Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
File:                     7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json)
Hash identifier:          IgKyIGcv4Qm5fdWrA+Pl1r4MFmalFsydqEMO2HDE3/s=
Subject key identifier:   4D:94:36:50:B2:EC:38:A6:56:48:8D:4D:98:77:C6:56:E3:C7:76:56
Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
Certificate issuer:       /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
Manifest number:          012B
Signing time:             Mon 27 Jul 2026 07:39:33 +0000
Manifest this update:     Mon 27 Jul 2026 07:39:33 +0000
Manifest next update:     Mon 03 Aug 2026 07:39:33 +0000
Files and hashes:         1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: NOCLxwbXpxqJ+qytrFRxDgWR7IM6GRDjFJvc/5MElOI=)
                          2: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: aHk0t2Hy2gHuEUEuWNA047fzWOktHu8vocVNcFbAJjo=)
                          3: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: qt3HSjdPuhwdbu7y+IBM5bXY+abtccfmEZI2ywYOKv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
                          rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
        Validity
            Not Before: Jul 27 07:39:33 2026 GMT
            Not After : Aug  3 07:39:33 2026 GMT
        Subject: CN=6a670b35-bd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:29:ec:75:8d:4e:bd:94:e4:f1:9a:d1:b4:bf:
                    90:59:26:73:df:bd:cc:c7:70:5a:33:ea:c9:a2:21:
                    4d:6c:d7:0a:6c:b7:9e:08:d4:d8:74:6e:0b:f6:22:
                    59:2b:2d:b5:cd:96:43:27:a3:32:cb:17:de:0f:9f:
                    7b:29:14:bb:ab:27:be:68:a6:b5:69:86:87:80:03:
                    5d:06:1c:21:8c:88:10:cf:19:4b:4c:a8:00:f8:86:
                    ab:ec:67:61:5d:0a:37:72:7e:9a:c8:1a:be:50:00:
                    9e:81:7d:29:8a:11:b4:60:7a:17:b5:a3:17:71:7b:
                    aa:54:4a:c7:14:4c:90:56:55:b9:45:cf:f7:1b:f4:
                    b6:6f:05:01:cf:21:9f:8a:c3:e5:19:6b:c0:ea:17:
                    ea:f6:bc:c5:65:7d:55:dc:d1:52:83:ea:e0:39:0d:
                    94:3b:58:a4:79:95:6a:e5:70:ba:93:70:01:de:f7:
                    43:6c:af:c7:e4:68:b8:f2:54:9c:fb:0b:c8:17:af:
                    b4:93:d5:08:4b:08:72:50:f9:e5:50:dc:45:e8:19:
                    f3:5c:a4:f2:43:c5:0f:70:d6:05:96:19:35:64:7f:
                    9e:30:35:44:e4:91:aa:3e:f7:46:44:6d:f2:f9:b2:
                    46:78:f6:d8:32:3d:c7:f9:87:ea:0c:e7:e6:ac:d6:
                    67:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:94:36:50:B2:EC:38:A6:56:48:8D:4D:98:77:C6:56:E3:C7:76:56
            X509v3 Authority Key Identifier:
                keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:ae:27:54:df:ba:d0:48:82:74:a4:81:d9:59:6b:94:75:
         88:34:63:7f:c3:e1:41:59:df:87:c0:a8:f2:63:fa:e5:29:d9:
         66:45:60:90:d5:5b:f9:48:7a:0e:21:87:ef:27:0b:46:26:d2:
         cf:f9:99:7d:2a:df:24:b2:fc:5f:76:ab:3a:d5:f8:19:9c:36:
         90:fa:45:f5:e4:4c:c2:52:86:40:0d:56:0a:51:7a:b0:a5:3a:
         00:8e:f7:0a:b7:ce:e3:1a:1a:e2:73:e7:67:81:f0:22:bf:ae:
         8f:a7:cd:5b:3b:96:5a:68:8b:99:6b:24:52:35:08:3c:30:c0:
         6b:9e:a6:36:79:55:79:62:2d:64:8c:4f:c4:c8:62:a2:1b:54:
         16:c1:da:5b:45:65:8a:18:e0:aa:e1:14:4e:df:b3:44:83:e2:
         94:fc:cf:92:b2:54:69:27:e3:d8:23:3b:8b:01:32:9f:14:9a:
         cc:a3:6a:fc:22:82:9c:05:9f:a5:1c:c1:3a:ab:bf:86:62:d7:
         c1:0e:0e:91:bc:7c:75:2f:92:c0:ee:1a:1e:3d:15:d3:02:44:
         3b:8c:0a:ca:7a:63:10:ef:c7:8f:56:d1:32:f0:59:aa:f7:63:
         91:ac:c0:90:15:51:bd:b4:f0:01:c0:38:9b:9d:d1:75:7a:5e:
         d6:66:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:13:48 2026 by rpki-client