Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
File:                     788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json)
Hash identifier:          7fiY2ZoZ+7vm3oyDESn87rI3QZCXYFV4skgjyXZc5V0=
Subject key identifier:   4B:6D:54:AA:BE:EC:85:03:15:3F:0D:4C:70:6A:88:A2:D9:16:A4:32
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Certificate issuer:       /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial:       08FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
Manifest number:          08EF
Signing time:             Sun 26 Jul 2026 20:55:01 +0000
Manifest this update:     Sun 26 Jul 2026 20:55:00 +0000
Manifest next update:     Sun 02 Aug 2026 20:55:00 +0000
Files and hashes:         1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: D7Ghp2ij00feZmL8CryuYwea7sOjRREhOX6YmutKvk8=)
                          2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: yZtWfMF7pmNFTR+kKQnF17mRloCfv5aI0+tF3Sx3gqw=)
                          3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: zxnU04Q4bb1lJGkT9VOzuX1RdTtK4DGbDTsvDe9EOa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
                          rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
        Validity
            Not Before: Jul 26 20:55:00 2026 GMT
            Not After : Aug  2 20:55:00 2026 GMT
        Subject: CN=6a667425-774f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:fa:af:d7:74:50:2b:87:72:c2:15:33:a1:
                    77:35:9d:ab:1f:9d:20:15:f8:94:4d:de:f3:d5:4d:
                    94:14:49:16:1d:ca:5f:b3:40:80:9f:1e:94:b6:70:
                    5f:c5:7d:55:c7:95:85:aa:6f:90:b7:f4:b7:09:d8:
                    1a:19:bb:1e:ab:2f:de:c7:e8:20:be:16:fc:9f:a1:
                    5d:85:c9:5e:b9:1f:a8:e3:f1:46:f7:a7:b2:56:48:
                    99:35:60:19:f4:d1:43:94:47:ed:9b:49:a2:32:98:
                    e5:0a:af:ad:ba:7a:5d:37:74:3d:85:08:f2:ca:a7:
                    20:34:d3:67:a4:b6:2b:89:e4:df:59:ac:4b:0f:22:
                    25:d3:4d:52:94:c7:ca:10:be:d7:68:f0:33:40:e7:
                    12:f2:df:ff:ca:4a:da:71:a9:19:b8:74:c5:93:7d:
                    76:fc:a3:75:d7:54:c8:b5:4a:0f:9d:5b:9f:25:bf:
                    89:09:34:1d:e3:19:fe:cf:bf:da:22:11:67:f2:dc:
                    65:68:88:74:7a:35:f7:f4:2a:66:bc:f2:39:25:32:
                    97:72:c4:53:83:c4:15:17:14:e8:dd:f3:3a:66:76:
                    2a:b3:ca:48:92:96:d7:43:6c:00:f5:3d:4f:24:7c:
                    7b:8b:6f:da:f8:c7:db:fd:36:08:6e:db:56:83:69:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6D:54:AA:BE:EC:85:03:15:3F:0D:4C:70:6A:88:A2:D9:16:A4:32
            X509v3 Authority Key Identifier:
                keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:41:00:91:17:dc:6f:2e:ba:c1:ff:04:d3:87:3c:56:73:9f:
         22:a8:49:2b:eb:f0:50:35:8c:6f:8f:a3:23:4b:ad:c9:c8:a1:
         8e:28:11:92:f0:05:1c:30:f4:80:38:00:32:a8:d2:04:80:46:
         cc:8a:10:34:c6:6b:c5:b5:d5:c4:f2:77:0f:e1:99:07:25:61:
         61:1e:86:d8:bb:b7:51:58:c1:76:da:97:3c:d3:45:12:bd:ff:
         ae:15:fa:74:ad:69:ac:79:5a:bf:b1:ad:51:05:59:9f:68:93:
         cf:16:2d:c8:55:46:98:bb:cb:02:7c:54:d0:2b:57:f0:f6:43:
         66:8e:d8:ca:f0:8a:01:4a:9b:66:df:a5:cf:09:98:a9:f4:55:
         80:a2:7c:fa:79:81:68:7f:23:70:1d:10:27:50:bc:14:61:0f:
         85:5d:e9:93:0a:ea:92:34:0f:c8:2f:4d:a4:46:b4:ed:f4:80:
         49:d7:fa:29:b1:1c:85:e5:d5:71:b3:a3:2a:82:15:a4:54:3a:
         74:d6:b7:39:af:58:b2:fa:44:82:4f:dc:d6:42:9a:73:bb:35:
         b2:86:54:80:65:88:36:65:9b:53:a2:14:a9:cc:8a:bc:49:14:
         98:4d:61:66:cb:a2:3d:8f:91:ab:18:59:8a:e0:69:1b:e7:ef:
         a6:8c:01:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:14 2026 by rpki-client