Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
File:                     MFikabZ9AwcsLYo4Xp8qq7oTTis.mft (raw, json)
Hash identifier:          wbYiGKzxfn4Zyd1gLoYcrO7vnSdcfvCfBgIGpcQRv5c=
Subject key identifier:   C3:1F:CF:24:28:6E:63:5A:05:E9:98:15:60:3A:5C:65:76:6A:3B:94
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Certificate issuer:       /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial:       0811
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
Manifest number:          07E2
Signing time:             Wed 22 Jul 2026 21:59:07 +0000
Manifest this update:     Wed 22 Jul 2026 21:59:07 +0000
Manifest next update:     Wed 29 Jul 2026 21:59:07 +0000
Files and hashes:         1: MFikabZ9AwcsLYo4Xp8qq7oTTis.crl (hash: ojN94w7m8SiKA2H2FbxiG9Gw7iblDIHsj8zdGTgqrQE=)
                          2: 7CA749FCF63E11F080BDB1B6646F56BC.roa (hash: u2rDocooyxiz9s72SCuMZgdQBeeYVSQpawmphR3YaZo=)
                          3: B791EB5251A811F08D434B5BC4F9AE02.roa (hash: Yv4gel1CvyBk9MP04CS6oXlyji+0CdFjC5TBaKzGRfE=)
                          4: 62884F1AB6CC11EF84CBC45FC4F9AE02.roa (hash: AXDH2N6IFT5Fud9AQTkuO+onQ48n5ZtmHoBIWEhfafk=)
                          5: 446CB34270E711F083707432C4F9AE02.roa (hash: kZy79YthAxUXnqeeWJ0YITudamfKZP7o+VZk50JTteM=)
                          6: C4B2F4D26E2D11F1AAE9D25878A30FBC.roa (hash: y2Yu7DNBwQ1F41IXGGxGYif7p6j6eyoOWPgPCGsAZSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
                          rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065 (0x811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
        Validity
            Not Before: Jul 22 21:59:07 2026 GMT
            Not After : Jul 29 21:59:07 2026 GMT
        Subject: CN=6a613d2b-0ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:34:eb:7d:c9:4c:8a:49:ad:ba:5f:48:79:
                    37:3e:24:af:bd:cf:be:a2:cf:dd:ac:9e:b7:33:41:
                    1f:5d:2a:fd:46:43:40:2c:cf:f9:de:2e:3f:6a:cc:
                    a0:a8:f4:a7:cf:2d:41:c1:4c:ea:87:35:3c:75:e7:
                    94:b1:2e:36:55:17:b3:b9:eb:f3:2c:ec:63:ff:a0:
                    83:52:e3:aa:73:67:07:af:17:1e:f5:9b:eb:5c:f5:
                    e8:b0:7c:bc:c6:bf:41:e9:f8:57:26:87:fb:f8:26:
                    49:3a:ac:5d:d3:65:f9:46:9d:73:92:4e:46:77:85:
                    82:98:56:04:9e:63:d3:b6:d2:57:9d:42:b8:bf:d3:
                    a0:44:0a:42:c4:7f:39:61:c1:16:7d:b8:32:f9:ec:
                    01:fb:44:b1:54:66:85:f6:97:63:46:8c:d4:2d:b1:
                    54:29:bd:46:de:18:9a:b3:c5:8c:8e:d6:2f:85:7b:
                    73:9a:15:72:94:0b:00:b8:98:65:36:27:ad:3a:05:
                    ac:4c:8a:6b:c8:98:ee:00:5a:f6:76:0f:ca:7c:71:
                    15:53:8b:d6:b8:8b:99:35:ba:06:51:d7:0d:c6:ce:
                    23:82:40:3b:aa:93:32:a1:fb:66:2e:c2:58:7e:18:
                    f9:d0:d5:44:f3:37:59:a8:49:f1:4a:09:2a:cf:72:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1F:CF:24:28:6E:63:5A:05:E9:98:15:60:3A:5C:65:76:6A:3B:94
            X509v3 Authority Key Identifier:
                keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8e:cc:ea:8e:62:1b:00:21:e3:26:f6:00:c0:26:77:0f:38:
         96:7b:68:85:3c:af:b6:33:a0:48:25:33:7c:25:e2:6d:ca:27:
         01:f2:45:06:7a:a3:fd:1e:49:d4:af:13:f2:76:3e:e0:91:41:
         75:82:fc:20:0d:35:71:38:7e:8b:61:97:18:c0:54:83:8c:49:
         7d:05:4e:61:17:33:93:70:47:4c:8e:6b:02:73:65:ba:7d:04:
         e3:49:5e:62:a9:d3:00:1d:94:b1:2c:fe:19:a4:cf:bf:51:e1:
         0e:cf:9a:d1:8a:07:c3:0e:6e:9e:95:5b:68:72:83:ee:2c:72:
         a7:cf:96:65:b2:1b:c4:1d:8a:87:3a:fc:c2:82:8e:82:99:58:
         ee:0a:2c:7a:98:04:b8:51:0d:c4:93:e2:4b:61:6d:f2:59:f0:
         f7:f3:a2:09:1e:26:94:de:0d:36:4d:05:d4:10:40:64:a8:25:
         68:aa:1f:16:2d:dd:4e:b4:c1:1f:96:24:f1:53:f2:ca:8b:37:
         56:72:bf:a7:f4:0f:3e:33:45:cb:0a:06:12:62:78:60:f6:d0:
         37:dc:86:a4:b9:18:dc:f4:81:de:67:7b:fe:07:ba:66:8a:8e:
         bf:7c:22:8a:58:7d:ad:1f:af:1b:a6:0e:56:1a:01:49:d1:a7:
         a9:a4:2d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:06 2026 by rpki-client