Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
File:                     o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json)
Hash identifier:          B2G/ECARvNLWf8NRDdil7/79d0m9jm9iJM0ASmOfYm0=
Subject key identifier:   3E:FB:2E:61:9B:D2:DE:94:3D:A4:AB:92:D7:AB:D3:5F:71:E4:DD:EA
Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
Certificate issuer:       /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Certificate serial:       0B08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
Manifest number:          0AFB
Signing time:             Thu 16 Jul 2026 19:35:07 +0000
Manifest this update:     Thu 16 Jul 2026 19:35:07 +0000
Manifest next update:     Thu 23 Jul 2026 19:35:07 +0000
Files and hashes:         1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: TGJr6IOtu1q1xZjFwdqIZQ5SVJXwVjfR4SU7nj8WYlw=)
                          2: 62B22A709D2511F092B08685C4F9AE02.roa (hash: DbJt5uAKex9huMofhvsxlPhtfALGiwZmq+7JtduRU3g=)
                          3: 631E45669D2511F092B08685C4F9AE02.roa (hash: oE0udGN+SutLxt/AfcTk4Go1StJ+DmNSlYRBs9ZP8J0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
                          rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 19:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2824 (0xb08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
        Validity
            Not Before: Jul 16 19:35:07 2026 GMT
            Not After : Jul 23 19:35:07 2026 GMT
        Subject: CN=6a59326b-ef83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6e:54:6b:2c:01:1f:b7:bd:96:06:83:11:d4:
                    b6:bc:bb:cf:12:20:04:c4:7e:fc:8b:f0:67:63:30:
                    19:47:7e:5d:37:e9:1e:a4:19:3f:2c:fd:73:4c:6a:
                    10:8b:a5:21:ca:82:3e:78:e1:cf:2c:36:b2:10:f7:
                    65:39:8a:ab:4c:2f:24:46:80:9f:91:8d:99:f8:5b:
                    00:4d:80:3d:dd:16:27:0f:1d:2a:c6:8d:7a:d8:c0:
                    c1:bc:75:72:cf:c9:da:50:71:07:53:a0:1a:a5:0c:
                    72:8c:b8:c5:70:52:a5:0e:0a:48:0a:56:40:65:30:
                    1e:fd:ff:7c:bc:04:e0:bf:2d:c3:9f:6d:75:7b:28:
                    55:27:dd:08:8e:94:1f:61:cc:d0:65:bc:ed:aa:6d:
                    25:ca:a2:e2:b1:56:1b:53:4c:a3:7f:2d:7a:d3:5a:
                    9a:8e:12:6e:a0:e0:b0:4a:c4:8d:71:e1:42:c5:73:
                    0f:3c:27:9b:33:c6:3b:e4:47:ab:c2:b1:ef:d9:da:
                    46:dc:b1:eb:c7:a1:da:5d:0a:10:99:95:81:16:3b:
                    74:ae:c0:de:cf:2a:a9:fa:fe:c7:04:2b:74:bf:58:
                    f9:3b:d1:fa:3f:51:bb:97:09:ad:db:f0:26:1b:7c:
                    ed:7d:de:4f:6e:f1:44:d2:82:02:48:fe:89:40:67:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FB:2E:61:9B:D2:DE:94:3D:A4:AB:92:D7:AB:D3:5F:71:E4:DD:EA
            X509v3 Authority Key Identifier:
                keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:4c:c2:4a:22:db:ab:86:18:e9:6c:1b:86:bd:fe:a5:6f:
         d8:43:a4:8c:8c:e8:81:12:7e:bc:a4:97:b4:e8:76:e3:d3:ae:
         7a:b8:bd:58:df:64:e2:e2:31:08:bc:f8:cd:4a:4b:23:d6:78:
         07:93:8f:f4:b3:99:fe:24:87:9d:fb:b0:b2:4e:81:7b:07:91:
         4a:41:86:6f:3b:c1:50:99:c6:31:c2:8f:62:c7:12:94:31:bf:
         80:6b:82:22:61:ea:f6:1b:fc:3f:1f:ac:98:97:28:2f:ab:ec:
         3e:92:08:cd:05:89:85:aa:36:4b:8f:bd:b4:39:54:58:db:e6:
         63:09:bb:9c:e2:76:f3:21:0c:5d:ea:f6:b2:75:f7:86:dc:de:
         5c:be:18:db:90:3c:bc:cb:12:85:b6:a7:c8:84:7a:20:90:dc:
         9f:31:c5:a5:35:50:a3:ca:99:4e:77:28:de:05:46:da:e3:19:
         d4:7b:14:36:b7:f9:cc:e7:c8:46:1a:8c:8f:a1:63:ae:d5:48:
         db:cb:77:17:19:86:8d:ab:20:cc:7b:48:6a:03:1a:9d:77:2c:
         85:7e:40:9b:ad:ad:77:fd:44:fe:fa:9b:b8:18:67:ed:e1:f7:
         88:25:b4:74:12:6b:0b:e2:cf:79:fc:85:12:ed:ab:6d:8a:c1:
         81:8d:a0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:21:20 2026 by rpki-client