Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          8oxSlxyS7JFsgcpQOaqY/rdUD8LxLj1fOsYvb8O20jI=
Subject key identifier:   44:13:D0:95:7F:DE:00:EB:1C:84:9E:EF:00:F3:4D:E7:71:23:1D:CB
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       02B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          02A9
Signing time:             Tue 21 Jul 2026 02:42:08 +0000
Manifest this update:     Tue 21 Jul 2026 02:42:08 +0000
Manifest next update:     Tue 28 Jul 2026 02:42:08 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: y18CDq0b+TA4P9hcDAdXPRZOYe/sgBkLfliTkFTrflg=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 02:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Jul 21 02:42:08 2026 GMT
            Not After : Jul 28 02:42:08 2026 GMT
        Subject: CN=6a5edc80-414e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:e9:76:4d:f9:ba:2c:e2:95:e6:f1:8c:93:
                    03:81:3a:3c:86:58:43:e2:80:48:9b:48:f2:04:a8:
                    3a:3f:f1:ad:43:57:6a:af:eb:c4:12:2f:58:72:d2:
                    a1:d3:23:b4:29:f4:90:f2:c9:a8:c2:a7:02:2b:37:
                    d5:d1:eb:1e:71:f3:40:66:32:fb:dc:84:e5:48:ef:
                    4a:94:fd:f4:83:9f:da:dc:00:ef:29:02:25:ef:ef:
                    00:e3:ba:81:b0:09:4e:b2:3c:30:e3:7a:21:73:20:
                    20:92:ec:0e:f5:1f:19:68:22:55:81:8d:13:a9:63:
                    37:69:10:2b:dc:3e:8b:ad:46:15:38:6b:0a:87:03:
                    fa:73:8f:b1:34:27:fa:1c:10:cf:d7:e9:b2:9f:44:
                    c4:44:d1:9b:e0:d8:2c:43:b6:eb:04:44:46:24:84:
                    79:03:c3:1b:98:da:63:19:40:b1:4c:36:6d:49:c2:
                    61:f8:67:37:c6:d4:c2:00:02:69:9b:d2:c5:4d:9a:
                    f7:a1:06:4a:3d:46:86:7c:76:fd:9a:a4:3e:b7:97:
                    81:8d:cc:4b:bb:2d:61:b5:26:c8:f3:4c:4b:c8:11:
                    bf:18:e9:99:53:71:a6:51:bc:ec:6d:2b:0b:f5:a8:
                    31:44:89:cf:43:b9:7d:13:aa:35:5f:09:ab:f9:3e:
                    7a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:13:D0:95:7F:DE:00:EB:1C:84:9E:EF:00:F3:4D:E7:71:23:1D:CB
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b7:70:fb:a0:f1:b5:51:86:05:e2:d2:86:40:91:b1:02:0a:
         8a:03:dd:8b:5d:be:86:5d:a9:ba:d7:71:2f:8e:05:08:ca:c5:
         b2:1d:83:23:d9:a4:71:47:94:db:9a:a5:ca:74:e8:0a:f7:61:
         6f:05:d5:a3:bb:9c:43:6c:ae:77:70:1f:90:71:59:59:8d:1b:
         aa:de:de:94:a2:45:66:e0:5a:d6:f4:e1:bf:ea:64:07:13:4a:
         60:c3:b9:a9:2a:32:72:f8:df:d7:56:c9:98:c7:76:17:f2:85:
         a4:61:3d:89:ba:33:34:d1:7a:3a:e4:78:b4:66:dd:6c:9e:01:
         1d:cd:8c:62:50:bb:97:a0:18:b4:20:d9:d1:b3:40:3b:ac:c0:
         44:23:6d:b8:30:13:69:79:45:8c:05:bf:a9:5b:72:24:86:3f:
         77:bd:2f:6a:52:3c:9a:c9:c8:54:32:ea:d1:c4:e9:0b:35:09:
         e5:1e:97:9e:9d:43:fa:3d:aa:26:0f:a3:f0:09:81:e0:60:1a:
         b2:3c:03:53:e4:8b:53:d0:ce:a4:d0:7c:0f:88:7a:7a:1f:c1:
         59:23:b5:79:57:b7:de:31:7b:2c:26:94:ad:a8:5f:20:3b:6b:
         79:28:77:46:48:d2:f1:ea:82:c9:dd:8b:7c:9d:e0:1c:8a:05:
         ff:c9:c6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:14:16 2026 by rpki-client