Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
File:                     g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json)
Hash identifier:          S3m4N14YLc/DoDyYd1i5P16RUZAwnMyjTMnMI4Hxlpw=
Subject key identifier:   82:0E:F1:F1:24:74:A5:23:61:E0:F8:96:B7:BB:20:99:7B:D3:CC:7A
Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
Certificate issuer:       /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Certificate serial:       0296
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
Manifest number:          0290
Signing time:             Mon 27 Jul 2026 03:07:15 +0000
Manifest this update:     Mon 27 Jul 2026 03:07:14 +0000
Manifest next update:     Mon 03 Aug 2026 03:07:14 +0000
Files and hashes:         1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: f7hEXimIYaESYBeUvyDvEAxsx5Lyh1HsLGSG7Sowhm0=)
                          2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: Enlt1m5fMgJylVSd5+EcRhxkwS2mrK3Dcl4exqYwjbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl
                          rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
        Validity
            Not Before: Jul 27 03:07:14 2026 GMT
            Not After : Aug  3 03:07:14 2026 GMT
        Subject: CN=6a66cb62-8071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:3b:99:59:3a:18:b1:ac:96:98:d2:01:72:
                    2a:f2:af:fc:1b:9f:9a:bc:d9:49:48:e0:c3:f3:9b:
                    6a:bc:c8:4d:45:40:b3:3c:80:71:d7:e2:55:6f:c1:
                    9a:51:1f:2e:dd:cd:7e:9f:02:aa:b9:ef:e5:5b:aa:
                    de:10:1e:c2:58:43:79:59:f3:17:ff:66:d5:86:46:
                    8c:3a:bc:3b:65:75:25:d9:8b:02:1e:f4:e9:62:e2:
                    a5:48:39:77:b6:c2:ae:93:91:89:d0:ef:78:52:da:
                    b4:83:1f:33:2e:fe:56:33:3c:2f:03:ba:ea:a8:ca:
                    b0:3d:8f:d9:a0:bf:37:85:fd:70:87:05:cd:65:cd:
                    ff:74:aa:64:ce:6f:21:1d:bc:88:f0:ff:a1:06:49:
                    e7:6e:1d:74:58:56:75:c6:12:fb:40:b3:86:d0:d6:
                    06:e1:66:3c:da:e9:1c:8a:7a:16:8e:ac:df:fe:35:
                    24:6b:7c:4f:77:3a:07:73:4d:68:f1:71:bb:8f:6f:
                    40:db:9b:a4:a2:c4:10:f3:57:a9:b4:93:de:48:9e:
                    07:0b:f2:bb:7c:a0:93:c1:f5:3b:d8:b0:60:e6:e8:
                    46:1d:63:50:07:41:69:13:6c:e9:f5:6f:9f:2b:86:
                    1f:28:62:13:18:cd:f0:43:2b:a2:7b:24:f9:40:d3:
                    d7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0E:F1:F1:24:74:A5:23:61:E0:F8:96:B7:BB:20:99:7B:D3:CC:7A
            X509v3 Authority Key Identifier:
                keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:97:97:f3:aa:29:08:4c:cc:b0:9b:59:46:91:89:d8:2c:05:
         1a:ea:d1:16:54:8a:4f:ab:3c:75:ef:ae:1b:83:2d:41:ce:88:
         3f:37:19:bb:b7:7a:16:bc:03:88:92:fb:67:df:41:51:d5:3c:
         8f:a1:e2:f6:dc:ed:5e:f8:3b:8a:1e:06:29:a1:1f:98:16:c3:
         20:18:8c:f1:c6:6f:82:eb:bb:38:d9:96:39:18:2b:46:d0:c3:
         31:5d:6b:b6:02:d1:bc:6f:cd:14:fa:b6:03:90:c5:a9:d2:d9:
         13:63:7d:da:52:3e:ae:be:55:b4:6c:90:1f:66:b2:c0:ef:c2:
         be:76:30:b3:bc:61:fa:39:5f:7e:a2:7d:9c:77:bf:b2:12:ad:
         f7:30:05:26:e7:88:65:2c:16:ba:84:ae:b1:84:11:bc:2e:52:
         bd:8c:d7:36:a4:3f:2b:15:8b:66:a7:f1:9d:ca:ff:cb:fe:cf:
         59:e9:a6:a1:6e:a0:a0:16:db:e1:23:ee:75:3c:fe:a4:d9:f4:
         23:7a:49:74:ee:95:f1:94:df:15:64:d6:63:f0:01:00:2a:f2:
         b4:52:6d:b9:64:5c:d2:f1:a9:ec:33:00:e8:e3:b0:81:48:f5:
         8b:f2:90:49:47:ec:f3:c5:03:21:57:85:17:0d:e3:78:df:3d:
         49:f8:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:16 2026 by rpki-client