Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
File:                     0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json)
Hash identifier:          hblA0jS4onVfdjdiXoQxzOTuflUM9/xG6tKADHQLdwM=
Subject key identifier:   B9:DC:F3:2A:1A:FD:48:41:7F:32:21:C5:F0:96:66:45:76:50:15:ED
Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
Certificate issuer:       /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Certificate serial:       0739
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
Manifest number:          0731
Signing time:             Wed 22 Jul 2026 22:31:05 +0000
Manifest this update:     Wed 22 Jul 2026 22:31:05 +0000
Manifest next update:     Wed 29 Jul 2026 22:31:05 +0000
Files and hashes:         1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: Dh5YD6N//E/gxeLZ4lUuHQQwKQ9cjDr+VqSLQv7D2Lc=)
                          2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: 2cGQ0cYN6rxm/5CfWmmTTZtEMPdc416gyQEzwHIqQ5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
        Validity
            Not Before: Jul 22 22:31:05 2026 GMT
            Not After : Jul 29 22:31:05 2026 GMT
        Subject: CN=6a6144a9-798a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:1e:4a:01:56:d0:92:9b:d3:f8:32:e0:f9:
                    cb:17:27:5e:4b:18:61:57:e6:2e:dd:d7:4c:64:03:
                    a5:01:0b:ea:dc:c1:95:3c:0d:49:82:16:a5:5a:94:
                    5e:0d:05:4b:35:b4:4a:f5:23:c0:35:5a:f6:86:58:
                    05:68:d4:c6:79:90:64:25:26:d0:d3:02:b8:2e:2a:
                    c1:b0:a6:9b:9f:4c:3d:5d:e1:d1:24:db:75:f9:8c:
                    60:92:dc:d5:3c:0e:9f:ab:de:78:45:8b:b7:e7:e6:
                    ce:35:26:04:b8:1e:75:6c:c9:f3:73:0d:9d:52:39:
                    df:14:af:b8:41:11:95:1c:54:a2:28:6e:0c:49:c6:
                    d3:24:52:95:b7:d7:68:75:b0:01:69:80:76:e1:99:
                    c1:58:a4:e4:52:7e:69:6e:c7:c6:b6:29:39:fd:ed:
                    d2:0c:8e:5e:b0:a9:c0:ed:5d:d5:58:bd:58:0a:58:
                    6d:ce:57:b4:26:68:ae:d6:e5:49:7f:f5:b3:fe:b5:
                    5f:ee:6b:06:15:5e:76:6c:30:0e:66:01:f3:63:27:
                    08:cc:3d:7f:34:27:bf:ec:40:43:b9:2b:5d:e6:c5:
                    56:b5:ce:18:07:f1:e7:e1:28:c4:2c:be:4f:24:e8:
                    3f:cc:5c:82:95:fa:38:e9:2a:fa:36:0d:bf:8f:01:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DC:F3:2A:1A:FD:48:41:7F:32:21:C5:F0:96:66:45:76:50:15:ED
            X509v3 Authority Key Identifier:
                keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1c:de:85:25:41:ff:5d:96:ff:98:98:9c:94:90:27:42:f3:
         b8:cf:3e:69:99:08:4e:e9:c4:44:8a:4c:d6:f1:ed:d6:cf:37:
         6f:6c:2b:e1:db:85:89:6a:f8:1e:95:7d:dc:97:91:89:39:f8:
         dd:10:5f:0f:af:1a:a6:3e:c3:7a:30:d7:12:97:5c:9a:c2:1c:
         43:04:1f:dd:59:2a:cf:00:98:6d:37:da:8f:4d:69:0b:a7:f9:
         8b:d3:0c:9b:16:0a:18:18:53:39:7a:f3:cd:fe:40:28:63:13:
         e0:80:0e:65:a1:e1:ca:96:65:cf:4d:0c:ae:3b:bc:4a:4e:fc:
         07:16:50:70:5a:18:cb:f6:c4:b9:85:5e:2f:31:7d:06:ae:40:
         6e:85:7b:16:c4:6f:2b:fb:e1:9f:ce:85:ea:f2:75:46:60:04:
         51:d7:e3:fa:e0:e2:b5:9e:a3:ce:9b:28:51:a6:75:2c:14:4f:
         72:02:de:9e:c4:5c:05:67:01:07:a4:d5:c3:1f:a9:d2:83:39:
         4b:bc:6c:1c:9f:27:ab:12:72:fb:40:71:5d:b2:8d:24:4b:38:
         3e:ff:02:4b:e2:ad:9c:38:be:21:71:12:96:3b:26:8b:39:38:
         c7:3e:d2:c7:b4:ad:6d:ef:6a:44:6f:c7:4d:5c:e9:33:43:c7:
         62:0c:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:05:40 2026 by rpki-client