Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
File:                     MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json)
Hash identifier:          ZY2RA3gGt0V9SGl1UvcXl6W2jr7A4Z2hUsev4i4bUDI=
Subject key identifier:   FB:DB:40:93:B2:C8:DE:3A:A4:CC:99:2F:D5:26:60:EC:BE:4F:BB:C4
Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E
Certificate issuer:       /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E
Certificate serial:       02E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
Manifest number:          02DE
Signing time:             Thu 23 Jul 2026 02:14:20 +0000
Manifest this update:     Thu 23 Jul 2026 02:14:20 +0000
Manifest next update:     Thu 30 Jul 2026 02:14:20 +0000
Files and hashes:         1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: u5ixV8aWko9WV+9PT54Y35bJ/Cro5Okx8ogR3PUlc1Q=)
                          2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: LkrylPJMa1lM5G24m9Hp0wuID2HJBSNqucTHJxmRA2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl
                          rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742 (0x2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5D9F, serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E
        Validity
            Not Before: Jul 23 02:14:20 2026 GMT
            Not After : Jul 30 02:14:20 2026 GMT
        Subject: CN=6a6178fc-5e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:88:23:de:f7:af:5a:c6:a5:0d:e9:bf:ed:
                    3f:f4:1c:f8:59:73:ec:12:83:6a:7a:8e:da:a1:ee:
                    48:12:09:b8:8d:06:ac:55:7b:fb:23:25:e2:d0:23:
                    91:4f:bc:fc:25:36:f0:59:39:bf:15:c0:c1:7b:69:
                    40:3e:a3:e5:75:4e:a7:6c:a6:82:cc:fb:0e:ec:dd:
                    14:00:a4:78:b5:94:04:7b:40:07:42:93:35:d6:bc:
                    0d:d9:b4:fe:99:39:52:64:30:62:80:66:02:49:04:
                    63:96:17:96:2a:83:7c:d1:14:6a:42:78:38:69:ee:
                    77:30:8b:9d:ba:be:1c:3e:16:b5:1e:4e:bb:6c:27:
                    2e:f5:26:96:0c:00:40:6c:5a:d6:1b:37:ac:d8:7b:
                    a1:d7:38:aa:ba:04:28:6e:5a:b8:85:a5:03:e5:0a:
                    c1:f1:46:dc:ba:5e:cf:98:48:06:f4:a9:7f:87:24:
                    ca:44:43:c4:1b:19:15:45:27:0e:27:47:73:ff:b3:
                    39:08:c6:47:4c:c0:ac:c3:b4:22:b1:9c:06:c5:bf:
                    0d:ba:dc:7e:40:f1:ca:5c:fa:c6:79:c5:e2:6d:c7:
                    3e:74:55:4e:8d:d0:bd:ca:e6:40:e0:c5:29:ff:4b:
                    d2:43:01:97:d2:35:8b:dc:6f:4c:21:a1:26:2f:c1:
                    b4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DB:40:93:B2:C8:DE:3A:A4:CC:99:2F:D5:26:60:EC:BE:4F:BB:C4
            X509v3 Authority Key Identifier:
                keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:48:b6:f0:2f:c1:a1:2e:2a:a9:b9:8f:91:de:33:94:9d:84:
         be:40:77:18:84:2f:a9:73:93:7a:04:2f:cf:1f:3d:82:5e:29:
         52:5c:3d:89:78:d0:85:f9:cd:07:ba:12:24:20:20:44:db:5e:
         d1:fc:95:19:a4:eb:c4:90:f1:8a:ee:fc:d4:d6:cb:58:64:34:
         41:5b:dc:4b:7d:a6:20:63:df:84:cb:cc:ef:57:25:fe:c1:fc:
         f2:a2:b4:f7:b4:55:fc:7e:22:39:41:b0:ad:57:58:c5:55:38:
         30:e3:b4:7a:f9:f7:93:34:25:47:71:a3:55:90:ed:11:12:e3:
         1d:52:95:25:58:54:e3:3a:ae:4c:b6:c0:62:94:9b:5c:a2:67:
         ac:39:82:79:20:0f:97:69:d3:86:d3:8e:ca:f2:51:cb:f5:56:
         cc:d2:5d:fe:12:db:1c:ad:56:9d:7f:88:24:ea:8a:fd:50:4e:
         58:f2:f9:07:68:76:50:78:3c:b2:ff:b9:c5:de:8e:a6:9a:fb:
         ea:65:5b:2e:e2:2b:65:c5:46:3b:4c:4a:0b:fb:94:1e:09:04:
         cd:9b:c5:0e:34:34:3d:0b:84:be:30:98:51:d7:05:27:91:a9:
         a3:11:c6:7c:ec:7a:51:fb:51:44:2c:29:4b:3c:98:3e:56:52:
         c7:43:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:48 2026 by rpki-client