Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
File:                     S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json)
Hash identifier:          ScLKeKTqw1h6VdQ+hUsaecnXOlHXWd+6QmSVVc1AFNI=
Subject key identifier:   BA:08:EF:E9:17:84:DB:B2:F5:8F:2B:82:28:21:92:79:7C:54:AE:79
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Certificate issuer:       /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial:       07C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
Manifest number:          07B5
Signing time:             Mon 20 Jul 2026 22:01:12 +0000
Manifest this update:     Mon 20 Jul 2026 22:01:12 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:12 +0000
Files and hashes:         1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: CkA5qKyXTGr/fH57z52y4UvxV+F6/G86SRGnC5T3IbI=)
                          2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: ZPYz03pw0KhMVBOPetBCRC/K+PV0o0wm8Fle12gB1bY=)
                          3: 56617572537F11EB9C970658C4F9AE02.roa (hash: 0ZFS32PgzMKmbFO0ZX4LyKpm9Pennvy2xmUXIm988gI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
                          rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
        Validity
            Not Before: Jul 20 22:01:12 2026 GMT
            Not After : Jul 27 22:01:12 2026 GMT
        Subject: CN=6a5e9aa8-f910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d2:72:19:2b:8e:fe:68:33:68:26:10:2a:77:
                    63:d2:30:01:b0:bc:ec:ca:3a:16:6e:1b:7c:b2:37:
                    10:d7:cf:7c:71:7c:09:50:1b:1c:eb:9b:c8:c2:7f:
                    71:5b:3d:49:e0:76:fe:e3:c5:a7:6f:da:0b:d2:38:
                    10:84:b9:75:f8:c8:32:fb:f8:bc:c5:3b:60:3b:de:
                    37:32:ad:6a:4b:97:45:b8:eb:02:6b:37:e9:7f:2b:
                    28:d7:18:47:5a:14:63:75:92:ce:8e:7e:71:ad:9e:
                    ac:6e:25:c2:26:23:25:89:9d:6e:0a:b0:14:53:a7:
                    cf:73:9a:b0:f6:cc:16:19:e1:dd:9c:54:46:be:74:
                    2e:df:8f:f4:58:67:88:b5:88:3b:3c:5e:b5:fb:56:
                    97:2b:da:2e:12:01:22:35:6e:35:88:f5:1d:a9:36:
                    d5:37:09:18:bf:b1:a1:b3:40:fb:a5:14:5d:3a:cd:
                    3c:ed:4b:b1:87:19:d2:cc:42:c4:5c:2f:ed:c9:ca:
                    3b:0c:7b:93:86:ce:3e:cc:58:23:e2:98:4a:ff:c4:
                    99:40:ac:71:ad:58:07:44:05:ed:93:fd:8f:01:01:
                    f0:6a:31:6b:b3:99:c0:ca:bc:64:61:b3:74:28:ea:
                    21:23:b8:1e:c1:b0:f1:d7:f1:7c:e9:a5:49:7e:79:
                    d8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:08:EF:E9:17:84:DB:B2:F5:8F:2B:82:28:21:92:79:7C:54:AE:79
            X509v3 Authority Key Identifier:
                keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7a:1b:3d:0c:77:10:a3:24:71:ae:0a:e3:17:d9:42:c1:5d:
         53:b0:58:8f:16:ea:2e:ca:3e:69:a0:d4:15:10:d4:65:c3:50:
         6f:ee:a7:f9:de:8e:05:12:6b:ea:64:8a:71:c2:0a:28:b0:79:
         39:17:b7:b6:42:77:fa:8f:2c:d3:57:8e:82:44:01:b7:33:e8:
         36:e5:ee:34:dd:34:bd:16:be:ca:c8:6c:b8:57:a2:95:08:9d:
         c6:fe:31:79:c1:df:4f:7c:a5:86:88:7b:63:01:f3:cf:00:76:
         c3:41:95:3c:8e:bd:f6:ce:8c:c2:47:8a:c4:b7:1c:bb:63:b2:
         81:3c:f7:4b:db:cb:82:f0:1b:3d:63:83:b6:7a:dc:e6:15:4d:
         e8:fd:8a:b8:68:52:e6:89:49:84:52:ad:ad:41:2e:e3:6d:cf:
         9c:ef:ce:48:1d:0b:87:78:df:76:44:95:e2:c0:db:a3:2b:80:
         59:68:3b:4a:f8:c0:cc:90:ff:38:64:56:61:1f:05:db:5a:6e:
         19:cb:e6:36:d0:2c:b0:0a:2a:1c:a0:3d:be:81:b4:6b:29:ef:
         ea:97:1a:53:63:12:eb:0c:4b:aa:ed:e8:79:05:b3:4d:3f:b0:
         6f:69:17:b0:22:af:d8:c4:b3:49:a6:95:77:df:e4:2e:d8:1d:
         4e:f3:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:24 2026 by rpki-client