Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
File:                     7tKAkYf96vxUeKw6tWpqtPnBvUY.mft (raw, json)
Hash identifier:          L4HbzB2QMBAgSNdmlkwUW8+BvYH3ppLyO0iOvMCorZ8=
Subject key identifier:   ED:34:C1:14:FE:C8:41:43:2F:DE:8B:E3:29:5E:A4:67:F1:84:71:30
Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46
Certificate issuer:       /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
Manifest number:          61
Signing time:             Tue 21 Jul 2026 09:55:10 +0000
Manifest this update:     Tue 21 Jul 2026 09:55:09 +0000
Manifest next update:     Tue 28 Jul 2026 09:55:09 +0000
Files and hashes:         1: 7tKAkYf96vxUeKw6tWpqtPnBvUY.crl (hash: aOOFJXZOCbLZa4l99brf8lZJ6KMgjF9HE+GPpsLaJvI=)
                          2: 856BB842F51811F093E49DB5586F56BC.roa (hash: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl
                          rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 09:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46
        Validity
            Not Before: Jul 21 09:55:09 2026 GMT
            Not After : Jul 28 09:55:09 2026 GMT
        Subject: CN=6a5f41fe-aaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:ea:96:cf:60:7d:ba:97:6f:5a:c1:da:77:
                    59:01:7a:7f:44:f7:fc:9b:41:fa:82:1a:8f:de:12:
                    91:bd:7b:c3:c4:f6:d5:12:f8:18:9f:c3:42:89:bf:
                    02:3c:71:0f:bb:58:01:a8:84:45:53:53:7a:dd:e2:
                    0a:f9:31:e5:d8:00:9d:0e:de:93:31:b8:d6:1d:fd:
                    d2:54:99:52:3b:c3:b1:eb:8c:ab:08:e2:40:06:a3:
                    21:00:6e:a3:f7:19:a4:73:53:3d:d9:4d:8a:50:88:
                    30:c1:d7:7e:d2:d5:23:39:65:b2:5d:e3:b5:cc:42:
                    68:46:0f:96:2c:95:fa:84:c0:6a:3f:a1:e5:81:34:
                    37:8a:94:d9:05:1d:4e:e2:3d:f8:c9:24:35:0c:8a:
                    fb:44:5b:61:d8:cb:ce:66:20:58:3e:d2:77:23:ed:
                    a6:18:db:21:99:59:66:89:8d:de:8b:61:37:d5:e9:
                    d3:55:2c:ca:2c:70:bf:ee:b6:e7:a3:60:a7:40:ff:
                    d3:e4:43:aa:8a:b3:a1:74:8e:b8:b6:3b:32:3b:8d:
                    89:05:4b:15:d1:42:03:ba:3c:55:0c:ca:e7:fb:1b:
                    8e:8d:59:aa:38:99:4c:94:c4:81:d6:f9:aa:9e:30:
                    6a:4e:ba:60:48:0c:26:a9:ab:81:b2:26:b7:09:00:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:34:C1:14:FE:C8:41:43:2F:DE:8B:E3:29:5E:A4:67:F1:84:71:30
            X509v3 Authority Key Identifier:
                keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:ff:07:91:db:eb:86:4c:67:4f:83:de:18:6b:8c:d0:60:
         5b:64:18:9b:9a:ec:de:71:af:a3:ab:af:00:b7:da:92:02:4a:
         f5:4d:78:57:28:fb:56:7f:ba:48:31:92:93:56:d2:1b:1f:65:
         0b:44:4a:aa:d1:8b:44:b3:e9:76:29:fc:a6:c2:d3:47:20:c5:
         2e:9b:c5:b4:b3:17:23:77:a4:f7:8c:e4:25:1f:7d:7f:9d:5a:
         66:44:27:af:b4:87:93:72:3a:47:b0:b3:27:4e:35:48:d0:dd:
         84:a5:98:c1:ef:53:cf:62:91:89:68:18:c3:b3:9a:c2:df:01:
         ee:ed:dd:90:6b:5a:e8:00:e4:0e:5d:ed:47:fb:46:a7:d9:bb:
         2f:46:18:b8:5d:65:c5:90:72:92:84:ea:8a:8f:22:1a:87:5f:
         2f:73:7b:7e:5c:70:17:b3:bb:7b:de:f9:2f:1a:73:09:44:57:
         b7:20:3c:f2:18:99:94:f0:7d:a0:87:a5:d7:dc:56:12:ca:2c:
         34:14:38:3a:6a:41:78:50:29:5e:4c:c6:9b:08:e5:d6:8b:9a:
         be:f2:b6:1b:53:e3:33:ae:a7:ea:84:8d:da:32:b5:a6:16:45:
         17:e8:56:f4:27:a7:36:9b:67:1a:f9:8d:30:de:02:ec:82:de:
         0d:99:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:49:33 2026 by rpki-client