Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
File:                     7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft (raw, json)
Hash identifier:          Ue8tNotKEdFENlhdRUBsvaVjNkyV1m6fIRP8VGS8iz4=
Subject key identifier:   C9:1E:65:09:EC:8A:AB:80:2B:5E:D2:F2:26:FA:08:45:8D:3C:03:D8
Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
Certificate issuer:       /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Certificate serial:       0728
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
Manifest number:          071F
Signing time:             Wed 08 Jul 2026 22:55:36 +0000
Manifest this update:     Wed 08 Jul 2026 22:55:36 +0000
Manifest next update:     Wed 15 Jul 2026 22:55:36 +0000
Files and hashes:         1: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl (hash: V+E1GhB1B9jx1l7caYkUIIWfVFHH0bgb5KytVEYr4Qw=)
                          2: 0665D2328D1A11EB80593760C4F9AE02.roa (hash: oswZbi98lBFbTOsN/D9Inuh/1yJOiKpEn94+Noc/S+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
                          rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 22:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1832 (0x728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
        Validity
            Not Before: Jul  8 22:55:36 2026 GMT
            Not After : Jul 15 22:55:36 2026 GMT
        Subject: CN=6a4ed568-eadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:f6:4e:6e:d8:58:d4:51:b7:ec:b3:d9:a5:
                    25:d1:49:88:21:11:60:98:9f:10:ec:0f:2e:b8:fc:
                    74:73:a7:b5:e1:25:71:45:75:b2:2f:f3:0d:9a:5c:
                    27:c6:db:f4:e1:be:14:93:58:60:11:9c:f8:fc:2f:
                    39:c6:6c:65:3d:69:fd:dc:a6:c1:74:13:7e:57:f3:
                    69:21:d8:b3:29:cd:9d:2d:d7:3c:3e:a0:74:61:ed:
                    7d:31:9c:82:a0:ff:f0:13:77:53:67:01:ca:1c:ff:
                    ba:4b:c7:b0:b1:d6:ef:4f:f2:5d:4e:13:0b:6b:c0:
                    0d:06:63:c7:ca:f0:cf:11:cb:09:ae:01:43:53:a5:
                    ee:d5:04:bf:15:9f:95:a5:2c:20:d2:0f:1a:6d:2e:
                    3c:54:50:a8:2f:11:eb:0f:d3:f1:6b:e9:0e:02:4c:
                    d9:d9:58:28:72:cf:92:14:7d:98:c7:d4:e2:ba:a9:
                    31:84:17:34:ff:34:e7:ce:a6:2c:ae:69:c4:09:74:
                    26:cf:fe:01:0c:13:02:3e:0d:04:37:0b:72:5d:f1:
                    dd:68:49:2e:54:72:30:af:00:2a:fe:82:9b:b9:04:
                    1c:0b:d9:92:af:9d:fd:92:75:4f:54:78:16:06:07:
                    46:47:ac:34:eb:26:3b:1d:19:63:2d:6b:a9:98:2e:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1E:65:09:EC:8A:AB:80:2B:5E:D2:F2:26:FA:08:45:8D:3C:03:D8
            X509v3 Authority Key Identifier:
                keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1c:76:e9:ac:1c:49:e7:cf:c7:2a:0d:36:ef:50:f8:48:c6:
         48:32:04:87:ad:7d:c2:55:e9:02:7b:dc:0f:0d:a3:e0:7f:e1:
         eb:de:58:11:75:fd:7e:02:05:84:05:77:92:b1:3a:50:0d:92:
         72:44:74:a6:fc:25:72:78:fb:84:65:28:d0:8c:85:eb:69:7c:
         ee:7c:67:8c:3a:40:78:20:a9:23:77:6e:07:80:ae:7e:43:8e:
         8c:d9:2e:12:0c:d9:56:aa:25:71:8f:39:e3:41:99:6e:f3:36:
         2d:db:fe:ed:5b:e2:fb:2c:f2:ab:7b:38:78:4a:36:af:da:a1:
         2b:ef:0b:88:94:ac:07:53:d7:d9:ef:26:ea:cb:a1:19:f1:3c:
         48:0b:f6:71:05:fb:04:68:6b:21:48:0e:ef:8b:c6:f9:0f:6f:
         95:05:5b:65:2d:8f:6b:a1:63:6e:10:a2:aa:0f:71:82:49:9b:
         23:73:67:e6:84:54:48:1d:c6:97:43:eb:4e:88:73:68:de:82:
         de:1b:04:02:e4:24:dd:1d:c3:fe:f6:48:c6:c9:e4:5b:07:b7:
         8b:61:fe:0b:da:87:c9:e5:86:5e:0d:6a:40:7b:3d:9d:60:48:
         5c:62:f9:52:57:07:d4:59:36:b2:be:b2:77:64:15:d3:83:d8:
         bc:8c:7c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:40:23 2026 by rpki-client