Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft
File:                     7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft (raw, json)
Hash identifier:          hV4PCTVW7wqfaE/eHe5Qem2epdSBhb5WTGof/rzVNnw=
Subject key identifier:   08:D3:08:92:83:19:28:BF:48:EE:09:B9:45:83:92:0C:50:E2:B0:21
Authority key identifier: EE:3D:28:B4:3E:52:46:3F:53:61:08:4D:3B:4C:D1:5F:B1:21:DC:78
Certificate issuer:       /CN=A917A689/serialNumber=EE3D28B43E52463F5361084D3B4CD15FB121DC78
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft
Manifest number:          0C
Signing time:             Mon 27 Jul 2026 11:33:03 +0000
Manifest this update:     Mon 27 Jul 2026 11:33:03 +0000
Manifest next update:     Mon 03 Aug 2026 11:33:03 +0000
Files and hashes:         1: 7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl (hash: j9644G3YPlsNstPpFW0/ZK88sZWHF68M3VccGH0unuY=)
                          2: 71E770E886A111F194892C0771A30FBC.roa (hash: OcBIsDLEYAV2yHcXSGJIiBtEbYtLfqplfbSLDed5Qm4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl
                          rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A689, serialNumber=EE3D28B43E52463F5361084D3B4CD15FB121DC78
        Validity
            Not Before: Jul 27 11:33:03 2026 GMT
            Not After : Aug  3 11:33:03 2026 GMT
        Subject: CN=6a6741ef-d216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5d:46:0d:ae:21:f4:45:24:97:32:63:2f:ea:
                    20:78:07:8a:ca:8c:11:a7:44:38:b8:f2:5c:ff:42:
                    f8:99:19:7b:17:78:98:4f:c4:8d:a2:8d:b8:cb:94:
                    b4:9a:f8:a1:4b:6b:0b:d5:17:f6:21:bc:f1:2e:82:
                    ad:95:f0:3a:2a:51:00:1d:b0:ee:03:2c:27:d4:ca:
                    10:65:4c:16:cf:ee:6e:49:01:8a:a7:e8:ee:bf:63:
                    4d:29:d2:d8:3f:d6:35:a2:06:a3:03:36:6b:e0:38:
                    d0:5d:1f:e0:cd:86:06:eb:6c:6d:a9:71:0e:88:d0:
                    d4:0a:e9:1f:7b:b9:f2:30:28:3e:86:fb:6a:67:63:
                    8e:c0:ba:16:55:0b:24:00:86:d5:00:5d:d6:36:a0:
                    d7:2a:06:0a:42:11:51:11:7b:67:db:3d:0e:6d:3f:
                    ec:b4:b0:48:01:b6:85:17:d8:b8:88:d1:f7:ba:b9:
                    c3:3c:fc:c0:42:ab:66:9c:10:ee:62:e8:65:93:b7:
                    59:db:9c:f1:cf:81:6e:6d:3e:9d:b3:ad:e1:2e:50:
                    5d:cd:d7:d6:33:85:1f:36:af:8a:93:ec:f6:b5:16:
                    93:0f:54:44:26:c5:e1:66:d3:a3:01:92:3f:9b:c4:
                    c4:bc:cc:5d:52:f0:4e:0b:1b:4c:91:b7:b4:44:b7:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D3:08:92:83:19:28:BF:48:EE:09:B9:45:83:92:0C:50:E2:B0:21
            X509v3 Authority Key Identifier:
                keyid:EE:3D:28:B4:3E:52:46:3F:53:61:08:4D:3B:4C:D1:5F:B1:21:DC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:85:2a:2a:1b:9d:90:2f:d4:58:2c:78:a7:82:06:d0:ef:e2:
         68:c2:f5:fc:89:d5:d0:13:49:29:38:d9:46:d8:d5:a2:60:b7:
         a1:45:9b:42:9a:e3:b3:1b:48:20:01:e3:39:c7:6f:14:5e:09:
         b1:b8:96:fc:3e:e3:42:0f:ae:6e:67:b4:f1:9d:03:fc:5e:6a:
         f2:3a:5d:38:9b:97:24:56:8f:17:17:5e:69:cb:3b:da:54:4a:
         98:d9:6a:ca:9e:55:91:ff:0f:a6:26:e8:1d:a2:68:85:cd:60:
         1c:5b:e8:6d:6a:10:1a:34:b4:8d:51:78:55:0a:9e:66:b8:ed:
         76:5a:80:81:7d:ad:a4:fb:a4:33:a6:b9:2c:61:70:94:bc:9a:
         3d:dc:69:92:b3:85:1a:e6:cc:83:8e:ea:36:36:8a:f4:12:a5:
         9d:44:91:d6:a2:2a:ff:6a:a1:19:01:c0:ab:a0:d9:48:82:74:
         63:0e:09:c2:b7:8a:ef:5e:11:7b:93:75:09:7f:9d:75:0d:b1:
         70:f6:8d:39:9f:fd:ea:fc:7b:b8:d4:f9:73:1d:6f:eb:06:3c:
         de:43:65:e6:d6:3d:c8:76:0f:d7:10:f0:d7:90:ee:2d:db:20:
         6d:35:da:dd:a3:55:be:1a:12:4f:6f:3e:78:27:ba:6a:b8:f2:
         18:5a:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:33 2026 by rpki-client