Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
File:                     7BWoR694TfECWIIbq5lKyCA1ld8.mft (raw, json)
Hash identifier:          GeqvzTZXk+R4rWfMQC4yC+U2dd+RQH7eIahYxSt3sq4=
Subject key identifier:   72:35:DD:49:B6:0C:DB:2C:B8:EE:90:BB:0B:68:CB:9B:E2:C8:C3:E5
Authority key identifier: EC:15:A8:47:AF:78:4D:F1:02:58:82:1B:AB:99:4A:C8:20:35:95:DF
Certificate issuer:       /CN=A917B218/serialNumber=EC15A847AF784DF10258821BAB994AC8203595DF
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
Manifest number:          58
Signing time:             Mon 27 Jul 2026 10:34:30 +0000
Manifest this update:     Mon 27 Jul 2026 10:34:30 +0000
Manifest next update:     Mon 03 Aug 2026 10:34:30 +0000
Files and hashes:         1: 7BWoR694TfECWIIbq5lKyCA1ld8.crl (hash: MpYDeplI0qu9UOds2cXdArIuUrIwyJs599m58nQhIRc=)
                          2: 0ADA2358606511F1B2EB18476447A888.roa (hash: CLI1Bc70GNr1M6sLi1g14vwbCgYMCVC3xxYYksxjaGU=)
                          3: D2DAE050606411F18D93D7436447A888.roa (hash: p8bynTpUtraazzZ/QKRgqMb6jcWdyLWfJk6eYm7MHMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.crl
                          rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B218, serialNumber=EC15A847AF784DF10258821BAB994AC8203595DF
        Validity
            Not Before: Jul 27 10:34:30 2026 GMT
            Not After : Aug  3 10:34:30 2026 GMT
        Subject: CN=6a673436-7cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:ca:35:9c:46:6c:0d:c4:91:e7:7a:ba:81:
                    5e:de:98:48:b8:49:3a:bd:68:7e:36:cf:4b:17:fb:
                    96:12:d6:c6:a8:63:19:86:71:bb:86:9c:86:ac:af:
                    fb:3d:56:fd:2e:9f:76:ed:ab:7c:67:2a:7b:13:94:
                    d9:6c:96:7e:ab:7d:d1:a3:ba:f9:34:d3:d3:1f:cc:
                    fa:d5:64:6c:f2:bf:63:08:57:10:2e:b4:06:51:c3:
                    73:8d:b5:ed:68:7c:2c:2b:38:de:b5:74:92:2d:dd:
                    f9:99:85:3a:23:a1:8e:f3:cb:6e:89:88:3e:ec:1c:
                    83:87:27:59:f3:10:5f:53:8d:1d:a2:77:fa:e7:e2:
                    d3:f3:3c:54:c4:bc:db:a8:84:82:31:16:ef:a2:d6:
                    a9:a2:93:40:01:51:97:4c:8a:09:8f:8c:17:c7:f5:
                    2a:8a:a8:55:84:53:6e:40:ec:da:1a:8e:28:ba:d0:
                    20:55:9e:ff:16:e1:19:4e:8c:ce:5d:8e:00:bc:99:
                    87:dc:66:d9:e8:57:be:4b:6e:fd:f5:4a:8c:77:95:
                    9d:a8:0c:ec:e9:22:a2:db:96:ec:bc:87:26:52:da:
                    86:89:8e:07:a4:e6:72:c5:15:66:21:49:6d:16:a1:
                    e0:bb:dc:ba:31:89:a6:8b:e7:bc:0e:62:27:56:fa:
                    51:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:DD:49:B6:0C:DB:2C:B8:EE:90:BB:0B:68:CB:9B:E2:C8:C3:E5
            X509v3 Authority Key Identifier:
                keyid:EC:15:A8:47:AF:78:4D:F1:02:58:82:1B:AB:99:4A:C8:20:35:95:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fd:e5:57:38:9d:42:f9:32:d4:41:a6:fe:ac:41:d1:3c:e7:
         6c:1d:93:04:20:dd:17:32:23:f7:e4:97:53:5b:1d:6e:1a:9e:
         d5:b0:98:24:8c:e9:e3:42:00:bb:c1:23:75:ed:52:2f:b1:c8:
         46:95:fd:fe:38:a4:03:b6:41:df:cb:3b:bb:c1:e9:0c:a6:34:
         7b:06:06:68:dc:1f:24:41:a5:3f:80:8d:4c:91:ee:cb:ce:68:
         01:26:33:3f:a6:5d:cf:18:07:bc:f7:28:91:7b:39:15:05:1b:
         16:58:0d:ea:83:22:46:2f:98:0a:5a:64:8d:ab:46:51:2e:4f:
         d7:10:4e:60:4e:2a:b7:e8:cc:e9:92:64:bb:a2:74:44:b4:10:
         46:b3:d1:48:6f:6e:a5:cf:96:ec:05:3b:03:8d:04:56:93:a4:
         52:d7:b6:81:a0:8e:a9:d4:ed:23:95:53:ed:0e:0e:df:74:af:
         88:0d:2d:b0:9f:b0:1e:73:3c:6d:09:4c:61:9a:68:c1:ce:12:
         00:ce:5e:8f:bb:2d:38:2f:3a:17:7d:ef:ad:5a:45:7e:92:e1:
         3b:98:a4:7e:48:2c:cb:46:13:a2:8b:06:1d:5a:36:fb:d9:4c:
         a4:88:18:5a:07:ed:72:3e:6f:9b:a9:50:49:d1:8d:5f:fe:20:
         b4:4d:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:29 2026 by rpki-client