Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
File:                     0rolH4MRa7tToMiSMQ9P963v_es.mft (raw, json)
Hash identifier:          O131WGlxVlM3xin4khQUZbHhR9eZgB3w4fIDpnO8siM=
Subject key identifier:   75:22:47:F3:52:91:66:A1:42:76:BB:E7:85:47:EE:B1:EF:44:7C:54
Authority key identifier: D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
Certificate issuer:       /CN=A9175B42/serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
Manifest number:          E7
Signing time:             Mon 27 Jul 2026 08:32:42 +0000
Manifest this update:     Mon 27 Jul 2026 08:32:41 +0000
Manifest next update:     Mon 03 Aug 2026 08:32:41 +0000
Files and hashes:         1: 0rolH4MRa7tToMiSMQ9P963v_es.crl (hash: PsfKy5Z51G+kC9adMQBjnvjGjl+PPNKJROsEqjKjR6A=)
                          2: EABFF866266511F0A3060E66C4F9AE02.roa (hash: FisgyItAVG3Y15df/opUvBoxNb4fchWDbDPeeu269Zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
                          rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175B42, serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
        Validity
            Not Before: Jul 27 08:32:41 2026 GMT
            Not After : Aug  3 08:32:41 2026 GMT
        Subject: CN=6a6717aa-bb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:ed:4f:76:42:e6:28:e5:cf:0f:6d:83:6f:
                    b2:09:b2:8a:b1:2a:bc:7a:e5:8e:df:b6:dd:ed:85:
                    3a:e6:ca:d8:90:f6:04:b6:27:b2:ae:2c:39:4e:fc:
                    4b:b6:1e:6b:5c:e7:3f:ed:7e:48:e6:b5:e0:ee:f7:
                    f5:fa:8c:8d:47:27:4f:25:d5:86:df:5e:43:bb:dc:
                    2c:e2:6c:c1:62:02:a8:65:3d:cb:25:88:d0:78:82:
                    f5:5c:e8:a0:25:64:ab:a1:d3:85:90:2a:cd:ba:94:
                    ab:85:4b:0b:cb:1f:0f:53:b2:09:ec:60:fe:ba:44:
                    56:4b:65:63:2c:4a:51:c7:d6:14:01:0b:c2:26:25:
                    b0:9f:f8:a8:58:8a:10:68:b1:17:ec:85:7e:a7:47:
                    08:eb:19:69:1e:ae:6c:64:9e:4f:73:6d:c3:82:c5:
                    7e:79:99:20:91:cf:7d:e2:ef:f3:27:2c:99:6a:96:
                    39:bc:8f:6a:47:c7:59:19:4e:fc:19:fc:f4:87:82:
                    7c:55:54:0a:39:65:17:8d:e9:98:bf:3b:38:87:f3:
                    3b:c6:41:2d:29:12:aa:0e:7c:2a:a1:cf:97:8f:8e:
                    d2:73:11:1d:84:a4:c0:83:46:2f:2a:98:9b:9e:6c:
                    9b:c0:22:1f:50:79:bb:db:31:47:c1:69:f0:47:06:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:22:47:F3:52:91:66:A1:42:76:BB:E7:85:47:EE:B1:EF:44:7C:54
            X509v3 Authority Key Identifier:
                keyid:D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ab:29:e5:60:ef:40:6b:f0:db:b4:f7:47:32:1c:46:bb:60:
         97:77:91:e7:1f:fe:e7:e7:94:25:b5:7c:6f:c2:71:d1:e9:2e:
         6c:3e:bc:9a:8a:5f:49:84:48:8c:ac:3f:3e:47:99:f0:f4:c2:
         0b:5b:d6:1f:24:4e:60:e5:2c:9a:8a:b7:6a:b9:24:26:66:d2:
         e8:37:7a:06:44:c6:f2:84:ef:a5:b7:2e:9c:a4:3f:e8:6a:03:
         9c:2b:85:d3:32:b5:af:2b:fa:da:47:68:65:50:02:7d:08:53:
         34:3a:d4:f4:ec:06:fd:c6:6a:0a:62:0f:e5:dd:ab:07:1f:a0:
         e5:64:d0:d0:a1:b0:b8:3e:2f:6c:ca:32:89:89:70:b7:c8:37:
         35:7c:60:b8:6c:fe:bd:86:a7:fd:c2:9d:8d:8e:2a:fc:3a:71:
         11:41:cb:ef:c0:43:cb:f9:b9:d8:f6:28:e3:d9:d1:6b:1d:39:
         71:99:0c:cb:f3:b6:bb:63:fd:cb:94:76:67:b3:eb:92:68:6d:
         49:90:a3:fa:46:ad:22:48:0b:cb:3e:38:93:4f:2b:3b:c2:cf:
         e7:b9:42:2f:33:dc:5d:43:1a:0c:9f:30:63:d8:39:59:62:a6:
         1e:f0:47:36:d8:15:9b:d2:c5:ef:2c:66:4e:22:26:8c:db:78:
         9a:7f:da:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVCNDIxMTAvBgNVBAUTKEQyQkEyNTFGODMxMTZCQkI1M0EwQzg5MjMxMEY0RkY3
QURFRkZERUIwHhcNMjYwNzI3MDgzMjQxWhcNMjYwODAzMDgzMjQxWjAYMRYwFAYD
VQQDEw02YTY3MTdhYS1iYjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2RntT3ZC5ijlzw9tg2+yCbKKsSq8euWO37bd7YU65srYkPYEtieyriw5TvxL
th5rXOc/7X5I5rXg7vf1+oyNRydPJdWG315Du9ws4mzBYgKoZT3LJYjQeIL1XOig
JWSrodOFkCrNupSrhUsLyx8PU7IJ7GD+ukRWS2VjLEpRx9YUAQvCJiWwn/ioWIoQ
aLEX7IV+p0cI6xlpHq5sZJ5Pc23DgsV+eZkgkc994u/zJyyZapY5vI9qR8dZGU78
Gfz0h4J8VVQKOWUXjemYvzs4h/M7xkEtKRKqDnwqoc+Xj47ScxEdhKTAg0YvKpib
nmybwCIfUHm72zFHwWnwRwai5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUiR/NS
kWahQna754VH7rHvRHxUMB8GA1UdIwQYMBaAFNK6JR+DEWu7U6DIkjEPT/et7/3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUI0Mi80OEZFQjFDMDI2
NjUxMUYwODAxNUFCNjJDNEY5QUUwMi8wcm9sSDRNUmE3dFRvTWlTTVE5UDk2M3Zf
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzByb2xINE1SYTd0VG9NaVNNUTlQOTYzdl9lcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUI0Mi80OEZFQjFDMDI2NjUxMUYwODAxNUFCNjJDNEY5QUUwMi8wcm9sSDRNUmE3
dFRvTWlTTVE5UDk2M3ZfZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACKsp5WDvQGvw27T3RzIcRrtgl3eR5x/+5+eUJbV8b8Jx0ekubD68mopfSYRI
jKw/PkeZ8PTCC1vWHyROYOUsmoq3arkkJmbS6Dd6BkTG8oTvpbcunKQ/6GoDnCuF
0zK1ryv62kdoZVACfQhTNDrU9OwG/cZqCmIP5d2rBx+g5WTQ0KGwuD4vbMoyiYlw
t8g3NXxguGz+vYan/cKdjY4q/DpxEUHL78BDy/m52PYo49nRax05cZkMy/O2u2P9
y5R2Z7PrkmhtSZCj+katIkgLyz44k08rO8LP57lCLzPcXUMaDJ8wY9g5WWKmHvBH
NtgVm9LF7yxmTiImjNt4mn/ayw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:35 2026 by rpki-client