Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File:                     hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier:          lrt75KNR6ogye1K8I/zpWQp/kHSGs6LXWeFetbHQtPw=
Subject key identifier:   E7:BF:99:96:9A:93:E1:20:3F:0A:87:07:C1:4F:CA:1C:A4:A8:FF:4E
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       07C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number:          07A2
Signing time:             Wed 22 Jul 2026 22:09:46 +0000
Manifest this update:     Wed 22 Jul 2026 22:09:45 +0000
Manifest next update:     Wed 29 Jul 2026 22:09:45 +0000
Files and hashes:         1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: hLtHAvW0GjXK1KjkvEohVM4Zod6cARSw4+VAC1JIinA=)
                          2: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: 2NlCQvreffBv+sXNAkaP+vHBffUlSnZfd0yyrfrf5aI=)
                          3: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: U5iX1eh/A7h/afcB70kYZU805bFcTIwmLGeaQFNS1cc=)
                          4: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: oOJyuxXfX3imbXltRS3IeTJJR7sYKvHpEuMTz6A1stI=)
                          5: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: w8xPzFRUz74kcsL++i4sKCp2gMLpbIAkAjBNqyS5ZF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1985 (0x7c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: Jul 22 22:09:45 2026 GMT
            Not After : Jul 29 22:09:45 2026 GMT
        Subject: CN=6a613fa9-83cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:84:7f:02:4b:a7:9b:de:be:2e:41:41:3d:
                    31:c3:8f:a3:29:7e:a7:7b:be:8f:a4:36:eb:99:12:
                    75:72:9e:b2:91:0d:5f:0c:24:68:8b:73:28:cf:ca:
                    c5:13:18:48:3b:f6:1a:10:dd:1a:38:9b:57:11:31:
                    34:cd:e7:ba:ff:d3:41:19:38:71:b6:8e:69:70:24:
                    00:5e:e3:d8:ce:f9:b8:fd:bb:47:74:a8:42:38:b9:
                    d7:53:5a:ae:f2:df:09:ae:41:e2:eb:75:04:ef:1f:
                    e7:57:74:12:0d:de:d8:6c:ec:da:f9:e3:b8:9b:63:
                    48:46:f2:12:a3:93:05:bb:12:42:3b:e8:84:d5:c8:
                    2a:d8:64:0c:b5:76:d1:e1:2f:5e:0f:f1:e2:c0:b0:
                    5f:e6:f2:79:2b:23:63:d5:b7:a4:70:ae:37:33:e2:
                    ca:37:13:7a:c0:f3:d9:df:ee:66:2e:d8:9f:d5:ea:
                    cd:7f:ad:70:d8:28:85:8c:65:f3:10:75:5d:82:41:
                    1c:99:eb:73:b7:8c:f4:d8:37:12:97:83:fb:62:82:
                    88:54:f6:c8:d1:6d:a1:4a:8d:ed:d5:d5:b2:33:b7:
                    c5:b7:22:fd:b6:51:4f:4f:ea:c2:5e:27:c8:41:90:
                    a4:83:ac:25:36:05:f4:22:bb:10:60:48:71:22:f7:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BF:99:96:9A:93:E1:20:3F:0A:87:07:C1:4F:CA:1C:A4:A8:FF:4E
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:ef:d6:b2:83:1e:d7:7d:24:02:28:04:7d:49:9f:24:db:ab:
         28:cd:c0:8c:21:0c:fb:4c:ea:28:c6:6d:2f:79:ae:7d:82:b7:
         5c:6a:b8:69:d6:0d:b9:cc:d5:49:5d:94:ba:a7:20:b7:a6:e3:
         c3:81:58:3c:b8:f9:1a:1d:dd:58:99:d3:4f:c7:9b:23:3e:ec:
         d5:8a:01:b7:38:4f:c3:9b:03:a5:74:98:4e:d4:e4:8d:7d:16:
         52:39:58:20:fc:98:86:ed:1c:c7:90:06:7c:36:8a:af:66:cf:
         39:4b:e2:43:d7:9d:e6:01:62:e5:e3:3d:f9:e3:14:51:b2:33:
         e0:6f:bb:f0:3d:bc:01:6e:3d:d5:fa:ec:4d:ff:c4:07:22:26:
         9e:1d:a7:a3:a3:bc:84:44:7a:f9:7e:eb:1b:64:77:12:b8:4b:
         f7:6b:d1:78:0f:1a:75:d5:68:89:ec:84:63:cf:92:09:82:e3:
         47:57:5b:44:f7:88:ef:1a:8c:58:55:d0:67:75:00:2d:43:22:
         d7:22:f7:85:9b:85:f9:ff:5f:54:92:c4:b6:14:e4:c3:2d:6d:
         fb:9f:c2:ed:28:65:b7:95:a9:0f:11:4d:bd:59:2b:aa:da:50:
         b7:3a:2a:e7:51:b6:01:a7:c8:9a:b3:da:4e:44:90:ad:54:9a:
         7b:6e:35:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:19 2026 by rpki-client