Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
File:                     g7x91dFCfoM0DS32wztiPUPX7KQ.mft (raw, json)
Hash identifier:          /8Q3yT7cf7oTJ9lU5WYT3uOuK1DBfu2MlV03rIYTuMM=
Subject key identifier:   01:BB:FF:07:9F:84:7B:6A:68:40:92:4C:C5:73:A9:9E:87:15:61:D0
Authority key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
Certificate issuer:       /CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
Certificate serial:       0F90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
Manifest number:          0F7A
Signing time:             Tue 28 Jul 2026 17:38:49 +0000
Manifest this update:     Tue 28 Jul 2026 17:38:49 +0000
Manifest next update:     Tue 04 Aug 2026 17:38:49 +0000
Files and hashes:         1: g7x91dFCfoM0DS32wztiPUPX7KQ.crl (hash: XwCJfNAw004+kxS4nBhs+Asn3La9lcXL4g3r4u421ww=)
                          2: 16C329A4713B11F0A2354E78C4F9AE02.roa (hash: IL/E/nWcOLdpvY6kRKEbHNWbHgxGSummYUXsi86XlXA=)
                          3: E1769D329EF711EABE23195AC4F9AE02.roa (hash: t/D8IYKB/rM46dZgcTuJ/X2CfX2Uf2X0FQN7ZHOdxv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3984 (0xf90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B468, serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
        Validity
            Not Before: Jul 28 17:38:49 2026 GMT
            Not After : Aug  4 17:38:49 2026 GMT
        Subject: CN=6a68e929-530e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:2d:4f:12:51:19:00:d9:49:87:f8:9c:d5:
                    9e:79:13:ad:a8:92:56:3c:e4:84:73:f1:fb:3a:50:
                    09:fc:42:2d:8e:b7:19:e1:28:75:97:01:ac:c6:cf:
                    a3:22:86:04:34:74:9d:eb:34:b8:dd:32:91:de:00:
                    81:1b:2c:64:d1:45:1d:3e:2c:c4:52:a3:51:23:66:
                    1b:53:e8:3f:45:bf:70:3d:39:19:7b:51:ec:c2:66:
                    71:e9:54:8f:c2:c3:9f:6b:18:71:87:b9:1d:55:27:
                    c8:26:54:e0:33:e1:b3:97:dc:4c:90:c4:9d:dd:d5:
                    60:98:c5:5d:97:48:96:f5:57:d4:0e:3a:98:c2:0b:
                    b3:d9:7a:6d:10:d8:d5:bd:17:3f:32:5e:a4:f1:82:
                    75:a4:1e:79:16:2e:e5:8f:1c:51:46:98:8c:0b:4f:
                    3a:a8:01:1e:24:5d:66:47:31:77:85:b4:f9:ac:af:
                    f5:b9:cd:74:d8:dc:ca:e0:b1:ff:67:d8:28:70:9f:
                    46:3a:aa:e0:d1:39:90:b1:a9:35:ec:b1:ce:74:db:
                    97:da:69:c0:b2:0a:a7:ae:a8:8f:d1:a0:35:a7:a0:
                    a6:8c:48:23:5b:60:6d:a5:8a:7d:6d:44:7a:4a:30:
                    2f:ba:8e:ad:c8:bf:7f:d2:2f:a9:ab:15:0c:a7:02:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:FF:07:9F:84:7B:6A:68:40:92:4C:C5:73:A9:9E:87:15:61:D0
            X509v3 Authority Key Identifier:
                keyid:83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c4:9f:e7:ea:4e:12:95:f0:41:ce:0a:75:b7:31:ab:ce:60:
         2b:7a:d7:0a:f3:03:33:04:f3:b8:f6:f1:69:82:47:df:81:33:
         20:68:d7:36:5c:16:92:47:be:4f:c5:60:9e:c7:ed:67:99:02:
         27:b3:20:be:c8:33:33:f4:bc:79:9a:bc:1c:29:c5:24:ef:be:
         72:70:da:c8:b2:d7:53:c6:6c:4f:45:c4:8d:dd:a6:da:30:58:
         a7:85:46:77:12:3e:58:a8:9e:1d:68:3a:08:03:3b:5f:8f:b2:
         9d:53:17:1d:17:c5:28:d1:a0:ad:2c:45:c5:b6:da:3e:69:30:
         d8:82:aa:e9:51:26:60:63:cc:47:6a:3c:b9:f0:0a:38:b8:ab:
         36:f8:fa:97:f2:8f:11:ef:af:89:d9:6b:0b:58:42:d2:47:9e:
         6d:6a:3d:2d:14:b9:d5:13:35:fe:3d:93:21:5b:92:ea:5a:72:
         cf:49:d1:85:05:c0:20:b5:74:74:6b:c9:22:b7:ea:cd:4f:d9:
         5e:1f:2a:75:ea:86:ff:81:d9:98:3b:62:ab:75:e2:a9:f0:85:
         ce:41:4d:be:bb:21:40:87:75:41:02:4b:19:8c:f9:c0:33:9a:
         32:7e:48:c2:a2:97:51:a9:60:7e:1f:1c:5b:f8:e7:44:66:52:
         97:fe:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:02 2026 by rpki-client