Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
File:                     72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json)
Hash identifier:          CJcBIHLRM6M8PFP+GawGc/ZQtoGJ7RmNJblXqTYqbGA=
Subject key identifier:   E4:F2:82:32:55:1E:3F:28:E8:FE:77:C3:DD:CD:CB:CE:32:78:28:C7
Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
Certificate issuer:       /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
Manifest number:          024E
Signing time:             Sat 25 Jul 2026 03:41:45 +0000
Manifest this update:     Sat 25 Jul 2026 03:41:44 +0000
Manifest next update:     Sat 01 Aug 2026 03:41:44 +0000
Files and hashes:         1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: LoqcpD+InTrUYs8BdiOg54aRel+w9go5ZuLPbJUGDd4=)
                          2: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: LgvzbH2Wh3cXgvtAocTygSfF5GcgHU1jmYJ8OJmW4QA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
                          rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
        Validity
            Not Before: Jul 25 03:41:44 2026 GMT
            Not After : Aug  1 03:41:44 2026 GMT
        Subject: CN=6a643079-2b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:60:79:85:ac:ab:4f:a5:84:70:89:7f:fc:86:
                    85:92:2e:c1:91:92:18:df:14:42:64:f4:1a:45:66:
                    40:8c:7e:e5:d7:68:58:24:ca:6c:52:46:1b:e4:85:
                    d3:77:11:a6:15:6c:8f:1c:61:36:9b:f4:a6:8e:44:
                    90:6d:2a:06:06:56:50:fe:36:20:21:41:30:a7:8d:
                    b9:56:18:c2:f2:72:1b:a8:49:0e:1a:10:17:e3:a8:
                    6d:8e:d7:91:92:91:27:90:0d:3b:2e:e5:a7:7d:96:
                    c0:90:cc:bd:5d:f0:fa:21:46:7a:6b:e4:96:ab:f8:
                    b4:9f:92:00:1f:aa:34:7f:a3:94:9e:58:34:eb:ea:
                    1f:53:33:09:e2:3c:61:0d:99:40:42:62:0f:09:40:
                    44:e2:35:b4:c3:77:c8:b5:d5:d9:75:26:88:fa:de:
                    b1:75:61:a6:48:11:6f:fb:d4:2b:8f:e4:57:75:bd:
                    11:2a:30:21:3e:15:35:ef:69:16:dd:13:49:4c:e2:
                    96:be:cb:d2:72:f9:f4:57:a8:21:03:e9:56:a1:15:
                    da:42:18:26:0e:16:5e:23:82:bd:5f:59:73:60:98:
                    8d:bd:f7:5c:6d:92:18:aa:9f:ae:12:2b:3a:7f:75:
                    5f:18:a5:ad:6b:6e:bd:e1:a1:d0:58:d7:4e:22:6b:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F2:82:32:55:1E:3F:28:E8:FE:77:C3:DD:CD:CB:CE:32:78:28:C7
            X509v3 Authority Key Identifier:
                keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:62:f4:ee:dc:11:a1:75:42:ac:dd:48:cf:2c:36:3c:09:67:
         60:78:76:ee:0c:ce:fc:cf:30:81:f0:82:9d:e3:24:eb:25:93:
         f2:37:ba:62:e2:9c:9d:28:da:c3:97:23:b1:31:27:99:67:9d:
         01:b5:6a:f4:46:d6:0f:f7:63:dd:83:12:67:cf:f3:95:82:b7:
         df:f4:e4:f5:5b:15:1c:f1:fd:58:ea:8b:56:2c:a4:8a:72:b2:
         92:87:a8:3d:4a:ea:f0:90:1a:fd:10:59:24:d1:22:41:e5:18:
         09:37:a7:0e:3f:3d:6f:f8:63:ec:df:26:dd:70:b7:51:44:45:
         62:ba:5c:06:43:b0:ee:99:19:50:18:90:d2:d0:42:2c:97:35:
         1e:28:30:52:bf:35:bb:57:37:ba:fb:5f:6d:3f:90:3d:6b:87:
         2e:0a:ad:59:1c:e9:da:ee:20:53:28:39:66:dd:ec:7d:18:57:
         37:46:f9:1e:01:e2:da:d3:3a:af:97:30:87:a9:7d:7f:97:21:
         73:9e:28:9d:29:b6:4b:37:f7:27:43:15:47:f9:23:91:54:54:
         15:e1:62:8e:82:8d:78:eb:a4:35:db:0b:79:db:ed:48:d6:b7:
         b3:4a:30:8c:15:bf:d5:5d:61:4a:b9:44:46:db:2c:07:96:8e:
         dd:dc:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:35:37 2026 by rpki-client