Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
File:                     7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json)
Hash identifier:          McLSggH22rONGtGxa5U2GlaAUCMs2MbdiP+3+Bz+QXU=
Subject key identifier:   74:E8:83:BB:76:1A:08:28:1A:47:A9:50:95:19:35:4F:42:79:3C:C7
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Certificate issuer:       /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial:       0881
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
Manifest number:          0879
Signing time:             Tue 28 Jul 2026 21:08:41 +0000
Manifest this update:     Tue 28 Jul 2026 21:08:40 +0000
Manifest next update:     Tue 04 Aug 2026 21:08:40 +0000
Files and hashes:         1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: Zam+EQxLWXpydQKWI8VvYCa1cZspjl+CCLVKonYB0pY=)
                          2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: E5X8nAIq+dpQIc0dCSoalaUVPe2WMtMvUdFkb0uNvbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
                          rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2177 (0x881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
        Validity
            Not Before: Jul 28 21:08:40 2026 GMT
            Not After : Aug  4 21:08:40 2026 GMT
        Subject: CN=6a691a58-8a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:a9:23:50:b2:32:c3:e9:2e:f2:70:fd:af:
                    1c:10:fd:b0:38:28:b2:a5:fd:a7:71:1e:52:f3:69:
                    aa:cf:e1:88:0a:9f:eb:55:52:ab:8f:4c:8b:76:ce:
                    3c:f7:68:49:da:5d:1d:0e:d3:c6:79:36:ab:1d:8f:
                    91:36:1e:cf:d8:f0:e8:9e:6c:92:78:35:4b:98:f3:
                    e2:e9:6c:04:4c:51:47:08:1f:13:96:08:7a:b9:85:
                    2b:a6:b8:7f:ad:09:b3:a4:88:cc:ea:1d:3d:a8:00:
                    ab:9a:5e:cc:b0:2a:06:25:b1:19:43:90:5b:c6:bc:
                    0f:84:a6:30:f5:21:82:96:28:b1:f2:53:b9:0d:52:
                    6c:82:2e:a4:04:9c:7a:54:6b:8f:4b:d2:e8:99:4f:
                    52:1d:71:5c:73:23:26:ca:46:85:80:67:a4:bc:c4:
                    75:6d:b0:11:ce:67:a7:4e:f0:1c:42:92:7b:db:0c:
                    5f:a5:9f:ac:76:9d:8c:d0:2a:6e:38:8d:ca:d1:5d:
                    f4:b4:f7:01:e0:b3:f9:40:9a:b1:5d:6a:c7:24:b6:
                    58:ff:31:1e:80:21:d4:c4:56:13:40:c9:4f:63:2f:
                    0f:5a:9e:f1:57:68:db:5b:cb:cb:e5:00:37:c8:9b:
                    9d:3e:87:ab:cd:b2:b2:9f:4d:ba:b7:de:02:5f:21:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E8:83:BB:76:1A:08:28:1A:47:A9:50:95:19:35:4F:42:79:3C:C7
            X509v3 Authority Key Identifier:
                keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9b:6f:de:b3:ef:78:89:d1:c3:49:65:57:be:74:45:e5:fe:
         18:e0:22:15:1d:25:cf:56:63:72:59:81:ce:3e:71:9b:ce:b7:
         15:90:69:d1:e9:75:fb:92:06:a7:25:3c:e6:51:c3:29:27:ad:
         38:d8:d2:8c:0e:e0:a9:e0:61:0e:71:10:9a:98:00:04:17:b9:
         1f:19:1b:02:92:c6:22:7e:2a:35:e1:02:c8:da:5f:ed:37:ec:
         d4:e0:e3:99:bd:0d:b6:e4:9e:c7:d4:e1:a6:59:d3:a7:a5:5b:
         31:98:36:04:33:59:2f:32:ba:7b:09:0d:7a:ce:87:19:3c:b6:
         be:54:5a:db:4d:02:30:b7:99:84:8a:b7:23:6b:e3:d7:61:bf:
         04:15:05:ae:fb:8d:e7:81:35:85:f6:b0:87:75:a7:af:79:40:
         1b:d6:96:01:c3:b4:68:a5:f7:c0:45:ff:32:58:45:da:8f:5f:
         9c:fd:16:05:3a:ca:2f:9d:33:93:84:d3:e0:2c:42:62:89:a4:
         00:91:c2:e5:c0:e4:3c:2e:2b:aa:6b:91:03:ac:4c:5e:70:b6:
         aa:ee:ed:a0:2d:5e:b2:75:83:47:5b:59:cf:f2:c1:d8:28:0c:
         5b:10:24:e1:49:3c:1f:4f:b5:9a:1f:8c:0f:6b:d9:52:fe:71:
         41:34:cb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:00:13 2026 by rpki-client