Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
File:                     ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json)
Hash identifier:          5sDA6a4b/Mb/sidOzRAr0eIYtIHAxnpO6AeAfG+PhNI=
Subject key identifier:   4B:CA:EE:82:A6:BD:0B:2F:E8:7B:47:E1:62:92:60:6D:82:38:BB:C5
Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
Certificate issuer:       /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Certificate serial:       06CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
Manifest number:          06B7
Signing time:             Tue 28 Jul 2026 22:56:51 +0000
Manifest this update:     Tue 28 Jul 2026 22:56:50 +0000
Manifest next update:     Tue 04 Aug 2026 22:56:50 +0000
Files and hashes:         1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: e8P98+7ljy1Zzcq/VwapQy2EqdQ1piEq1CCfn9yfhTY=)
                          2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: 8KAuUjRAKsyBi8GlES2lC9s8KKWwTwTgclR9At7r6RQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
                          rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
        Validity
            Not Before: Jul 28 22:56:50 2026 GMT
            Not After : Aug  4 22:56:50 2026 GMT
        Subject: CN=6a6933b3-519a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:ac:8d:cb:02:39:b8:15:0e:25:82:34:71:
                    1e:84:5d:f5:bd:5c:9e:9d:17:39:2a:71:7e:48:f3:
                    35:d7:b8:77:46:70:ce:3e:8b:48:e7:29:97:c8:e9:
                    e5:b7:16:4e:86:77:c7:68:74:2d:36:44:c4:99:47:
                    54:b5:f6:b1:ce:7a:c2:f3:f0:3c:7c:26:2a:94:11:
                    fc:07:3a:ad:5f:42:cb:d4:aa:98:a2:b7:5a:04:f3:
                    c3:fd:23:85:5b:e4:29:2e:d1:7e:4d:0e:cb:c3:0d:
                    8c:0d:0e:2c:51:fe:79:2f:94:07:e6:93:d1:12:f0:
                    17:ef:ca:6b:3e:a2:f3:06:3d:62:4c:22:e8:e3:26:
                    1f:87:11:67:f9:7a:b2:e8:39:b4:91:c8:3d:b7:46:
                    74:13:f8:05:d8:7e:ab:e2:bd:c8:bb:ac:ae:50:54:
                    14:e8:30:f5:d4:d0:19:3f:79:2c:71:d1:dc:a9:8f:
                    e8:2f:bc:36:e1:59:51:49:67:98:c4:6a:77:9c:f7:
                    7c:83:bf:5b:24:92:7c:85:4e:09:fb:87:52:86:8e:
                    2f:52:63:d7:0e:0c:fd:15:9e:c5:76:f7:40:2f:e6:
                    49:5a:5f:aa:d5:25:2e:e7:f6:d8:c7:1f:b8:16:05:
                    db:0c:4a:35:67:73:03:33:9b:0d:1f:c6:4f:40:e9:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CA:EE:82:A6:BD:0B:2F:E8:7B:47:E1:62:92:60:6D:82:38:BB:C5
            X509v3 Authority Key Identifier:
                keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c5:a9:ed:43:cd:8f:a1:ef:54:e2:a5:94:b9:c4:35:69:1b:
         b3:c7:72:51:de:40:20:36:d4:e1:7d:a0:ce:e8:7b:aa:fb:d6:
         4a:4b:75:fe:04:c4:0d:38:a2:ce:1e:6a:8e:22:ea:4a:d9:9b:
         3d:97:20:7c:df:ef:9c:c1:82:de:c7:e6:f6:f3:8d:11:be:f1:
         08:e5:cf:29:d6:2f:da:4f:ce:c0:23:ca:a2:be:92:cd:1d:e0:
         92:77:dc:22:5b:c0:13:a9:c1:33:ca:9d:39:f9:9e:47:30:bc:
         d5:78:09:b4:f4:03:f7:92:42:3a:04:e8:dd:67:6f:08:04:94:
         cc:a7:be:ad:1b:f2:f1:bc:c5:4e:63:58:b8:80:cc:51:4f:4f:
         43:13:0d:f8:18:f2:2c:b9:00:93:ef:46:f7:1d:2d:a6:1a:9a:
         ed:81:fb:cc:13:c8:29:8e:68:35:cf:cd:dc:59:1d:41:52:c3:
         57:bf:47:cf:c0:20:77:ea:9b:ed:12:3a:ff:6d:ab:47:97:6c:
         44:fe:bb:8f:92:c6:3b:0a:c7:41:3e:dd:c7:15:86:5c:12:b6:
         b4:4f:60:7c:b1:19:90:5a:cc:f1:72:2c:69:f6:81:9d:62:ec:
         9f:9e:48:54:d6:92:8e:65:f9:56:f5:54:7d:8e:e1:f0:92:5a:
         f2:29:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:26 2026 by rpki-client