Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
File:                     7enmnD0KkdKXM8a3AvPMSL7dzuk.mft (raw, json)
Hash identifier:          khmpa9mkFtmRQdPkbv/ClgiQj/CPYvX4s8G5KZ05R14=
Subject key identifier:   42:B0:7D:CC:B4:3E:08:AA:5B:B0:41:5E:32:8A:EE:32:88:95:63:57
Authority key identifier: ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
Certificate issuer:       /CN=A9193869/serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
Manifest number:          8D
Signing time:             Mon 27 Jul 2026 09:42:29 +0000
Manifest this update:     Mon 27 Jul 2026 09:42:29 +0000
Manifest next update:     Mon 03 Aug 2026 09:42:29 +0000
Files and hashes:         1: 7enmnD0KkdKXM8a3AvPMSL7dzuk.crl (hash: Cw56f239ELRwrCNXju6JcIFizySlYxe/QQt2/4/x+KA=)
                          2: 00C05CEAB7D511F0AE891D43C4F9AE02.roa (hash: rj8hIrfRi7V3r6PzJ0L9zJhnR+XSN/cXbFpz9A4TU5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
                          rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193869, serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
        Validity
            Not Before: Jul 27 09:42:29 2026 GMT
            Not After : Aug  3 09:42:29 2026 GMT
        Subject: CN=6a672805-4c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:4a:ee:f7:43:4c:ac:8c:37:74:27:11:f8:
                    ff:64:41:c5:dc:d9:1b:55:29:f9:d5:16:96:6f:6f:
                    9d:14:b0:e9:ad:1b:b4:cf:fc:ae:bd:22:1b:22:c0:
                    15:be:4f:f9:83:24:73:47:ef:49:71:73:3f:e1:ca:
                    02:5c:38:b1:09:c2:f4:f6:c3:d4:34:60:f0:9a:9e:
                    31:e7:4a:cc:3d:d1:8e:e5:0e:f7:7e:55:d9:21:ab:
                    68:09:d6:c7:df:7f:0b:73:63:67:df:f9:0d:c9:6a:
                    11:b0:18:7a:03:ac:ca:04:4f:f4:2f:b0:fe:3f:d8:
                    d8:6d:d2:9a:92:2b:9e:51:d3:04:f6:d8:2b:e9:6c:
                    3b:56:84:89:23:a7:2c:8b:c3:87:88:dc:e2:d8:62:
                    41:c0:4f:f1:33:9f:f6:26:b6:47:b0:a9:c4:4f:5f:
                    01:f6:0d:ad:05:27:cb:45:21:3f:77:29:67:15:fe:
                    81:fe:93:d9:23:cd:b9:09:fc:c6:9b:72:57:1a:19:
                    cf:b6:ca:e5:a2:ef:cd:a2:71:22:5b:ff:fd:39:ca:
                    e4:c4:a1:68:ab:b6:9d:55:30:96:67:5e:f9:aa:e9:
                    9c:e2:30:48:77:e4:51:2a:3f:f9:d4:e7:80:84:6d:
                    96:66:29:c7:4c:a2:7a:fa:eb:4e:09:67:83:1a:20:
                    8d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B0:7D:CC:B4:3E:08:AA:5B:B0:41:5E:32:8A:EE:32:88:95:63:57
            X509v3 Authority Key Identifier:
                keyid:ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:d5:43:23:10:a9:f6:65:a7:90:4d:52:71:9a:fd:b4:5d:
         0b:70:68:fe:11:6b:66:44:f6:00:a7:e8:6c:3f:4d:8b:19:d5:
         83:4b:5d:3a:ce:41:84:0f:48:95:47:26:ce:94:8e:32:2b:f8:
         99:d7:10:21:98:4d:a4:c3:de:01:c0:ce:6e:e5:df:3c:9c:da:
         a3:79:b4:89:a4:ce:5e:21:b5:57:d4:38:47:ee:c3:8b:53:55:
         db:25:34:4e:cd:60:69:1d:c1:fe:ed:35:77:cd:18:63:80:36:
         a3:84:36:70:16:7b:66:8d:45:56:ef:78:3c:59:aa:c6:fd:e5:
         17:9e:29:f5:87:5f:2d:69:f4:4a:74:8e:73:60:c7:ea:1d:f0:
         a8:f7:57:a8:f4:3c:01:37:82:1a:b4:e5:56:a3:50:04:dc:7d:
         30:0f:b1:eb:d3:9d:90:0f:cb:ee:ac:01:cb:a6:a8:f5:35:96:
         65:ba:57:af:d2:3f:69:7d:ea:76:34:fc:f0:26:3e:62:7d:99:
         ef:b1:c5:84:78:aa:12:96:b6:17:98:3b:30:59:06:06:71:88:
         7f:d0:38:73:c4:d2:e8:91:6b:75:90:92:0f:f8:75:29:8e:31:
         a3:b0:28:82:7f:ba:5e:b5:95:c0:b8:37:ee:c6:10:1e:31:a4:
         a3:71:31:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:35 2026 by rpki-client