Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          /BjgqgjqWELzZhYGXYiCJCbIo0NzRIJ+7pAojtNA3zc=
Subject key identifier:   54:B0:DD:E1:FE:C3:9C:B7:EC:2F:0F:63:7B:3B:FC:65:2E:9C:38:E5
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       02C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          02BD
Signing time:             Sat 29 Aug 2026 01:25:43 +0000
Manifest this update:     Sat 29 Aug 2026 01:25:42 +0000
Manifest next update:     Sat 05 Sep 2026 01:25:42 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: Qwu6B3/KfLQc2KdtNaz+eagiHwTNdtXqbmbbr2fs1PI=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 01:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Aug 29 01:25:42 2026 GMT
            Not After : Sep  5 01:25:42 2026 GMT
        Subject: CN=6a923516-438f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ff:fb:03:71:b0:24:13:53:09:d9:8a:c4:1a:
                    e4:2f:52:53:a4:c8:74:80:af:ff:37:df:0b:58:5c:
                    0d:ad:a5:c0:8d:2b:97:84:7d:d1:e8:0d:63:c5:8c:
                    bd:b9:53:47:5b:96:b7:90:b3:24:cd:c4:43:d0:e5:
                    00:34:1b:ea:23:1a:33:2c:5e:4a:c2:d1:ad:97:e8:
                    73:15:44:45:01:aa:b8:3c:b6:9e:eb:28:76:01:43:
                    c0:72:5a:e3:f2:3c:b3:93:d3:c9:0c:8b:0a:1e:4a:
                    d6:49:3e:ca:89:df:4f:ea:61:f0:0f:5f:0d:7e:28:
                    b2:ef:8c:03:07:49:28:bd:b0:ba:91:c0:f5:2b:f9:
                    48:4c:23:e9:69:fa:b5:b5:e4:f6:e5:1b:9c:a6:00:
                    59:a9:3f:83:db:b8:d0:6b:17:a2:52:23:67:f1:4a:
                    c2:74:c8:91:73:bf:e9:b7:27:d0:35:88:73:9b:b1:
                    9e:0e:33:a9:32:0b:20:d1:40:66:06:6b:70:00:e4:
                    38:62:f0:de:0c:f2:c8:b8:f9:92:cf:e1:6d:85:e1:
                    07:a8:23:f0:3f:80:75:45:7f:58:32:fe:c5:2d:b8:
                    47:81:70:b6:3c:ac:03:d1:53:a0:15:b0:55:b1:04:
                    9b:c0:12:3f:33:59:74:b5:c4:61:4d:ce:bb:e9:47:
                    0f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B0:DD:E1:FE:C3:9C:B7:EC:2F:0F:63:7B:3B:FC:65:2E:9C:38:E5
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:43:31:76:32:e5:21:d9:16:0a:e3:9c:e9:c7:46:e9:53:b1:
         44:91:90:71:12:15:5b:52:3f:bc:e1:fb:29:87:61:c6:3a:b6:
         f8:38:60:9e:ce:ed:22:b1:bc:60:ab:56:b5:b2:d8:e4:b3:ca:
         f6:40:4d:be:a3:62:c7:d9:20:af:00:ed:f4:5a:0c:87:4a:41:
         e4:77:47:f6:84:17:1b:2f:02:f4:f2:28:7c:71:72:f7:72:34:
         31:1c:2c:51:fe:bb:d0:51:c8:9d:7c:85:d8:6f:22:15:d3:83:
         a6:2a:87:2d:bb:1b:6f:61:1f:b6:84:46:34:e1:2e:6d:d0:f3:
         b0:61:68:e8:c2:f3:62:0e:43:b8:9a:1f:e2:cf:13:88:25:4d:
         93:61:19:b7:8b:51:6c:d2:21:fd:6a:f4:f7:a1:19:ab:cb:01:
         89:be:9b:d7:1c:a6:07:4c:d3:95:d4:7d:95:c3:27:5e:97:fb:
         41:f4:75:b8:a3:a2:8e:70:de:04:97:67:07:23:c0:f7:fb:70:
         80:1b:d2:a1:18:9b:c5:6c:14:62:5f:33:5b:b9:fd:02:b7:fb:
         a4:4a:13:71:a5:11:bf:40:3b:4c:2a:3d:d6:1a:68:43:16:3c:
         ec:ee:5b:a9:de:39:09:dd:da:0c:cf:ed:e9:28:03:9f:f3:53:
         fa:74:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 15:40:34 2026 by rpki-client