Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File:                     7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier:          c2CCf6U1IGsyAjiZx8qbfqpdi9PMAjWiGwAGzKPi/jM=
Subject key identifier:   D3:F2:BA:16:24:F2:A9:4F:8B:F4:31:A8:6D:A5:12:1C:7E:56:95:C6
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer:       /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number:          01ED
Signing time:             Wed 19 Aug 2026 04:02:45 +0000
Manifest this update:     Wed 19 Aug 2026 04:02:44 +0000
Manifest next update:     Wed 26 Aug 2026 04:02:44 +0000
Files and hashes:         1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: lj3YZu4+jcdhMiA90V+O6VF5cBIw6oRNYh064BPZSyM=)
                          2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: YjRa1pB30YYbPQePj+r96aLADC7aXekCFySJbOFg6Mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
        Validity
            Not Before: Aug 19 04:02:44 2026 GMT
            Not After : Aug 26 04:02:44 2026 GMT
        Subject: CN=6a852ae5-7a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:73:07:bd:0b:81:3f:d3:83:ff:b3:8b:f7:
                    19:3f:55:85:c6:8a:64:c5:7a:bf:d8:fc:91:f3:37:
                    8c:d2:21:92:2e:09:f6:90:94:91:5b:74:74:95:22:
                    e5:68:68:08:33:47:5a:ca:38:4d:57:d2:e2:b8:1b:
                    18:3e:bc:75:9f:a0:aa:3b:fb:b5:d8:c2:f3:85:65:
                    a2:f5:0e:08:5b:80:b9:e3:1e:76:63:c2:29:f5:cb:
                    fb:23:71:1a:60:0d:3f:ff:85:a5:30:d4:86:94:1b:
                    00:02:54:9b:5d:38:04:9e:05:21:0d:e8:1b:4a:48:
                    f2:db:3e:81:22:40:53:d8:ad:3f:ba:e0:e6:37:ec:
                    b8:e8:0d:89:ad:ce:0d:19:11:c0:4d:30:21:dd:46:
                    b3:07:22:b9:68:7a:79:57:bd:c6:cf:26:d3:50:eb:
                    5a:84:aa:33:71:ec:a6:34:3a:c9:db:6c:d3:8d:0f:
                    02:6a:6c:67:44:62:a8:eb:ea:5b:c9:df:64:ff:5f:
                    f5:25:6d:f1:f4:c1:fb:9b:e2:56:7e:5a:e0:eb:5f:
                    a7:23:49:65:66:c5:45:77:28:4d:40:d0:34:68:ba:
                    0e:bd:5a:67:04:a4:5d:b1:4b:99:f5:2e:10:dd:01:
                    1d:3c:45:2c:59:25:1c:77:96:a7:dd:66:19:00:4c:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F2:BA:16:24:F2:A9:4F:8B:F4:31:A8:6D:A5:12:1C:7E:56:95:C6
            X509v3 Authority Key Identifier:
                keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:28:d4:a1:37:37:cd:db:ea:18:32:40:7e:71:13:48:f3:
         76:5c:b7:2b:b6:4e:88:15:4a:dc:68:8f:eb:70:9d:d0:86:6e:
         0c:c7:4c:05:a8:c8:a8:c8:98:43:b6:0c:07:e1:7e:60:31:4e:
         37:f6:ae:9a:93:ea:a3:18:0f:5c:5e:49:d4:8f:50:cf:28:2e:
         53:fa:77:d0:87:d2:22:45:7a:ed:24:f1:09:c9:a1:3a:3a:b5:
         d5:21:a0:2a:43:58:8e:81:4d:c1:cd:e0:7c:69:d6:16:05:d1:
         ed:df:b5:82:6c:8a:7a:e0:ac:d2:bb:6d:47:54:51:6d:0b:d0:
         af:3d:59:e7:23:77:a5:3e:8b:fe:53:6f:0a:8d:7e:fe:4c:49:
         8d:37:70:83:e7:14:bd:07:e3:06:9a:be:e2:03:7d:64:63:87:
         14:3b:e6:17:46:1a:cd:3b:f1:6e:4d:d1:68:bf:07:c9:52:c1:
         37:f5:68:81:96:82:72:00:c3:51:9f:5a:d5:16:a0:aa:25:79:
         fe:40:45:7f:64:05:88:be:10:d8:f6:13:3f:f4:fb:b8:4d:e1:
         0b:42:95:ea:05:d2:de:fb:a6:35:9e:4b:25:95:1f:bd:44:f9:
         e4:29:3e:e4:83:04:ec:b5:c2:38:0c:dc:a1:56:8d:f5:87:82:
         7b:d3:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:26 2026 by rpki-client