Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
File:                     no_7TgVT0H7Q35t9_tC1PETL_gQ.mft (raw, json)
Hash identifier:          Y8NzzE/y12ca6S18GLHbgmJb+rKqEFtM2Ecj8q8SOO4=
Subject key identifier:   CC:0F:5E:57:F5:1E:FC:6D:85:7C:48:16:0B:D3:BE:3C:F5:A8:2C:59
Authority key identifier: 9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04
Certificate issuer:       /CN=A91E10B0/serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
Manifest number:          24
Signing time:             Thu 23 Jul 2026 10:58:14 +0000
Manifest this update:     Thu 23 Jul 2026 10:58:14 +0000
Manifest next update:     Thu 30 Jul 2026 10:58:14 +0000
Files and hashes:         1: no_7TgVT0H7Q35t9_tC1PETL_gQ.crl (hash: zR61kHA/LeC+8CUQX6InknmQjJ+NVpHYcHxDj8vfBBI=)
                          2: 2DFE38F67AD711F19DC406D872A30FBC.roa (hash: stljFz+ZTz5uoG7Y0jMm76oTBSEWl+m0K1NgJAC7jJo=)
                          3: 423B6B5E5DB811F1966FAE05AC833773.roa (hash: TIfZzZzg/QXy0NCiF0a1I+19CdyJj4ReyDwnAPzzoOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E10B0, serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04
        Validity
            Not Before: Jul 23 10:58:14 2026 GMT
            Not After : Jul 30 10:58:14 2026 GMT
        Subject: CN=6a61f3c6-d4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cd:25:85:6b:6b:8e:d2:83:06:15:6f:25:81:
                    27:e7:2d:ac:3a:32:2d:25:e3:5e:3a:0b:a4:25:4c:
                    69:7b:fb:b6:d5:d3:bc:04:5a:9a:f6:e1:52:d3:dd:
                    8c:01:5f:32:84:96:e5:29:2e:3d:9b:62:15:a7:cc:
                    87:26:e3:e7:5e:94:0c:eb:28:a1:5e:cb:b8:42:85:
                    94:7a:e0:83:b0:1d:50:11:91:3f:09:8f:0b:04:da:
                    a9:76:93:4c:8d:0b:07:67:22:bb:a1:79:0c:83:d3:
                    62:9a:cc:83:8c:2e:5d:3e:08:18:92:55:b3:e4:70:
                    f1:10:32:23:dc:ab:4c:de:3f:ad:19:c4:05:05:2c:
                    ad:12:58:2b:f4:c5:2d:be:9f:1c:66:31:c7:30:9f:
                    ef:94:8c:ab:e3:ad:ed:b1:15:ec:cf:35:ce:97:51:
                    d4:1f:30:95:6e:83:fa:c2:38:4a:98:85:58:10:37:
                    ad:9a:58:59:80:63:8d:13:31:23:b9:a2:bf:af:f4:
                    8c:ad:87:78:74:78:f0:d7:b6:c0:ba:31:d1:38:75:
                    82:10:e4:b0:27:c8:f9:86:b5:f5:3b:81:75:d8:0d:
                    e2:56:8e:0f:7a:d5:e1:9d:d2:b1:e8:f2:4a:13:d5:
                    65:24:c1:b4:37:11:96:da:a3:dd:2c:aa:cf:19:d9:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0F:5E:57:F5:1E:FC:6D:85:7C:48:16:0B:D3:BE:3C:F5:A8:2C:59
            X509v3 Authority Key Identifier:
                keyid:9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bb:31:6b:d3:1a:0d:48:ec:d4:a7:55:65:ad:30:28:89:a5:
         9a:a6:97:d8:38:be:15:68:1b:37:5f:1b:cf:57:dd:64:fc:d5:
         72:03:5c:2a:40:36:65:dd:2d:19:2d:b9:fe:34:f6:49:e0:80:
         42:97:0a:82:6d:14:b1:85:4c:f1:41:7b:23:4e:fb:0e:c7:37:
         02:4b:a2:61:5e:d2:c2:8f:a6:5f:74:e6:a0:fa:c4:fa:44:af:
         9b:eb:af:f0:66:2c:99:15:54:31:0d:b7:17:ce:27:aa:9a:da:
         a2:d0:55:5c:4c:2c:28:cc:fd:d7:59:23:69:be:97:5b:41:b6:
         7f:40:00:b4:56:10:41:92:f5:78:fc:28:ed:59:9b:a2:47:8b:
         1c:6a:2f:d1:72:00:32:ba:d3:39:06:f4:ef:39:9e:7b:a4:d4:
         71:35:0d:77:f5:69:d6:d5:66:b0:b7:08:cd:b3:0c:91:9d:18:
         c9:d0:56:fc:3a:f7:fe:0f:53:85:54:1b:a8:80:a7:fe:dd:b4:
         ad:18:e1:2a:51:80:1a:fa:59:d3:d3:b6:0c:af:84:c3:ad:b2:
         bc:a1:c1:31:e5:8f:79:93:38:a7:66:9d:d2:07:79:b8:74:62:
         0f:94:63:a3:aa:16:a7:bb:a6:5e:22:86:82:c5:65:83:5b:e4:
         ee:9a:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:33 2026 by rpki-client