Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File:                     mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier:          +47o1Cr//9qU41z+TXcgrZJtwmb+vtFBXe6icRjmSeU=
Subject key identifier:   B7:68:84:D5:FC:BF:14:3E:29:A2:A7:6F:CC:9E:39:14:BA:FB:2B:84
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       07BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number:          07A8
Signing time:             Mon 06 Jul 2026 21:59:22 +0000
Manifest this update:     Mon 06 Jul 2026 21:59:22 +0000
Manifest next update:     Mon 13 Jul 2026 21:59:22 +0000
Files and hashes:         1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: YQ6LmEw6E8lcIDQF2Vm3YPrq+SddJ4LbQ9Isx+1szhM=)
                          2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: ZZOQZPDyiLZTqV8WbUexxdia9It2J3YHCvfk5XQ2eMo=)
                          3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: +unTxmS/iLt2Dr1BIXJYLku10bUj+HTQ+FfTOg9lpds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 21:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
        Validity
            Not Before: Jul  6 21:59:22 2026 GMT
            Not After : Jul 13 21:59:22 2026 GMT
        Subject: CN=6a4c253a-7047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:1e:b7:ac:7d:54:16:a7:f7:ce:b8:d1:ee:
                    5a:e4:dd:72:0f:51:9c:1b:e7:fd:cf:4c:c4:65:bf:
                    30:1e:c2:8d:8a:5a:e1:a5:0d:a5:7d:1b:09:09:d8:
                    33:00:10:d9:b5:2c:d9:13:e0:94:97:33:10:df:12:
                    d5:c7:66:71:cb:d6:44:3a:1a:8e:bb:3c:a0:fc:3e:
                    45:66:6e:0e:3e:7f:3b:fa:2f:3a:f0:60:12:c7:a6:
                    02:5f:96:86:75:aa:70:98:f9:a6:a0:28:06:82:16:
                    3c:fc:17:0c:93:eb:ee:2b:73:c0:71:7d:df:0c:f4:
                    71:54:bf:4f:b2:65:a2:d2:35:f4:2b:b8:93:48:e2:
                    79:b5:98:c5:b1:07:3f:02:81:20:b2:c0:df:a0:7a:
                    cc:db:0d:ec:a2:37:6e:19:2e:54:f7:1a:f4:e4:80:
                    bd:ca:33:b5:b6:88:78:87:bf:f2:3d:86:29:16:17:
                    5d:4d:74:19:72:3c:a6:03:4b:d4:a4:2a:1b:45:6b:
                    63:01:a4:9d:d5:a4:18:72:14:7a:ad:c4:b1:3b:61:
                    1c:41:30:8e:87:5f:d7:0e:c9:4a:2b:fb:fa:9e:59:
                    e5:f0:f3:8e:e9:4c:65:5f:83:fd:2f:31:f0:3a:eb:
                    ef:4f:d0:aa:c3:4c:62:fc:6a:9b:91:0c:5e:bd:d2:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:68:84:D5:FC:BF:14:3E:29:A2:A7:6F:CC:9E:39:14:BA:FB:2B:84
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:05:a0:76:dd:c5:02:0d:47:26:e1:21:e4:b7:59:03:5b:97:
         de:3f:4f:02:3b:24:be:05:11:d4:5d:e7:65:6d:28:4b:2d:33:
         c8:6c:f1:b9:83:bf:0c:3b:76:34:a7:be:1b:da:e9:24:38:8b:
         e5:87:be:e4:61:48:c3:99:11:26:f3:2e:bc:7a:f8:7a:81:8d:
         65:b0:49:17:46:17:02:c4:07:5f:3a:6c:1a:47:be:20:23:49:
         2b:45:af:22:e0:73:1c:95:fe:89:94:d5:1f:5e:90:d7:07:73:
         3f:b2:25:3e:26:12:fe:a1:ed:9c:4a:93:81:d3:c6:94:ae:ea:
         19:20:3c:f7:bc:41:84:42:00:43:65:a5:22:cb:12:f4:64:c5:
         c8:05:10:4d:2d:c2:2f:5e:2b:e7:37:09:87:e8:26:92:49:07:
         f7:45:d4:2d:00:f3:04:98:b5:14:fe:f9:48:fe:d2:b8:b7:b1:
         68:e8:f0:52:94:cf:02:15:ec:2c:da:50:61:52:c3:2a:0e:c7:
         59:31:94:8a:d2:c5:09:76:4e:0f:4c:01:7f:21:b3:64:d5:a9:
         e0:42:1e:c6:0a:9a:6d:9a:e3:7d:39:12:9c:74:d3:9d:cf:26:
         eb:59:a1:b0:29:40:a6:86:aa:cd:da:32:23:d9:6c:53:ee:13:
         2f:6f:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:53:13 2026 by rpki-client