Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
File:                     7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json)
Hash identifier:          aWb5Q1G2/vpEmD9tz5bsY3tz8tdwbey/8WkH9gqhoZo=
Subject key identifier:   92:09:C2:5E:E2:2B:C8:BB:FD:07:E8:21:1C:FE:76:57:B2:B0:02:1A
Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25
Certificate issuer:       /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
Manifest number:          0131
Signing time:             Tue 28 Jul 2026 14:28:54 +0000
Manifest this update:     Tue 28 Jul 2026 14:28:53 +0000
Manifest next update:     Tue 04 Aug 2026 14:28:53 +0000
Files and hashes:         1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: GAJPJbU5m9VNE58X7akDX4io6EratD9WoTo62lLYse0=)
                          2: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: yVchdU3xVWj31ewZ5w80+tHH4ZJNPmu+JLTdmSt6IhA=)
                          3: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: qHE12pZJwFpe8wyPzOgoide5sDGoFWiN9Bd/hNLVIe4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
        Validity
            Not Before: Jul 28 14:28:53 2026 GMT
            Not After : Aug  4 14:28:53 2026 GMT
        Subject: CN=6a68bca6-2d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:5b:69:0d:de:33:05:d2:21:4f:ba:94:8f:
                    8c:e0:48:6f:ce:7e:73:35:f8:ee:94:d8:f8:bd:71:
                    8e:ef:7a:28:c8:db:f8:38:63:7c:56:d0:7f:62:fd:
                    83:57:f5:ed:57:ef:68:c3:10:04:c8:6d:25:08:40:
                    bd:9d:11:f7:33:04:da:c2:31:c1:1f:d0:3c:3c:14:
                    00:b3:1b:25:e7:68:48:91:c5:14:34:c5:c5:06:9e:
                    1f:ee:9f:3f:0d:b9:b0:de:87:1c:4f:67:31:c7:b9:
                    d1:97:68:d9:b2:12:29:a0:3c:b6:71:33:26:01:a3:
                    2e:a9:6a:0c:0b:60:62:f4:a5:4f:98:b0:25:cd:5e:
                    0a:87:71:e9:7a:2b:d4:55:fd:4a:3e:e5:38:bc:bf:
                    df:75:27:63:1e:0c:30:e1:63:ce:c1:88:33:71:31:
                    8c:69:9a:e8:92:a2:33:71:9c:89:6b:04:a5:8b:26:
                    f8:f6:1c:8c:b3:2e:8e:4c:9e:d6:a4:76:99:95:da:
                    16:d1:8d:41:90:57:20:f7:07:08:5a:60:1b:1b:ab:
                    95:43:b7:79:ff:88:a2:37:58:54:e8:f5:66:1b:89:
                    ee:23:fe:c2:85:64:98:e5:b3:4e:98:83:58:4a:68:
                    d1:54:e3:70:db:c3:ff:b4:8a:f6:83:1d:3a:48:85:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:09:C2:5E:E2:2B:C8:BB:FD:07:E8:21:1C:FE:76:57:B2:B0:02:1A
            X509v3 Authority Key Identifier:
                keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:70:15:35:b5:25:17:2b:93:3a:9a:ef:b8:31:14:00:1f:0c:
         5d:85:95:70:4d:88:63:b5:5c:80:f3:e3:7c:b9:44:e3:93:0b:
         f9:e0:83:30:66:68:7f:63:9d:e7:c8:4d:7c:ca:cb:4b:12:0b:
         57:0d:44:ee:11:50:89:19:46:93:1c:3a:9a:00:51:58:63:72:
         87:dc:e0:42:2b:29:a8:90:a5:05:ea:15:d0:c8:47:2b:10:6f:
         43:61:05:3d:17:e1:8a:5b:bd:76:24:72:7f:4e:72:81:e0:1e:
         e7:a2:04:82:5a:17:71:07:8d:48:7c:24:6c:18:4f:f9:b0:a4:
         99:7b:68:64:2c:00:c5:f1:e5:80:75:8a:7a:15:95:d2:17:79:
         ef:3c:6d:35:2e:48:0a:68:a5:8e:c1:77:de:e4:68:4c:0f:66:
         65:d1:c4:89:66:92:25:02:5a:00:da:fb:5b:81:ba:1e:bb:a0:
         8b:a0:41:39:59:38:ab:4c:a2:3d:34:a2:2d:ce:08:1d:f4:ee:
         85:9f:77:2d:e6:87:14:58:e2:c9:7e:05:48:55:dc:0c:b3:fb:
         b5:80:8b:9a:a1:7b:8c:31:b0:71:43:58:ce:27:2a:58:bb:5f:
         64:ad:46:eb:48:28:59:90:47:4c:4c:2f:24:90:2c:0d:f7:92:
         eb:23:ed:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:27 2026 by rpki-client