Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
File:                     elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json)
Hash identifier:          xqMIvOgqHOJpouyWYmuHXz6TOkcAHQJD1beLDWsp+eY=
Subject key identifier:   CD:FC:44:2F:AD:23:60:FC:41:C1:CC:12:B7:A8:00:EE:4C:64:D6:F0
Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
Certificate issuer:       /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Certificate serial:       0D89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
Manifest number:          0D7C
Signing time:             Tue 28 Jul 2026 18:05:27 +0000
Manifest this update:     Tue 28 Jul 2026 18:05:27 +0000
Manifest next update:     Tue 04 Aug 2026 18:05:27 +0000
Files and hashes:         1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: G08QEetWM1G6x9Klus5/9Q/ohjwORGzAYjHJYfX8AOw=)
                          2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Ohcdy58kQP+4fXw4fnYH+zSLsCeQ8xFhQqrxtgGqWp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl
                          rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3465 (0xd89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E
        Validity
            Not Before: Jul 28 18:05:27 2026 GMT
            Not After : Aug  4 18:05:27 2026 GMT
        Subject: CN=6a68ef67-fc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:6e:af:b1:4c:2f:19:a3:e8:0b:79:47:d2:
                    cd:9e:ef:9f:af:57:56:25:0d:0d:6b:52:17:38:62:
                    fd:77:41:2f:2f:26:5e:a6:95:67:5a:9e:ef:60:0b:
                    cd:41:42:d0:5d:43:f4:2e:ca:2a:b9:f2:fb:bc:1c:
                    6c:c1:62:34:dc:c8:1e:9e:93:59:6d:88:c4:eb:5b:
                    bc:01:9a:da:37:a4:34:3c:f2:1a:bf:d2:a3:62:b0:
                    ec:c2:bb:64:a7:7f:cd:17:8e:07:c0:7f:de:8c:d8:
                    43:09:30:c3:b8:d4:36:33:07:11:f1:0b:f2:73:72:
                    91:c6:b1:71:a5:f2:ca:fa:0b:b5:df:f3:43:2f:81:
                    1f:fd:79:75:d3:d3:cb:21:21:0a:41:a5:58:69:81:
                    00:2e:ca:80:73:2c:b1:8b:1d:05:1f:2d:97:39:3c:
                    86:30:6c:81:ae:49:0d:88:3d:be:d1:31:7a:07:68:
                    82:63:e1:a3:8d:65:e5:61:19:27:38:86:42:4a:57:
                    cb:6e:fe:86:22:d2:09:a0:40:d6:73:0f:86:7a:ef:
                    89:14:c2:5d:1a:60:30:a1:dd:bd:fa:43:ed:5f:00:
                    30:b7:97:4e:72:bb:3e:21:4e:8d:eb:4a:27:c0:5c:
                    5b:57:65:90:15:e1:16:64:f6:da:d4:a5:75:ea:5a:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FC:44:2F:AD:23:60:FC:41:C1:CC:12:B7:A8:00:EE:4C:64:D6:F0
            X509v3 Authority Key Identifier:
                keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3a:1d:e4:e1:eb:2a:66:65:46:d7:dc:7c:7a:63:ad:da:c4:
         77:e0:f5:a5:ff:b6:31:e2:7c:a7:4f:8a:62:5c:9d:47:9c:06:
         e1:56:52:28:b9:6e:6d:04:5a:c7:92:70:71:2e:02:5f:ee:bd:
         f8:91:7d:14:42:c4:2b:93:b8:c4:92:5d:db:2e:a3:1a:54:db:
         fd:87:39:ee:e0:db:64:4a:6e:71:85:bb:a9:c9:0a:b4:cb:18:
         18:32:99:ba:b2:9e:59:1e:09:6a:3f:d9:9c:46:3c:67:70:18:
         e9:f6:45:e7:74:c7:9a:ae:6b:fb:de:8e:f2:17:20:48:54:9a:
         95:6d:8c:3f:e4:d1:2c:2b:76:7a:a5:50:21:8a:76:5d:5f:0a:
         d7:c6:e1:9f:8c:0a:e9:30:c4:2d:d1:40:8a:2b:7c:c3:64:4d:
         69:4a:0a:0c:df:0d:37:57:93:3f:87:fe:b9:bc:e4:e7:63:0c:
         b5:37:92:b6:e4:60:d2:24:71:f4:fa:ba:05:3f:55:b2:19:59:
         7d:29:58:5c:2f:39:5e:d3:09:79:32:6f:36:53:46:f2:7b:7a:
         9f:15:d0:37:54:82:38:a3:f8:a6:ba:29:12:22:59:b7:82:51:
         6b:9e:18:06:da:53:f9:b3:c0:fc:20:81:fa:7c:5d:77:2b:20:
         32:65:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:19:45 2026 by rpki-client