Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
File:                     7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json)
Hash identifier:          N7MONbJG9YvVnucaaJUO8CHJg9mWFWBw2iIdlb9Hg1c=
Subject key identifier:   28:8B:76:6D:7B:DA:89:3B:66:95:2A:36:DF:BB:31:53:3C:1B:BB:6E
Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C
Certificate issuer:       /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
Manifest number:          0215
Signing time:             Fri 17 Jul 2026 03:52:04 +0000
Manifest this update:     Fri 17 Jul 2026 03:52:03 +0000
Manifest next update:     Fri 24 Jul 2026 03:52:03 +0000
Files and hashes:         1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: P6hboT/WwSlOi59Ge2GVi9reiy3H0uNu+GLQs31+TjY=)
                          2: 099FC48C854911EF8C3F5275C4F9AE02.roa (hash: Gb9t1IxBeA+qDg/3AThzDizVtxbv9G5RTclrUf28mc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl
                          rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912294F, serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
        Validity
            Not Before: Jul 17 03:52:03 2026 GMT
            Not After : Jul 24 03:52:03 2026 GMT
        Subject: CN=6a59a6e3-6f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:0a:47:cd:6e:c5:95:ff:67:fc:c2:d6:6e:
                    d3:ab:62:97:ce:d8:09:eb:5b:89:e4:71:b9:2f:05:
                    63:e6:84:1a:e4:00:4a:fd:1c:a0:0c:74:64:4a:40:
                    96:70:f5:6f:02:44:38:a2:f2:a2:cb:ab:42:98:3b:
                    f5:88:ed:02:08:e3:c4:cc:d2:be:0b:35:f6:5a:87:
                    1b:7a:4a:d1:59:ca:ad:cf:07:4c:78:a6:bd:8d:f0:
                    1d:f6:34:8b:91:6a:16:16:67:3e:87:c9:15:a3:49:
                    1b:1b:b0:1e:66:40:a7:e6:91:da:e2:b9:eb:3d:31:
                    f5:41:0f:24:e3:ab:de:b9:01:f9:02:cc:52:c8:0d:
                    ca:59:c9:37:14:de:82:10:33:35:5c:db:0c:38:e8:
                    c8:9c:b3:98:b0:76:00:36:6a:ec:e1:aa:03:26:ab:
                    d8:19:60:e6:39:34:06:2c:4e:3b:2a:8b:ec:1a:a7:
                    92:3e:ce:e2:ba:af:7d:86:55:34:4c:e8:9b:77:61:
                    3e:63:63:63:ea:37:87:16:ec:ed:0b:f3:7c:1b:bc:
                    de:5a:e0:e7:10:89:2b:7a:92:f5:4b:e1:74:9f:48:
                    41:74:e6:eb:80:5f:8b:a3:ae:89:70:c0:1b:ea:69:
                    97:40:96:39:8b:be:b6:28:43:17:cf:df:c7:85:6f:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8B:76:6D:7B:DA:89:3B:66:95:2A:36:DF:BB:31:53:3C:1B:BB:6E
            X509v3 Authority Key Identifier:
                keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:49:09:dd:5a:a7:43:c4:b0:1f:8a:00:d3:20:fb:86:6f:47:
         33:c7:bc:b1:55:3e:fb:6a:57:a5:43:ca:ac:b7:c3:01:b1:18:
         9c:7a:98:b1:d5:a1:02:96:2f:40:6b:21:6e:ae:8f:4c:18:bf:
         8d:72:5a:af:9a:6f:64:e3:39:64:fb:90:b3:b3:e0:95:ac:c7:
         fc:61:70:75:a7:3e:cd:9d:2e:34:0c:b7:87:36:a8:53:2d:35:
         7d:60:37:7e:8a:02:d7:d2:7e:24:86:78:c4:f7:90:79:d4:a3:
         eb:32:81:43:2e:1a:97:8d:6d:b9:90:51:90:c8:3f:fc:31:d4:
         eb:65:3c:9e:b8:7d:53:0b:1c:01:dc:56:5c:ac:9f:ac:ad:9c:
         db:91:0f:90:17:c8:6b:37:51:3c:61:51:7d:6d:c1:d8:6f:47:
         fc:d8:77:0f:50:f5:1e:08:b4:80:39:2b:e5:f1:54:9a:44:f4:
         2b:11:09:1c:1c:eb:54:18:60:1e:03:dc:8a:0b:0b:0d:83:f5:
         93:b4:53:55:bd:fa:42:22:61:a3:1c:69:43:19:59:6d:fe:1e:
         0f:b5:07:70:d9:91:7f:dc:9f:92:cc:de:00:ec:05:d8:49:bb:
         1e:59:95:a7:53:6b:5f:d0:c0:a6:37:c5:9a:b7:ca:f1:c1:ae:
         02:19:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:16:39 2026 by rpki-client