Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
File:                     B7Y7XcFse0rper0AhqMVbV10Rlk.mft (raw, json)
Hash identifier:          qEEObc62OVnHikZ2GsNEtFrwUqeWYq29GDlcOjWWBHI=
Subject key identifier:   69:3F:3A:BF:20:81:60:56:99:C9:B2:96:78:20:9D:1F:E1:AD:EE:B6
Authority key identifier: 07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59
Certificate issuer:       /CN=A91C6E49/serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
Manifest number:          02CD
Signing time:             Wed 19 Aug 2026 01:42:59 +0000
Manifest this update:     Wed 19 Aug 2026 01:42:59 +0000
Manifest next update:     Wed 26 Aug 2026 01:42:59 +0000
Files and hashes:         1: B7Y7XcFse0rper0AhqMVbV10Rlk.crl (hash: H7ncRniCRFeGMwwL1rqqjt7EJCxDzy3a1uMdKrdY9DI=)
                          2: 98FD8A0E538411ED8D781C7CC4F9AE02.roa (hash: Px3OKRnbjIZ1iy6FbmsZnaMGY5apJ6himL6niD0r3kI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl
                          rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6E49, serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659
        Validity
            Not Before: Aug 19 01:42:59 2026 GMT
            Not After : Aug 26 01:42:59 2026 GMT
        Subject: CN=6a850a23-68de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:33:c9:0f:89:25:58:f7:20:e2:fe:e9:1b:
                    b2:ee:7f:76:01:cc:42:92:84:20:8f:b8:bb:d6:75:
                    43:15:f8:e2:6f:30:42:b7:5e:57:1d:4e:c2:e2:a4:
                    65:ad:d2:1f:6b:dd:fa:1b:5a:3d:a9:dc:f7:e4:e3:
                    18:7c:bd:ab:ac:38:da:02:f1:36:be:c1:6c:9e:1b:
                    33:bd:84:b5:fd:b9:13:ca:97:45:57:65:18:c7:48:
                    9d:8d:be:6a:de:64:ba:4b:f9:29:ed:b7:45:a3:84:
                    48:bc:a6:1c:dd:8f:6d:f0:5c:c5:d9:25:78:eb:4a:
                    e4:00:56:7a:95:09:77:28:cd:71:46:f6:a2:ce:11:
                    bd:b7:c6:21:01:2d:a3:0e:a2:b6:31:f3:41:32:8b:
                    a9:c7:27:44:3a:ee:9d:c7:89:a0:28:c3:b9:cc:ad:
                    2c:17:6a:d1:fc:36:d3:c3:db:6d:5a:20:02:b9:37:
                    bc:aa:b8:2e:6c:ee:0b:a6:b7:b2:e3:a6:42:0a:51:
                    f2:34:68:b7:48:d8:03:8b:7c:dc:ca:19:fa:f1:ef:
                    e3:42:c3:42:47:fc:db:ea:96:9c:c8:9e:ee:6c:d3:
                    92:24:84:c8:11:8c:6f:76:6a:9b:e0:37:e7:6b:22:
                    32:a9:a6:2c:24:18:6c:ec:52:64:c3:3c:9f:ec:86:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3F:3A:BF:20:81:60:56:99:C9:B2:96:78:20:9D:1F:E1:AD:EE:B6
            X509v3 Authority Key Identifier:
                keyid:07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3f:96:22:78:7c:43:9a:ac:19:2f:f0:ac:52:c5:73:71:9b:
         22:b6:41:65:c5:5b:7e:f3:9e:80:d0:29:06:87:27:43:cb:b8:
         de:16:c8:74:76:5c:b3:32:24:c1:06:8b:41:ac:71:ff:3d:c6:
         05:c0:41:59:e1:ec:c7:48:a9:75:23:26:23:2c:6b:d2:8b:89:
         95:51:55:73:7b:31:ba:89:e5:1c:35:ff:b9:d1:7d:1b:10:ea:
         57:cd:36:2c:f9:31:1d:05:95:89:e4:24:c6:91:7b:eb:5f:07:
         de:1d:d5:4a:42:ee:2e:b5:30:a9:b5:2a:e2:7a:e2:b3:7a:26:
         54:e3:1e:1d:b3:a6:c1:c2:8e:6a:03:5d:7f:bf:02:b6:f5:3c:
         d2:3e:f0:a8:94:44:12:7b:60:8e:74:fd:a1:71:18:36:bd:49:
         78:f5:07:86:4a:6e:6e:c1:5c:59:8f:21:c5:49:b5:bc:5d:4d:
         cd:f6:f5:7e:71:a8:64:65:6c:ca:42:70:31:f0:fc:75:49:83:
         49:46:03:bb:da:58:68:dc:d3:51:03:3a:de:1d:6c:23:73:cd:
         a1:91:1a:cb:27:e1:21:9a:8c:1f:ec:9c:56:d3:5c:c1:ca:7d:
         1d:41:9b:37:22:40:cf:c6:ea:76:fc:4e:c2:f6:4a:89:f0:9b:
         c6:70:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:22 2026 by rpki-client