Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
File:                     iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json)
Hash identifier:          /Cv8oEWYlHIBjM5FrhA5P3XjWb5pYpqxAie0Vs/gNKc=
Subject key identifier:   C7:73:E6:D1:D5:4A:92:F8:91:A5:71:3B:44:4E:04:AF:CC:A6:8B:4C
Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17
Certificate issuer:       /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
Certificate serial:       072C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
Manifest number:          0720
Signing time:             Tue 14 Jul 2026 22:27:22 +0000
Manifest this update:     Tue 14 Jul 2026 22:27:22 +0000
Manifest next update:     Tue 21 Jul 2026 22:27:22 +0000
Files and hashes:         1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: qW+8pLdf1+yJfetDowzuaoHqtmUS8aOH/hP4y/nr6n0=)
                          2: 6339493A516311ED90F04711C4F9AE02.roa (hash: IBX1v2b0T0V0Ud5osnlgdtt3fPLXZpBblbdSLyRReN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl
                          rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 21:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1836 (0x72c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
        Validity
            Not Before: Jul 14 22:27:22 2026 GMT
            Not After : Jul 21 22:27:22 2026 GMT
        Subject: CN=6a56b7ca-ffdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:91:3a:2a:40:32:ff:3f:e9:48:40:70:76:
                    0e:75:37:65:18:53:1c:1f:c6:3a:0f:74:08:a6:db:
                    ef:5c:24:e6:08:cc:34:b4:ad:77:e7:0e:8a:1f:5a:
                    12:aa:4b:cd:52:88:46:7d:68:f4:cf:65:d5:12:a2:
                    dd:ed:34:9f:91:ac:fa:7b:25:69:5e:f3:c6:e1:6b:
                    b3:90:52:11:c1:05:29:98:1c:bf:8e:74:c6:c0:31:
                    50:00:bd:ee:82:fc:30:5a:3f:9b:08:47:1c:04:c6:
                    95:d7:6c:18:43:49:c8:3f:c4:68:a3:f4:ec:63:43:
                    49:6b:43:19:c0:97:53:f9:0a:59:c2:3c:3f:51:d2:
                    eb:76:14:4c:1d:a7:e4:15:69:08:5c:99:e5:93:fd:
                    7f:c6:57:a1:53:8e:80:3b:bb:26:75:9b:bd:ce:11:
                    ad:e0:a2:f4:23:b0:80:ad:d6:f8:cc:2b:dc:4e:ac:
                    d8:39:6f:f7:0a:4b:f8:4e:a9:67:dc:9e:eb:db:4d:
                    9a:5d:98:df:80:ef:66:fa:6f:98:a8:e0:48:38:21:
                    be:53:07:84:f5:33:43:40:4a:a5:ab:0b:e2:a7:35:
                    3e:fe:60:0b:1c:cc:a5:c0:46:5b:26:5d:c8:1f:93:
                    7e:b7:56:4e:e4:1b:48:22:f7:86:4d:8f:cc:bd:cd:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:73:E6:D1:D5:4A:92:F8:91:A5:71:3B:44:4E:04:AF:CC:A6:8B:4C
            X509v3 Authority Key Identifier:
                keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3b:df:0f:5d:de:d4:0c:a0:17:81:5a:de:d2:94:8a:7e:a2:
         05:e1:0f:aa:f7:fa:16:86:a8:cf:bc:9c:37:e6:34:5b:3a:29:
         7c:be:c8:16:7c:45:fd:09:66:5c:3a:b5:8f:03:bf:f7:fe:fe:
         d1:27:bb:c3:78:fc:4f:e5:66:17:d0:6f:f3:ed:09:ee:48:f5:
         76:5d:12:c7:2a:93:77:19:88:ad:8f:c9:72:c4:e3:64:fb:1a:
         21:ea:a2:62:fb:bb:64:ca:1a:45:1c:a3:11:51:40:2b:80:90:
         9e:f2:25:fd:4a:29:a2:12:d7:2b:db:e1:6a:d8:fd:d5:14:aa:
         c5:c6:5c:ba:78:55:7f:a5:44:0a:d0:02:a6:06:0a:ce:45:96:
         83:e6:b4:0a:15:2a:0f:fb:91:4f:68:09:e9:55:d9:3f:5a:43:
         06:4a:49:6c:fe:47:16:7a:af:12:a8:d5:b9:63:f5:66:a8:73:
         e7:2e:89:b7:85:ba:ef:e2:89:a8:5a:ee:ac:59:de:2d:e5:c1:
         36:07:df:dd:7b:a7:cd:80:bc:85:b7:a0:5a:9a:81:bf:61:b9:
         01:d1:c5:e4:ae:9f:d1:e1:79:0e:47:ed:bc:33:36:cd:cb:29:
         23:25:71:7d:6b:5a:63:4c:e0:49:1e:d0:19:3b:4d:4e:32:f7:
         87:26:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:13:39 2026 by rpki-client