:5c:77:59:c9:44:c6:7d:92:94:
         be:95:d5:85:1e:30:78:cc:af:1d:19:11:ed:4e:7f:6c:68:bd:
         e2:f4:52:b9:85:a9:31:a1:60:04:80:d5:e9:4f:ce:02:f5:9d:
         f4:a5:be:3b:fd:57:74:ca:b8:fb:34:e3:a0:1a:79:42:3f:57:
         20:fb:0c:fa:42:83:78:6f:bf:cd:a8:f5:09:e1:74:87:f5:74:
         f1:0b:e8:a2:cc:a8:df:72:fb:2c:c0:eb:9a:37:a4:68:6b:da:
         96:03:3b:56:5c:b5:39:c7:ea:4d:0d:c8:48:2f:22:91:56:6b:
         1c:16:28:72:87:24:7c:1e:b5:38:3c:77:7a:95:11:d9:3b:8d:
         08:7d:be:32:0e:d5:1f:79:14:75:19:37:e5:9e:6b:13:62:25:
         9b:94:3a:9c:3c:8c:43:32:07:8d:14:35:9f:57:85:3a:27:ad:
         e2:43:57:ac:73:10:c7:75:6a:33:2f:8f:89:21:08:dd:ac:76:
         1f:cc:13:5a:44:bf:12:5e:7d:96:13:48:70:d7:ca:68:25:28:
         78:68:3d:e1:34:29:eb:db:f5:7b:f0:7a:d3:61:c5:2a:7a:a2:
         d6:df:0b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:06 2026 by rpki-client