Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
File:                     ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json)
Hash identifier:          kmV6NQzSLHJYvctF2EJCROl4R4H6HGhbn7S1W6yzdOU=
Subject key identifier:   41:E8:28:BC:C3:CC:C2:87:D2:92:C2:75:91:D0:7A:7A:97:35:4C:A5
Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
Certificate issuer:       /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Certificate serial:       07E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
Manifest number:          07E0
Signing time:             Tue 28 Jul 2026 21:48:02 +0000
Manifest this update:     Tue 28 Jul 2026 21:48:01 +0000
Manifest next update:     Tue 04 Aug 2026 21:48:01 +0000
Files and hashes:         1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: zsPmJdcrnNKfid5VUFn+UEs7hVO26Ez1sVCDacmvQgY=)
                          2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: xUgWZPS3OqCqcDCU2NsD4bCGdV7LPQ4bmn/sE/hHG+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
                          rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025 (0x7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
        Validity
            Not Before: Jul 28 21:48:01 2026 GMT
            Not After : Aug  4 21:48:01 2026 GMT
        Subject: CN=6a692391-b125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d7:65:69:34:0d:e2:3b:b3:e2:91:80:d4:2c:
                    f8:f7:4f:1c:ac:7c:10:7e:79:ab:5b:15:2f:36:b6:
                    86:60:e8:9e:d8:f0:6e:9d:09:a4:75:78:f8:11:23:
                    aa:61:4b:62:d1:90:e4:1c:10:6f:c8:46:db:1c:c0:
                    44:30:50:bb:47:56:bf:d4:aa:7c:3a:47:48:e3:1f:
                    c1:0f:69:b6:4a:20:2b:61:f4:76:af:66:c5:58:a2:
                    06:ea:bd:01:e2:6c:ce:d6:5d:ac:b1:ae:25:db:0e:
                    a1:8a:4f:d6:86:ee:ff:1b:76:92:06:2c:11:80:0d:
                    e1:91:a5:74:62:fc:a8:65:99:12:8e:ad:1b:22:b0:
                    e7:17:2d:51:50:cb:51:17:80:f8:85:f9:79:1c:9c:
                    ce:dd:33:34:7c:aa:98:a8:0a:b6:47:a3:8c:70:f4:
                    20:f4:43:67:d4:f2:b2:bd:b6:4d:16:c6:9c:69:8f:
                    10:f9:e4:bb:ba:d5:72:05:0c:a3:a7:79:51:82:fc:
                    53:28:54:ea:2c:ba:47:85:c7:b3:6f:0e:a3:98:c9:
                    cd:b3:ce:7b:b7:0b:43:e0:3c:71:cb:11:b7:da:24:
                    aa:98:5a:6d:35:7e:86:a4:eb:f9:f2:cc:8c:7d:10:
                    c1:d9:b1:88:1a:57:15:d9:a7:d2:29:f8:a5:b0:f5:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:28:BC:C3:CC:C2:87:D2:92:C2:75:91:D0:7A:7A:97:35:4C:A5
            X509v3 Authority Key Identifier:
                keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8c:74:82:e8:34:7e:f7:c4:b3:d6:98:c0:48:38:7d:af:a2:
         79:4b:c9:94:61:8e:54:2b:3b:f7:a0:bc:1f:e7:52:d2:38:cf:
         58:51:b2:9f:de:37:53:b4:c8:95:4b:c8:32:c8:2b:39:d3:10:
         93:24:62:f8:1e:1d:6b:ee:11:2e:a5:e7:7a:d4:11:4a:3e:91:
         2d:40:1f:68:b0:92:4b:3d:4e:a7:48:36:a5:71:0c:bc:86:34:
         aa:31:2f:08:0b:77:d5:6d:02:1b:c5:4b:28:4c:53:bf:0f:e3:
         2d:cf:34:62:5d:de:10:41:57:30:49:d9:69:ab:94:78:c4:0b:
         14:e0:e7:c9:5e:64:ee:cd:36:c7:db:7f:f7:5d:97:72:9c:f1:
         f7:97:3a:55:0e:71:d6:c3:56:f1:07:ce:1d:4b:63:a0:d2:99:
         8d:e4:d6:3a:49:2e:0b:02:ae:19:57:ca:07:df:70:3e:aa:58:
         96:31:cc:9e:15:d2:7b:8a:64:46:33:56:3e:25:8a:6d:8b:07:
         b7:15:fd:d4:1b:f5:57:5f:a6:47:28:ef:a0:0b:90:82:9e:93:
         e7:c9:5a:88:f0:f2:89:25:fd:b3:d8:c5:ce:c0:7e:af:1b:40:
         05:e6:b2:1c:80:03:be:27:5a:c3:90:6b:19:58:7c:4f:17:f9:
         9d:64:6a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:28 2026 by rpki-client