Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
File:                     B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft (raw, json)
Hash identifier:          jER+wm1NIWFtuzw0KxBzGbGvEp4hE2I5Y8r+nYipf3w=
Subject key identifier:   A4:EF:54:7D:82:05:F0:61:98:87:7A:87:98:64:25:5D:10:39:3F:C5
Authority key identifier: 07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2
Certificate issuer:       /CN=A91A00EF/serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
Manifest number:          54
Signing time:             Mon 27 Jul 2026 10:36:42 +0000
Manifest this update:     Mon 27 Jul 2026 10:36:41 +0000
Manifest next update:     Mon 03 Aug 2026 10:36:41 +0000
Files and hashes:         1: B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl (hash: HbNXvvdpFASiCYSJeifpdTe0c2ZNntu+rnDYF22YBSY=)
                          2: 964C388611F511F1B1F03794113D8C67.roa (hash: EHxSKIPAmgyHn407GlIwgWXCJmbJB61yUKXqSCmx8P4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl
                          rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A00EF, serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2
        Validity
            Not Before: Jul 27 10:36:41 2026 GMT
            Not After : Aug  3 10:36:41 2026 GMT
        Subject: CN=6a6734ba-a6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:33:21:7c:05:ac:73:ee:90:bf:55:03:81:
                    2e:ed:4f:9e:d9:92:59:bf:b0:9b:66:ef:b9:2b:20:
                    b1:fb:1c:4e:49:fb:53:c4:0d:f7:3f:0d:41:f9:4b:
                    bc:1c:03:cd:a2:09:f6:37:34:fc:6b:36:f2:3f:ca:
                    0a:99:28:a4:10:ee:16:a0:d7:d6:53:9d:e0:14:01:
                    f7:2c:ca:be:7f:db:4c:9f:a6:23:8f:8b:7a:8b:45:
                    5b:ee:3b:ce:5e:d4:57:b7:7d:2a:3a:0d:be:42:1c:
                    f6:18:13:f5:b8:13:8a:2c:dc:ca:35:e9:a9:c6:9c:
                    ad:14:d0:ac:67:1c:e5:b8:76:95:31:03:eb:d0:bc:
                    48:97:fd:b8:bb:cb:5a:e6:45:c5:79:39:5c:37:85:
                    28:74:63:40:1c:63:a3:fc:b3:f6:e8:fc:61:64:f6:
                    0c:dc:53:cf:da:bc:b9:2c:a6:db:24:6a:39:03:b9:
                    49:2d:8f:81:36:63:0b:16:ac:67:45:c5:0b:18:07:
                    be:a1:6d:f8:d5:ec:58:cd:1d:8d:cb:9b:18:22:f0:
                    f5:09:e0:b3:b0:1a:38:2d:bb:f2:7a:0a:6d:ad:7c:
                    01:65:19:25:0f:e8:12:f6:dd:88:2c:d8:a6:1b:b4:
                    c7:a4:43:98:58:59:cb:26:5e:d8:05:37:b3:b4:06:
                    07:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EF:54:7D:82:05:F0:61:98:87:7A:87:98:64:25:5D:10:39:3F:C5
            X509v3 Authority Key Identifier:
                keyid:07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b9:9c:ee:cb:f9:48:b7:c3:62:fc:6c:12:d9:61:d9:74:db:
         91:59:11:02:40:76:6a:69:9c:4a:e1:60:15:08:eb:67:c9:fd:
         75:76:5c:7e:06:6c:7c:b3:9a:4d:ca:6c:98:c0:38:97:d7:55:
         1a:3f:a6:9d:a4:b4:ea:84:01:97:51:a3:d6:9c:ab:8e:cf:2d:
         c6:71:c5:c0:90:e5:a0:c7:2e:b8:da:bd:a3:8d:89:b4:d9:ca:
         4d:05:2a:74:1a:94:41:a5:a8:8f:b9:ed:92:3f:9c:0f:c7:7b:
         5d:d0:9d:3c:31:6f:bd:02:6d:d2:65:ef:cd:8c:e7:13:9b:49:
         3d:8c:62:ad:3c:e2:fd:5e:df:6c:eb:4c:11:50:8a:34:a9:be:
         9e:78:04:72:c0:7e:b3:07:10:44:28:a6:d6:a0:42:bf:93:c2:
         83:d3:2a:61:03:2a:3e:31:b4:74:56:a9:c6:91:e5:b3:7e:75:
         c5:c7:86:e5:86:66:c0:b0:f1:84:62:c2:d5:53:62:6c:5a:07:
         fc:3d:68:3e:ef:70:a6:0e:6b:a9:f6:79:df:57:34:f2:44:56:
         9c:da:23:4a:30:4c:95:74:fc:db:54:7c:64:fb:66:a8:6b:6f:
         cf:9f:c2:69:dd:7b:f4:ec:8b:2d:d0:71:82:c1:2c:85:0e:70:
         72:6a:bd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:31:42 2026 by rpki-client