Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          2aAaBZ3JjeE+62QCwK7Y6kVf97dG6S3cnpdC03cXXzw=
Subject key identifier:   23:CD:2C:99:7E:56:A0:B6:B8:EB:38:5A:3B:E3:94:93:54:3C:33:04
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       02C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          02BA
Signing time:             Sun 23 Aug 2026 01:14:28 +0000
Manifest this update:     Sun 23 Aug 2026 01:14:28 +0000
Manifest next update:     Sun 30 Aug 2026 01:14:28 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: syh50aFuj/VQl4qvC3vMKClemufzir3ihFzrOK3ndFg=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707 (0x2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Aug 23 01:14:28 2026 GMT
            Not After : Aug 30 01:14:28 2026 GMT
        Subject: CN=6a8a4974-34d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:41:a4:4e:06:62:1b:e4:70:2d:97:8e:fb:
                    df:d4:b6:f3:02:b0:cf:4a:ae:fc:f7:7f:9f:b3:34:
                    0a:b9:ef:8b:57:63:11:bb:3f:53:ea:11:d2:ec:bf:
                    16:f0:0f:64:f4:cf:5f:6d:00:ef:ee:08:2b:ee:14:
                    b6:2f:78:96:00:a9:05:35:9f:a8:9b:ff:22:c2:5f:
                    d3:5b:db:7a:f6:db:cf:11:ab:62:93:33:79:f4:7d:
                    93:4c:b7:31:4c:b8:1c:b8:89:7c:67:b5:87:5a:ab:
                    2a:1e:52:15:1a:3b:06:ce:64:34:8e:00:a2:b4:e2:
                    dd:1c:72:49:4b:63:f5:0e:ea:01:6d:40:7e:13:bd:
                    0d:b7:f8:0e:af:78:c7:c0:ee:63:a9:44:70:ae:51:
                    28:30:35:0c:f3:4b:d3:97:0e:ea:76:9e:c1:1a:2b:
                    e6:8b:c0:98:fc:ab:38:1d:12:2f:1b:3f:ff:4a:80:
                    e6:d6:bb:8d:1c:ce:9f:ea:61:44:52:07:3e:6e:fa:
                    58:58:aa:95:9e:22:b1:c5:7a:b4:5f:59:3d:3a:e6:
                    4c:b3:a7:af:64:7a:d1:56:ef:83:55:13:46:88:ed:
                    ff:87:1a:39:2c:c0:04:60:8e:3e:a5:f6:ad:51:fb:
                    89:2e:48:e9:b1:9f:7d:b6:7a:35:10:97:b8:57:5b:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CD:2C:99:7E:56:A0:B6:B8:EB:38:5A:3B:E3:94:93:54:3C:33:04
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:df:b2:81:f4:9e:06:c0:80:42:c9:57:36:33:5a:35:95:8f:
         9c:f3:3e:a6:0f:f7:af:3f:24:a4:1b:79:ef:28:4d:a6:fa:21:
         9a:6e:dd:9f:cb:8c:2a:7b:4d:60:30:fc:fa:d2:02:28:dc:47:
         13:71:cd:a1:ae:4c:a8:dc:10:c0:30:11:8c:eb:49:04:37:60:
         77:44:90:ea:54:95:d6:58:24:eb:66:d3:55:93:cb:2b:a1:a7:
         5c:ad:2e:84:b7:48:e4:34:2c:f2:4b:b4:19:28:d3:39:08:c2:
         18:17:24:1e:1c:f2:3e:2f:a5:c8:48:73:fc:1d:dd:9b:ab:23:
         d3:db:4b:f3:3c:95:a1:29:1b:7f:a0:bd:59:98:a8:3b:a4:2d:
         12:0b:ab:3e:33:ed:e1:f7:9a:7d:73:b2:dc:7d:cb:e8:df:fc:
         91:da:76:84:6b:4b:af:43:07:5c:ae:b6:7c:da:32:85:49:85:
         67:fe:26:d0:6a:ba:00:87:00:07:91:7b:a4:3b:8d:3a:9d:ee:
         58:78:f6:50:f5:69:8f:71:f5:47:f5:7d:97:ea:96:fa:94:af:
         29:2c:36:de:43:0c:99:ca:bc:cd:a2:22:a9:61:0f:cf:a7:26:
         18:92:60:e2:f0:79:2f:17:ba:b3:cc:07:02:4d:11:d3:3e:c9:
         07:72:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 02:03:57 2026 by rpki-client