Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
File:                     7KeHdUGmkz3VBhpsggg9O4ORXIU.mft (raw, json)
Hash identifier:          8L3LmptePCw337oXriKz9ZRAD61q9059YrixP0Hz+KM=
Subject key identifier:   9A:C6:27:58:D7:85:39:FE:55:26:14:20:DF:EF:D1:35:DA:E5:47:04
Authority key identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
Certificate issuer:       /CN=A9142127/serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
Manifest number:          7E
Signing time:             Tue 28 Jul 2026 19:24:14 +0000
Manifest this update:     Tue 28 Jul 2026 19:24:14 +0000
Manifest next update:     Tue 04 Aug 2026 19:24:14 +0000
Files and hashes:         1: 7KeHdUGmkz3VBhpsggg9O4ORXIU.crl (hash: yh1pCTsp9nUbTcFX5zuC8McZ5s0Ncurqu1BTUtBjfu8=)
                          2: 0A6F23BCD89011F0809DF24792D3641D.roa (hash: LF3tnAF+s60btudK/C+MWOKUVDskcOU/sbbTIojV6RQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
                          rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142127, serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
        Validity
            Not Before: Jul 28 19:24:14 2026 GMT
            Not After : Aug  4 19:24:14 2026 GMT
        Subject: CN=6a6901de-9aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:93:74:98:f0:f6:5c:b2:4b:44:68:e3:22:
                    cc:b4:c8:fc:3e:0d:f3:cc:b9:a4:ac:72:35:3f:71:
                    83:c4:9f:50:d8:16:92:15:ae:68:82:05:7d:8e:a4:
                    2a:cf:7b:9e:a8:2c:b8:fd:54:b0:f5:39:06:51:ce:
                    6f:38:ff:31:89:0a:cc:1c:dc:e8:9b:05:29:8f:9e:
                    27:27:4d:e0:d5:59:7f:9b:91:ba:6b:c4:0e:c6:73:
                    ca:50:54:09:dd:3c:57:1b:e7:cb:9d:db:37:d2:0b:
                    4f:3b:07:0d:a3:1c:e4:57:68:b6:cf:35:a4:6d:3b:
                    b0:4b:41:78:e5:0a:fe:19:af:14:39:86:8c:ea:28:
                    99:9a:84:a4:2d:f7:29:e9:47:69:12:b7:ba:b5:f0:
                    41:e3:b9:57:0c:4d:55:6b:3e:21:ef:1d:27:8f:d6:
                    9d:a6:5c:dd:70:96:d8:6f:28:74:a4:dd:8e:19:92:
                    32:0d:1d:00:4a:28:7c:43:1c:c0:55:c7:14:f1:5e:
                    0a:d3:da:fd:89:24:9a:72:ee:a3:cf:5f:c3:8e:44:
                    2e:9d:1e:6f:4d:7b:d3:31:e0:de:8d:e2:4f:73:56:
                    c8:1e:b4:8c:a7:3b:ba:aa:c7:f8:86:5e:2d:9e:44:
                    5d:d9:45:c2:d2:26:89:10:98:47:89:d4:ac:c1:e1:
                    35:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C6:27:58:D7:85:39:FE:55:26:14:20:DF:EF:D1:35:DA:E5:47:04
            X509v3 Authority Key Identifier:
                keyid:EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:b6:3d:5d:cc:b2:0e:52:9a:81:be:04:8a:d2:42:02:2c:
         70:76:02:8d:62:52:b7:ac:e4:47:79:c0:f2:ee:e0:e1:77:f4:
         f1:cb:48:93:99:c0:2c:b2:e2:20:d5:97:30:86:41:d8:fc:2d:
         d1:13:7e:d2:0b:42:c5:30:24:71:6f:8b:6c:c1:4a:e3:9c:16:
         10:bf:5a:01:5a:af:c1:11:65:1c:05:ed:8c:3a:d8:38:be:2f:
         ca:49:43:b2:57:8c:64:72:b8:b7:c6:61:18:2e:fe:ee:9f:d3:
         7b:1e:7d:5c:af:60:bd:21:75:18:db:58:f6:d6:01:83:3f:68:
         2b:0a:40:3a:de:64:b4:8b:f0:39:0a:95:cf:0c:24:a9:f8:9d:
         36:b4:f4:8c:6b:cb:5f:cf:ce:77:06:c0:b7:6a:ff:d5:a0:dc:
         86:3c:68:60:d8:35:11:75:2a:24:61:7e:63:f5:fe:c4:21:fd:
         4c:41:30:bf:24:5d:f5:84:64:ce:56:9f:bf:5f:94:a8:f7:fa:
         d1:78:f4:23:29:cb:9a:bf:63:20:87:20:a8:dc:37:48:64:3b:
         ae:f5:cd:99:78:2d:f3:26:b5:d4:3d:27:d3:8b:9d:5a:19:16:
         53:0d:a0:db:ca:2e:d5:c3:29:94:b0:e4:fd:f2:df:86:d7:e5:
         b0:53:e4:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIxMjcxMTAvBgNVBAUTKEVDQTc4Nzc1NDFBNjkzM0RENTA2MUE2QzgyMDgzRDNC
ODM5MTVDODUwHhcNMjYwNzI4MTkyNDE0WhcNMjYwODA0MTkyNDE0WjAYMRYwFAYD
VQQDEw02YTY5MDFkZS05YWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlCTdJjw9lyyS0Ro4yLMtMj8Pg3zzLmkrHI1P3GDxJ9Q2BaSFa5oggV9jqQq
z3ueqCy4/VSw9TkGUc5vOP8xiQrMHNzomwUpj54nJ03g1Vl/m5G6a8QOxnPKUFQJ
3TxXG+fLnds30gtPOwcNoxzkV2i2zzWkbTuwS0F45Qr+Ga8UOYaM6iiZmoSkLfcp
6UdpEre6tfBB47lXDE1Vaz4h7x0nj9adplzdcJbYbyh0pN2OGZIyDR0ASih8QxzA
VccU8V4K09r9iSSacu6jz1/DjkQunR5vTXvTMeDejeJPc1bIHrSMpzu6qsf4hl4t
nkRd2UXC0iaJEJhHidSsweE1NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrGJ1jX
hTn+VSYUIN/v0TXa5UcEMB8GA1UdIwQYMBaAFOynh3VBppM91QYabIIIPTuDkVyF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy9DNDhGQThGQUQ3
NDgxMUYwQkExQjBEOUU2QkQzNjQxRC83S2VIZFVHbWt6M1ZCaHBzZ2dnOU80T1JY
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdLZUhkVUdta3ozVkJocHNnZ2c5TzRPUlhJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjEyNy9DNDhGQThGQUQ3NDgxMUYwQkExQjBEOUU2QkQzNjQxRC83S2VIZFVHbWt6
M1ZCaHBzZ2dnOU80T1JYSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAccG2PV3Msg5SmoG+BIrSQgIscHYCjWJSt6zkR3nA8u7g4Xf08ctIk5nALLLi
INWXMIZB2Pwt0RN+0gtCxTAkcW+LbMFK45wWEL9aAVqvwRFlHAXtjDrYOL4vyklD
sleMZHK4t8ZhGC7+7p/Tex59XK9gvSF1GNtY9tYBgz9oKwpAOt5ktIvwOQqVzwwk
qfidNrT0jGvLX8/OdwbAt2r/1aDchjxoYNg1EXUqJGF+Y/X+xCH9TEEwvyRd9YRk
zlafv1+UqPf60Xj0IynLmr9jIIcgqNw3SGQ7rvXNmXgt8ya11D0n04udWhkWUw2g
28ou1cMplLDk/fLfhtflsFPkcg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:08 2026 by rpki-client