Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
File:                     7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json)
Hash identifier:          4Mr6zHY7b1sNyXJgKmwiWA+UVfuXGkgApILXUm0JNDM=
Subject key identifier:   FE:BD:72:29:0F:E6:75:44:BA:10:25:F5:CA:43:86:D3:BA:AB:79:B8
Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0
Certificate issuer:       /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
Certificate serial:       35AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
Manifest number:          3580
Signing time:             Tue 28 Jul 2026 14:16:50 +0000
Manifest this update:     Tue 28 Jul 2026 14:16:50 +0000
Manifest next update:     Tue 04 Aug 2026 14:16:50 +0000
Files and hashes:         1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: 5hHuBO3Ammq/J/RFcxg7AEktJCG9uWubkynhlWCwyy0=)
                          2: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: cXxlTlh2e8x7rwEZccluqoXbQOcppLc/t/OKxLCL9Es=)
                          3: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: iodpqPzJXCkEMjXNizFOPmkITOS3ty8iD6q0/vbWTBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13740 (0x35ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
        Validity
            Not Before: Jul 28 14:16:50 2026 GMT
            Not After : Aug  4 14:16:50 2026 GMT
        Subject: CN=6a68b9d2-2530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:ec:7d:5a:51:4a:ac:b7:24:b3:fe:cb:9f:
                    40:9f:6c:04:c3:5b:b3:06:77:e9:4d:4b:2c:0b:0e:
                    c8:63:4f:8a:e6:3c:d7:4a:50:85:d5:cf:32:5e:c1:
                    5b:00:73:88:6a:92:0d:d2:aa:0c:a0:11:24:33:f0:
                    73:cf:d6:a4:24:38:80:38:f0:8e:b2:37:84:99:25:
                    64:5b:0c:17:a2:0a:11:5a:60:ae:13:55:7c:00:da:
                    16:b5:88:7e:69:3a:6a:7a:d6:31:c8:d9:e0:0c:d4:
                    b4:9b:90:5d:1b:9a:21:9a:62:48:43:82:46:94:a1:
                    c1:18:15:cd:c2:f7:18:63:65:03:f4:81:4d:aa:2f:
                    8c:fe:ff:e4:80:e6:c9:9e:05:61:64:50:3c:8c:54:
                    bd:56:b4:8d:22:12:d0:03:98:9a:8e:84:9e:01:93:
                    bb:52:50:fd:2a:74:46:90:3a:5f:a7:11:3b:22:6b:
                    1b:95:c5:e2:ee:1c:0a:5f:ec:1e:f7:8d:52:50:78:
                    95:81:7e:00:89:ab:1b:b9:d4:8f:ec:b0:23:cd:c5:
                    2c:92:3d:8f:7f:a4:b7:52:a6:d8:fc:ca:8f:05:e0:
                    f7:1c:ee:52:01:2a:66:ef:a1:c5:5c:c0:53:5f:a6:
                    a6:aa:15:6b:89:2a:17:22:cb:96:ea:a3:3f:32:19:
                    d4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BD:72:29:0F:E6:75:44:BA:10:25:F5:CA:43:86:D3:BA:AB:79:B8
            X509v3 Authority Key Identifier:
                keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:4c:6a:c7:47:53:cb:de:fd:c8:c0:9a:d5:f2:c1:3f:e5:79:
         1c:d4:3a:2a:b3:97:b0:d3:6c:3f:95:da:00:35:c7:e5:a7:5f:
         3b:c5:e8:15:c7:9b:7d:ca:26:f5:de:69:80:bb:f4:3e:69:01:
         15:6a:a0:ad:28:05:4e:3d:0b:cc:a9:4d:73:35:90:19:b4:de:
         c4:4c:c3:38:62:57:a8:88:29:0b:4c:92:c8:8e:d2:9b:d1:47:
         ea:48:1b:8f:90:40:75:ac:bc:75:d1:55:ea:b2:1d:c8:ff:52:
         ed:98:94:df:30:7d:6d:26:99:c6:91:35:b9:46:70:80:c6:ef:
         ca:f6:3f:3c:96:12:0b:3f:22:63:c4:bf:94:8f:c1:3f:25:9f:
         fa:b9:c1:0e:39:93:b9:1a:2a:d9:8a:2e:d0:fe:d8:19:2c:7a:
         a8:01:78:4f:ac:c2:70:f5:7d:0f:71:13:65:66:a1:69:3a:1a:
         e0:50:73:a0:55:0b:4e:ac:87:f5:f3:4b:ff:fc:9c:da:19:25:
         0f:db:b1:d3:db:88:c9:64:d6:0a:47:20:5b:1a:2e:fa:61:1b:
         6b:3b:ad:f4:f3:72:03:46:3a:c9:d2:dc:6d:de:a7:c0:8f:13:
         45:47:f9:ca:a6:b3:66:66:17:56:40:a0:cf:31:ac:66:b3:94:
         b8:e9:12:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:37:43 2026 by rpki-client