Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
File:                     7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json)
Hash identifier:          M5C4DGtlw76QHFvyKbcKUGST+wZhKqCF1jv1bXRyZlM=
Subject key identifier:   D3:05:05:DA:F4:79:B0:B7:7B:19:38:62:B2:33:DE:C2:FF:E9:43:52
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Certificate issuer:       /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial:       1AA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
Manifest number:          1A71
Signing time:             Tue 28 Jul 2026 16:25:16 +0000
Manifest this update:     Tue 28 Jul 2026 16:25:15 +0000
Manifest next update:     Tue 04 Aug 2026 16:25:15 +0000
Files and hashes:         1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: JU1RUzcTKwqGRA7zeYHfmo/rV2dV1+795CCYhQLh/Sg=)
                          2: CBBF13566EA911F1979A4FB45FA30FBC.roa (hash: InjAFjFfD9Kqc+Wu+wt8coAIdhYTvUAL4QI7Q5j856I=)
                          3: 545743246D1911E7A4448D81C4F9AE02.roa (hash: aF9bVVw6Gwu2L83wIJh2aO8mDQcLr1IwMLw9hro7LqM=)
                          4: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: +4dDlburVO2MmfNARrkvQtCk1fegQCkSHo+kZlpjT9U=)
                          5: DCD75050315011F0BC916269C4F9AE02.roa (hash: it0EUJuF/f2xwJeSJJN9QRAuHCVD+ovbX5Fq/ZrMmKg=)
                          6: 361BDEB6315011F0A08FB267C4F9AE02.roa (hash: hQaqyHy+IglmfnIs2mH5KDdafmYlJZXnRBxvCuoPjT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6818 (0x1aa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
        Validity
            Not Before: Jul 28 16:25:15 2026 GMT
            Not After : Aug  4 16:25:15 2026 GMT
        Subject: CN=6a68d7eb-7d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:29:6b:8e:65:7c:ca:ae:e1:85:e8:81:e8:
                    5b:f4:25:be:0d:c3:39:69:2d:f1:30:ac:10:93:db:
                    05:83:71:29:2a:a3:b9:1c:c9:6f:cd:e9:9c:c8:dd:
                    44:e1:cc:7c:b0:4f:8a:5c:95:d6:b0:09:47:9d:75:
                    5a:24:15:11:38:e6:fa:25:a2:8e:41:d3:17:03:38:
                    29:3c:1a:e1:37:80:74:8e:c2:ff:e1:50:f7:10:79:
                    5a:09:86:32:25:77:b8:71:87:52:5e:b6:5b:5b:20:
                    92:5f:a1:e5:c2:91:75:4c:62:63:5f:e1:9d:9d:7d:
                    ab:41:9d:b6:70:c9:5a:e4:89:0b:fb:fc:ce:10:9b:
                    bc:4a:55:6e:0f:88:70:2c:39:7e:17:85:33:0a:0f:
                    be:24:b3:2e:86:db:c1:17:a2:6c:64:9a:5e:ca:8e:
                    1c:08:b2:28:0c:33:bb:52:58:4e:cd:1d:da:17:8e:
                    4c:ef:b1:24:0f:fe:30:69:7e:45:b7:88:ff:f6:16:
                    d1:7d:be:80:93:3c:1b:0e:f5:21:5e:33:1f:08:83:
                    3b:b9:26:d3:ca:42:4c:89:89:c5:f1:7a:44:80:a8:
                    90:61:e5:b9:a7:05:cf:47:27:e1:51:53:96:3e:2a:
                    40:2e:82:02:46:04:2b:79:40:58:fc:c5:38:0a:a7:
                    a4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:05:05:DA:F4:79:B0:B7:7B:19:38:62:B2:33:DE:C2:FF:E9:43:52
            X509v3 Authority Key Identifier:
                keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ec:e9:c5:8f:88:38:55:2c:3b:3f:e0:64:4d:bf:8f:97:90:
         e8:4c:43:38:b1:ff:4b:43:99:c6:30:87:49:02:c6:7c:b7:43:
         aa:67:58:ad:17:2a:34:06:9e:84:46:4a:0b:0e:61:b3:51:92:
         3f:f7:01:60:45:12:c0:e9:04:e3:37:ce:71:d0:4f:29:db:17:
         96:f1:2a:fb:ac:3a:75:f1:74:85:83:e9:07:e7:60:0d:11:04:
         c2:95:10:22:a4:0d:12:00:80:29:8d:0d:18:76:6f:c4:b6:65:
         39:a4:46:9d:5c:26:53:33:83:a2:17:db:07:52:90:bf:1d:ef:
         e5:3c:e0:74:7a:b4:dc:ba:ba:9b:8f:62:7b:05:93:24:25:14:
         0b:d8:ae:b4:e9:74:89:72:b9:28:64:79:3d:b7:35:65:c2:91:
         ce:bd:0b:23:0b:b9:bd:9a:88:a6:8a:b5:a5:6e:a2:b8:2f:29:
         20:e9:ba:5b:74:90:50:18:c8:51:01:54:bd:3a:ae:1f:ef:e0:
         fa:41:c7:da:cb:9e:2c:a1:f9:a9:76:d5:4a:18:4e:4b:d0:41:
         a2:ec:08:2b:dd:5a:df:89:02:bd:ca:60:07:6a:32:bd:e0:22:
         2d:99:72:78:0d:88:38:76:15:80:09:d0:e4:83:b0:d3:31:23:
         e6:cb:06:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:55 2026 by rpki-client