Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
File:                     7ObXRymptklRLPzniy2vzsFGlzo.mft (raw, json)
Hash identifier:          H7BJkmbuWaAakZHP9AWqC/h3irqEwYkQBtFdRbeDz9Q=
Subject key identifier:   38:39:C9:28:DD:93:AA:FE:AD:B9:61:6B:59:83:B0:6E:CE:91:3E:67
Authority key identifier: EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
Certificate issuer:       /CN=A916A171/serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Certificate serial:       0D86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
Manifest number:          0D7A
Signing time:             Tue 28 Jul 2026 18:06:02 +0000
Manifest this update:     Tue 28 Jul 2026 18:06:02 +0000
Manifest next update:     Tue 04 Aug 2026 18:06:02 +0000
Files and hashes:         1: 7ObXRymptklRLPzniy2vzsFGlzo.crl (hash: Xu2FeljP0NaTdFgkjbcwhv/nVxfZUp7nvun31o2EF00=)
                          2: F268590C1B9911ED9A50C30EC4F9AE02.roa (hash: WNQo1gJzwhXWEpc2UK9IPm/NBGxZHgROjQVKTAiSKXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
                          rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3462 (0xd86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A171, serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
        Validity
            Not Before: Jul 28 18:06:02 2026 GMT
            Not After : Aug  4 18:06:02 2026 GMT
        Subject: CN=6a68ef8a-f057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:24:68:35:00:ba:da:bd:fc:6b:c0:74:58:
                    ab:f3:4d:1d:46:d0:e1:55:77:2a:6d:b7:5b:d1:e1:
                    80:6f:26:b1:36:cc:21:52:9b:a5:02:68:2f:22:96:
                    8e:4c:42:42:06:f8:dd:9b:4c:16:d4:ba:06:80:61:
                    7c:64:97:02:88:33:62:9e:4d:cd:06:fb:21:2c:ad:
                    c4:0b:f5:81:c5:21:af:2d:28:40:cd:f4:2e:50:98:
                    02:a9:f5:eb:e6:23:4c:68:e3:aa:99:a0:dd:b2:4e:
                    96:ad:df:c0:3d:a3:31:8d:ee:9d:d9:84:aa:6d:40:
                    a7:21:02:f5:06:cc:1a:3e:1e:91:fa:c3:43:07:f1:
                    32:c3:78:55:43:b6:e7:b7:aa:72:e1:f1:14:7d:ed:
                    43:a6:28:ff:35:53:d5:77:70:ed:75:05:63:02:c8:
                    e9:a0:bc:03:52:ee:a3:0c:41:44:b5:c4:76:fc:9f:
                    31:e9:a7:10:07:73:5e:8f:83:ab:23:ba:9b:c9:43:
                    aa:61:9c:a7:ce:33:cb:3b:3f:23:0f:9c:e3:8f:8e:
                    1a:de:55:ae:32:e2:14:2d:29:96:de:1d:a2:2f:6b:
                    ee:73:da:b1:c2:d7:1e:93:3e:4b:eb:59:65:e9:83:
                    9d:1c:80:2a:3a:7c:35:08:ba:e6:9e:64:4d:5a:f7:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:39:C9:28:DD:93:AA:FE:AD:B9:61:6B:59:83:B0:6E:CE:91:3E:67
            X509v3 Authority Key Identifier:
                keyid:EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c6:6d:0e:7c:37:b0:be:6d:91:96:2b:15:c4:8e:ab:12:8b:
         ab:2c:e4:83:c9:2e:0d:e1:15:32:8e:d7:7d:5e:d7:5a:9e:15:
         89:2f:fc:79:c6:d9:6d:6e:af:e5:bb:c5:75:06:54:aa:73:6f:
         59:83:4d:d5:b4:d5:3b:78:c1:2e:52:3e:30:fb:f4:3f:58:2d:
         83:3b:6a:0d:7b:af:22:27:a4:bd:de:83:55:05:3e:4c:b2:af:
         db:6c:bc:5f:2f:2c:59:41:f1:77:b2:13:02:27:4f:58:9c:74:
         47:21:35:f0:7a:f6:91:f2:45:98:49:dc:8f:1c:a6:73:1e:91:
         b6:80:61:73:38:3b:03:bf:b1:82:a8:f4:25:e6:2a:37:24:23:
         6c:b6:b8:5b:a9:fc:96:68:b5:f6:b6:c7:81:87:c2:8e:b5:4f:
         81:b9:1c:0d:d3:69:32:06:aa:be:5e:99:ff:4f:9b:74:37:2a:
         c1:7a:1c:f6:e9:25:f8:c7:c3:89:29:01:96:24:06:2b:64:6e:
         59:59:cf:14:6e:a4:df:f2:bc:6e:99:82:aa:1d:49:29:f9:1d:
         de:d5:67:42:45:79:9e:d4:75:50:5e:0c:fe:35:19:58:e2:82:
         50:d4:1f:a9:2a:ef:e3:10:75:48:51:82:e6:01:b8:7d:18:30:
         e9:8c:a6:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkExNzExMTAvBgNVBAUTKEVDRTZENzQ3MjlBOUI2NDk1MTJDRkNFNzhCMkRBRkNF
QzE0Njk3M0EwHhcNMjYwNzI4MTgwNjAyWhcNMjYwODA0MTgwNjAyWjAYMRYwFAYD
VQQDEw02YTY4ZWY4YS1mMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoUkaDUAutq9/GvAdFir800dRtDhVXcqbbdb0eGAbyaxNswhUpulAmgvIpaO
TEJCBvjdm0wW1LoGgGF8ZJcCiDNink3NBvshLK3EC/WBxSGvLShAzfQuUJgCqfXr
5iNMaOOqmaDdsk6Wrd/APaMxje6d2YSqbUCnIQL1BswaPh6R+sNDB/Eyw3hVQ7bn
t6py4fEUfe1Dpij/NVPVd3DtdQVjAsjpoLwDUu6jDEFEtcR2/J8x6acQB3Nej4Or
I7qbyUOqYZynzjPLOz8jD5zjj44a3lWuMuIULSmW3h2iL2vuc9qxwtcekz5L61ll
6YOdHIAqOnw1CLrmnmRNWvcLhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDg5ySjd
k6r+rblha1mDsG7OkT5nMB8GA1UdIwQYMBaAFOzm10cpqbZJUSz854str87BRpc6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTE3MS80RjU3RTlCRUY0
OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRrbFJMUHpuaXkydnpzRkds
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdPYlhSeW1wdGtsUkxQem5peTJ2enNGR2x6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTE3MS80RjU3RTlCRUY0OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRr
bFJMUHpuaXkydnpzRkdsem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARsZtDnw3sL5tkZYrFcSOqxKLqyzkg8kuDeEVMo7XfV7XWp4ViS/8ecbZbW6v
5bvFdQZUqnNvWYNN1bTVO3jBLlI+MPv0P1gtgztqDXuvIiekvd6DVQU+TLKv22y8
Xy8sWUHxd7ITAidPWJx0RyE18Hr2kfJFmEncjxymcx6RtoBhczg7A7+xgqj0JeYq
NyQjbLa4W6n8lmi19rbHgYfCjrVPgbkcDdNpMgaqvl6Z/0+bdDcqwXoc9ukl+MfD
iSkBliQGK2RuWVnPFG6k3/K8bpmCqh1JKfkd3tVnQkV5ntR1UF4M/jUZWOKCUNQf
qSrv4xB1SFGC5gG4fRgw6YymGg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:03:42 2026 by rpki-client