Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File:                     F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier:          cCT/mPyA4IpXpae9CoexyJPgV4znEH29tnQcuqSLypY=
Subject key identifier:   9A:7B:3F:91:89:C7:E8:58:D1:6D:1A:76:4D:CB:6C:87:95:ED:D2:70
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer:       /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number:          B7
Signing time:             Tue 28 Jul 2026 16:28:57 +0000
Manifest this update:     Tue 28 Jul 2026 16:28:57 +0000
Manifest next update:     Tue 04 Aug 2026 16:28:57 +0000
Files and hashes:         1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: 9fcUhMCHoGiX/5Z6wdZt1+rPBdkL67TjHPpkUOcj1hA=)
                          2: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: HxueVyeG48TlpzJ0pvXXuxMket+vhTgEYarRY925CZ0=)
                          3: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: Rt1fqxpDUHKbQnEZeGSolrH7j72JJeAt6X3959FalwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
        Validity
            Not Before: Jul 28 16:28:57 2026 GMT
            Not After : Aug  4 16:28:57 2026 GMT
        Subject: CN=6a68d8c9-601e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:38:0d:77:84:c1:d3:28:3c:f0:8f:ba:d1:
                    1a:9d:6e:cb:ea:e4:de:d2:8c:45:ab:2a:24:9c:9c:
                    01:48:34:f3:51:6a:62:45:aa:5a:6f:ad:0c:7b:dc:
                    52:d2:cb:58:2c:88:ab:cf:07:aa:5f:92:00:43:cc:
                    27:6c:9b:d6:cd:64:ab:72:5e:f5:04:e5:10:d4:48:
                    e6:ca:88:83:c5:63:5d:10:1a:4a:98:cd:11:2f:8f:
                    46:79:73:86:c2:96:c3:aa:21:95:c6:69:13:a4:83:
                    e2:8b:a0:e5:a3:85:e3:2c:6a:30:41:30:63:b8:32:
                    d9:0e:7f:4f:f2:c6:2a:eb:fc:e6:06:09:05:5b:41:
                    c7:09:3b:42:ca:f4:9a:f9:a5:5b:48:27:61:1c:d9:
                    25:d6:b0:dd:d8:f5:2d:e7:79:1c:6f:2e:3a:36:36:
                    67:1e:04:9e:95:bc:6b:bc:16:39:d8:2e:a1:6b:8e:
                    94:ec:a4:7d:ac:43:f9:f8:a1:32:c3:a3:5c:ee:39:
                    f6:ee:f4:89:38:14:e2:23:d2:f3:fc:56:9d:58:ae:
                    27:45:8f:52:f7:1a:53:35:5d:86:cf:38:66:fd:f5:
                    81:30:c4:ad:e1:e1:5c:3b:4e:df:1d:80:61:9d:b4:
                    df:d3:05:8b:52:df:f3:6d:20:de:a0:4d:71:35:5b:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7B:3F:91:89:C7:E8:58:D1:6D:1A:76:4D:CB:6C:87:95:ED:D2:70
            X509v3 Authority Key Identifier:
                keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:03:72:04:76:58:78:9b:b4:d1:e1:38:3f:02:97:98:33:ef:
         9c:07:c0:b0:e1:02:73:b6:13:1f:6e:be:7b:f1:21:95:7c:c1:
         80:34:51:48:fc:d6:dd:58:7f:52:72:c5:b9:81:e0:b4:24:bd:
         50:75:55:8f:99:68:7a:b7:b9:73:9b:ef:9b:d3:3d:e2:20:ad:
         c0:5d:12:46:66:26:b7:38:24:29:d6:97:de:30:6f:c6:11:bb:
         e7:a1:55:e7:d1:28:42:7a:e8:bc:03:f1:84:76:71:a8:26:6b:
         3d:48:09:f8:e3:d4:9e:f1:12:e6:33:aa:61:c6:c0:b5:26:b2:
         5f:8d:5e:bc:b6:0e:a1:ff:0c:4a:cb:30:2d:9f:7f:a7:48:4a:
         95:28:07:93:d3:70:b1:c5:7a:0d:13:a8:02:8c:c1:b9:39:af:
         6c:67:80:ed:35:53:b7:f5:3c:d6:69:d2:c0:40:09:84:9b:55:
         7d:f2:10:33:8d:38:3b:9f:27:bc:09:be:f9:95:0f:58:75:4b:
         6d:29:b2:f7:78:ca:6a:91:1f:3a:3f:26:73:24:db:06:a8:6f:
         ce:b5:16:15:30:46:4a:ad:eb:d0:ac:20:ba:53:ab:7b:99:5d:
         c1:8b:c5:56:30:14:00:b9:9d:d9:1d:33:4e:76:d2:3b:2d:1f:
         14:b1:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:12 2026 by rpki-client