Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File:                     7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier:          kOyo3vtk/j+Z+h5Q3liUJUdFShJ+3TqWZqbkVzfTIKg=
Subject key identifier:   55:A8:E4:99:7A:4D:87:AE:B2:4C:DB:1A:3F:62:CA:3E:23:A4:FF:4D
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer:       /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial:       1A2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number:          1A0E
Signing time:             Thu 16 Jul 2026 16:24:50 +0000
Manifest this update:     Thu 16 Jul 2026 16:24:50 +0000
Manifest next update:     Thu 23 Jul 2026 16:24:50 +0000
Files and hashes:         1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: RuuY+TVqQXLQp7rnxdUSY5KbGzJCSnu/JxeLsPnr1YY=)
                          2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: lNZvb1hOs/cWIz88gsfEJjScBqxN5z+Y27yw+tnMCds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
                          rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 16:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6699 (0x1a2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
        Validity
            Not Before: Jul 16 16:24:50 2026 GMT
            Not After : Jul 23 16:24:50 2026 GMT
        Subject: CN=6a5905d2-65fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:12:75:35:e5:5d:ec:6d:a0:6f:56:f1:df:b0:
                    81:0a:a9:cc:31:6c:c8:41:c1:64:cf:94:4d:74:d7:
                    55:f8:f7:97:dd:40:d7:b0:27:f7:c9:73:71:af:de:
                    97:cc:29:f1:98:2c:63:c0:3b:b8:3a:85:33:f6:89:
                    85:3e:7b:b0:62:47:27:da:be:ce:0d:f3:73:4f:3e:
                    43:b7:08:0b:00:80:ea:45:6c:19:a8:3f:d0:8f:94:
                    2b:42:e5:3b:28:f5:8d:a7:21:f5:3a:13:23:5a:9b:
                    ee:17:b1:2a:4d:12:ae:5d:c9:25:0f:79:13:10:c6:
                    f9:34:40:80:d7:2b:cc:67:6d:6c:96:cb:4b:94:d3:
                    4c:30:34:33:91:a1:5b:ae:2c:63:d3:c8:30:3c:f5:
                    23:94:6c:28:45:19:2c:a6:49:c0:b4:fe:5c:77:40:
                    96:ad:0e:48:0d:89:cf:37:31:66:4b:91:09:01:78:
                    66:73:e7:4d:0e:bb:b6:bc:a0:fb:57:81:12:18:fb:
                    77:f3:a7:95:a5:cd:c7:6d:b7:24:fd:cd:b9:cf:f1:
                    d8:02:48:d4:5d:97:88:89:3e:dc:50:bf:32:f3:9a:
                    57:98:8e:84:ce:f1:ff:17:f6:0e:98:09:73:05:6e:
                    59:d6:5b:74:2d:34:90:ce:a6:35:59:a8:60:cc:20:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A8:E4:99:7A:4D:87:AE:B2:4C:DB:1A:3F:62:CA:3E:23:A4:FF:4D
            X509v3 Authority Key Identifier:
                keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:3d:25:0a:89:70:57:5b:f3:1b:bf:5d:c7:ef:d5:f4:f8:
         6b:3d:d3:90:78:dd:1c:02:86:31:b3:98:27:e9:30:0e:3c:0f:
         c7:a7:91:05:68:ee:c3:1d:ca:b9:2f:93:22:2d:76:4a:40:90:
         49:5c:84:5a:a5:e4:5b:20:bb:80:0a:4c:38:6d:27:fa:6d:40:
         36:7a:b5:8c:43:0d:1d:7b:4d:84:6d:1e:c0:cf:7c:57:ae:4d:
         c4:11:6a:05:1e:81:0a:58:f7:33:ed:82:7f:74:69:c2:d9:1b:
         9e:72:3d:02:f7:16:f7:0e:60:b3:cb:46:d2:95:77:65:eb:69:
         27:a8:38:f8:aa:bd:2d:7f:05:eb:58:25:c8:ff:12:bc:be:93:
         1e:7c:3a:0d:d0:a3:56:4a:51:65:b8:b0:e6:2b:27:fc:80:73:
         f5:58:d2:8b:4c:df:8d:a5:72:d0:8c:ef:2d:e4:6a:d8:70:f8:
         3c:e3:e4:7b:a9:80:cd:84:03:be:12:28:b9:8d:b1:89:ac:3e:
         73:29:68:3e:e7:3e:3b:5e:11:bc:b6:34:25:b6:bb:b4:93:01:
         91:6c:68:b1:46:0b:dd:12:46:d0:f3:3b:fd:3a:db:74:1b:b9:
         b6:e6:ce:2d:05:2a:c7:8f:8c:73:46:79:9b:01:27:0a:cb:2e:
         f7:3e:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:05 2026 by rpki-client