Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          7hnL/qNSke9c0aNtRZFXSvhWQdUUb8n5sDIcz/pn538=
Subject key identifier:   58:6D:B7:8A:5A:76:75:D4:34:86:D6:65:1B:B5:7A:F2:D5:53:4C:78
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       0730
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          070D
Signing time:             Sun 02 Aug 2026 22:41:07 +0000
Manifest this update:     Sun 02 Aug 2026 22:41:06 +0000
Manifest next update:     Sun 09 Aug 2026 22:41:06 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: ZzfRK6a/9zX/IpSSOf6+VYbj8N2iH/crRtK/LbWAe8Q=)
                          2: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: 211xEjDsnDyQAXNRqQMMENUPbgNnfotqpOqOJlVt87Q=)
                          3: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: CzrJ5PoscnPJXcdPQru0LSL38khcMwxqYo2Sgh7sIpY=)
                          4: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: 9gnnOt+KjUGWNs4otjuLVwe8oX6fVgNUzwNG3C1IhnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Aug 2026 22:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Aug  2 22:41:06 2026 GMT
            Not After : Aug  9 22:41:06 2026 GMT
        Subject: CN=6a6fc782-61bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:2d:cd:fb:65:ad:8d:85:bf:36:ed:84:25:
                    e3:95:38:e2:82:50:be:2a:26:20:7e:81:03:89:3a:
                    8e:46:c0:d0:74:92:d0:0b:e3:78:b7:20:24:d3:c4:
                    da:15:9d:38:d9:25:98:97:d1:d7:cb:e1:c6:23:bf:
                    c1:23:45:b0:f7:7f:67:b6:3c:aa:73:a3:f6:76:33:
                    5c:15:2c:9b:e0:93:44:4b:98:ec:5b:19:b6:b2:48:
                    95:51:35:71:61:79:a0:95:dd:1f:6f:d1:bc:d8:73:
                    e8:cc:cf:ec:22:7e:4f:b8:2e:eb:9b:01:27:3b:53:
                    0b:53:ee:ab:e6:a2:f4:58:a4:8d:31:e1:8e:ac:b5:
                    d5:86:08:19:2c:70:12:16:f6:3b:cd:b4:00:92:70:
                    c8:d7:dc:90:4e:cb:c8:84:25:a9:6c:18:ce:8c:77:
                    24:c8:13:d6:2d:45:d5:c4:aa:fa:6a:f9:5e:88:19:
                    0c:e7:e2:97:d9:1d:83:9a:5a:5f:76:ee:4a:b8:83:
                    54:37:1c:70:41:38:aa:88:08:37:eb:46:92:5e:c2:
                    be:08:ed:ce:8f:22:bb:f3:21:05:38:37:95:92:e3:
                    e3:5c:16:52:57:c2:5b:80:68:51:04:59:bd:5a:1c:
                    78:9f:27:ac:bd:ee:69:bd:ef:cd:ff:b7:e9:00:40:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6D:B7:8A:5A:76:75:D4:34:86:D6:65:1B:B5:7A:F2:D5:53:4C:78
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:dd:56:10:34:ad:ec:a8:fd:b5:2a:62:37:bf:90:6b:9f:73:
         4c:f7:34:9d:ad:6a:75:6e:fc:62:22:3a:11:98:55:55:f3:a9:
         43:94:ae:6d:b2:ed:a7:f1:a4:79:f1:bd:63:52:7e:72:89:ee:
         05:22:8d:1f:91:32:cf:f5:56:b5:a6:8b:18:7e:7e:48:aa:4f:
         23:89:71:2b:a7:8f:b3:d7:e2:9a:e9:98:69:e4:2f:42:44:0a:
         8a:94:46:53:83:96:c2:43:1d:8d:f7:63:4b:00:76:ab:3b:33:
         e4:42:69:0f:57:54:05:2a:d0:a3:a6:cc:92:3e:4f:99:e4:dc:
         04:f3:28:7a:c4:b4:ce:91:7d:b0:97:24:75:3b:d5:d3:f9:9f:
         d6:65:86:3e:4c:10:d1:73:66:35:c0:d1:47:21:ef:ea:fa:9f:
         a7:4f:f3:a2:08:f8:ad:3b:ab:cb:d6:ca:21:9f:ab:58:c9:4e:
         68:c9:6b:95:25:5b:38:e6:83:e6:3e:66:d7:d7:80:6a:99:bb:
         92:82:53:63:ac:9b:1e:44:9b:1e:2e:4c:9b:fb:e0:16:f2:9d:
         2d:0e:f7:1f:9f:c2:d2:41:07:fe:13:dc:75:d8:37:05:17:33:
         5a:ab:d5:fc:4c:39:66:fc:96:ef:53:b1:fd:74:41:be:74:1e:
         ef:9e:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:46:56 2026 by rpki-client