Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          ZdBIkZx9zZl5zGRQFCRRKBXuXBiXZsQLb20ieCDXvYE=
Subject key identifier:   53:D6:00:52:FD:0F:61:E2:F3:F0:B7:FA:D0:1A:FC:20:B0:4E:E5:BF
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       029F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          0296
Signing time:             Sat 13 Jun 2026 01:46:49 +0000
Manifest this update:     Sat 13 Jun 2026 01:46:49 +0000
Manifest next update:     Sat 20 Jun 2026 01:46:49 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: 8HVNo5sEzqrdEsXYVpm8zWIt8X0ORAIOiqwF63Px0Sc=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Jun 13 01:46:49 2026 GMT
            Not After : Jun 20 01:46:49 2026 GMT
        Subject: CN=6a2cb689-cbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:9e:6c:fa:99:d4:4d:7a:c0:37:ae:96:23:
                    b6:d4:0f:71:94:7c:d0:4c:cb:17:15:a1:5b:0a:dc:
                    2d:41:f1:de:49:da:41:49:f0:af:21:42:b4:0e:72:
                    29:6c:76:f2:91:04:5e:b6:8a:b7:62:7f:46:d5:1c:
                    c6:2b:c8:be:f9:61:c1:f0:c3:aa:77:22:de:84:6e:
                    5d:19:1a:b0:67:2a:24:25:48:4c:db:fa:c6:8e:c0:
                    1d:52:0b:79:4e:c9:24:9f:71:5a:03:08:29:48:9e:
                    92:44:30:b2:7b:e2:02:81:bd:22:dd:52:2a:32:16:
                    67:ab:32:12:90:65:3a:73:73:f9:71:d7:20:e4:29:
                    ec:90:7c:f3:a5:d0:6b:35:a6:71:9c:2e:ac:7e:f6:
                    32:be:78:fb:ff:4f:36:1c:2d:8f:ef:bd:33:67:3f:
                    5b:f9:93:25:3f:0e:6a:62:4e:31:0c:fe:36:4c:a8:
                    ce:e9:3e:31:14:a4:af:45:a0:c8:3a:c1:2a:0a:4c:
                    1a:73:66:80:6e:f5:91:f5:52:3f:0a:79:8e:01:41:
                    c5:4e:84:ca:03:68:cf:23:30:ed:e5:39:e2:58:cb:
                    ed:6e:c5:a6:80:a2:da:cb:da:4e:a3:9e:68:23:06:
                    8a:41:d4:35:df:d9:04:58:92:d2:50:b2:b2:1f:d0:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D6:00:52:FD:0F:61:E2:F3:F0:B7:FA:D0:1A:FC:20:B0:4E:E5:BF
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cb:97:f5:ba:a9:6d:c5:bb:44:e3:66:5b:bb:11:36:c1:49:
         6c:be:5e:2f:bd:5d:f9:3b:53:c8:b1:a5:53:f0:04:40:2b:fe:
         74:8a:1c:9a:90:36:ca:9b:11:06:72:6a:38:89:53:39:7a:33:
         fb:83:02:b5:d4:3f:9d:88:9e:19:3c:33:a2:47:6c:e2:7c:a1:
         9b:fa:03:43:0c:4c:da:00:2c:44:b5:7d:ad:7c:58:13:23:7b:
         d7:82:14:0d:96:61:e2:b2:03:8f:a7:b1:c6:5b:2e:99:b6:81:
         87:21:f4:f7:6c:53:ac:72:e8:4f:bb:48:df:8d:4e:31:62:e1:
         14:0b:ca:cd:c5:4f:d6:d8:ee:bb:22:48:99:f4:ac:d3:3b:8e:
         a9:59:3d:c9:07:80:d5:f4:56:7b:33:2b:57:d4:bf:06:04:3f:
         8d:d6:8b:5f:30:07:ca:a5:2f:1c:3d:d8:23:02:c5:18:1a:59:
         67:1d:32:bf:9d:21:c7:d1:49:26:2f:4b:72:92:21:fc:f3:3c:
         e4:02:4b:62:2e:58:6d:fc:8b:e1:80:1b:35:ec:30:39:9c:93:
         57:76:87:0c:4d:0b:86:16:e3:21:4d:d1:db:63:bd:72:a6:82:
         4e:43:35:13:c4:bf:8a:1f:65:a9:cb:e3:00:20:8a:75:1a:70:
         a2:d6:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:15:08 2026 by rpki-client