Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
File:                     fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json)
Hash identifier:          t99VK+i9PyFfDjNLZaUor7ORgmwTtAbOqu3Ucy8Q6uM=
Subject key identifier:   AE:29:98:EA:74:62:53:0A:4D:82:22:68:B3:0D:C9:E4:EC:E5:22:37
Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07
Certificate issuer:       /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
Certificate serial:       07B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
Manifest number:          07A8
Signing time:             Sun 26 Jul 2026 22:12:28 +0000
Manifest this update:     Sun 26 Jul 2026 22:12:28 +0000
Manifest next update:     Sun 02 Aug 2026 22:12:28 +0000
Files and hashes:         1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: gCoDZRP2w8J1rZ5k7ceYWOdnjTDfHcJWfQ2arPL3+ig=)
                          2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: Hti98hcC+ag2IJ3RoxadOaVc5hLgBIiE7Elxt08Tr5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl
                          rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1970 (0x7b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
        Validity
            Not Before: Jul 26 22:12:28 2026 GMT
            Not After : Aug  2 22:12:28 2026 GMT
        Subject: CN=6a66864c-f639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0e:3d:b5:3a:8c:6a:8c:2a:24:73:41:df:b2:
                    b9:58:65:58:73:58:b4:11:48:f9:24:7a:a3:b8:2f:
                    ed:ed:41:b7:9d:96:d3:ff:53:55:b5:dd:9f:ec:f9:
                    7c:6e:53:84:3b:9d:ce:cd:47:5f:31:b5:12:7e:d7:
                    d9:2f:24:4e:f4:ed:17:43:b8:5f:31:9a:6e:f0:a1:
                    67:39:84:a3:fa:4e:1c:e7:b0:52:14:22:02:58:78:
                    71:f6:8c:30:89:37:d3:8b:9b:b2:1e:6e:61:28:0c:
                    e5:7d:9e:a2:1e:6e:34:db:41:3a:ce:66:35:69:41:
                    d4:51:4f:ee:28:c0:f8:8e:39:51:c0:f3:40:80:39:
                    1f:c9:39:9a:3f:95:3a:e5:53:24:17:b9:0d:ed:c3:
                    dd:61:5b:c2:e4:e3:54:a0:22:8a:1c:62:d6:e9:d4:
                    06:c9:50:4e:0e:5a:cd:8f:61:91:13:3f:e4:f9:10:
                    40:29:2c:4b:da:8a:80:6d:d3:51:f3:c4:07:eb:9e:
                    1d:aa:b7:b3:e2:1a:ca:be:70:e6:81:f6:e3:9a:fd:
                    41:fe:74:ef:3e:c5:83:ea:8b:9f:fb:9f:21:ff:db:
                    e9:cc:dc:f7:a4:51:af:fb:13:ed:c6:ae:9e:6d:24:
                    35:30:bb:f4:d7:93:13:8a:02:2e:d1:d2:94:7c:9d:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:29:98:EA:74:62:53:0A:4D:82:22:68:B3:0D:C9:E4:EC:E5:22:37
            X509v3 Authority Key Identifier:
                keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2b:98:e9:83:02:b9:8f:43:0d:1c:b8:03:1f:c2:9b:01:2f:
         cc:61:a6:fe:88:fc:e1:38:66:1c:c1:3c:fe:4e:7a:d9:f8:e9:
         da:f2:3e:c2:4a:ac:21:86:9b:d9:04:da:c2:13:b7:19:04:32:
         53:d3:d8:49:31:76:a4:0c:46:20:79:26:70:17:65:1b:44:31:
         d0:00:4e:4e:af:17:7d:89:7e:06:5e:e6:f8:98:03:0b:bd:66:
         ce:9d:bc:a0:0b:0b:87:db:77:75:25:55:d2:2b:97:44:fc:9d:
         0e:01:80:d0:36:99:9d:80:80:e1:98:a6:d8:6a:01:ab:3f:f9:
         48:d4:6c:bb:92:96:2a:ca:13:d1:b7:49:da:1f:99:59:7b:a0:
         f9:ff:35:80:55:8a:d9:b7:3a:5f:dc:3c:05:2c:55:81:a9:7a:
         ad:51:97:48:8c:69:77:4b:60:c1:f6:88:65:91:6f:d9:44:2b:
         f6:c4:41:8a:16:7c:4a:2d:47:a4:60:f9:42:73:b1:21:3e:00:
         95:2e:ab:ed:13:89:26:06:d4:50:de:a3:2d:68:53:c0:44:f0:
         25:ff:f2:c5:1e:ac:1a:d5:1e:18:f9:38:72:b4:f8:f8:06:0e:
         1e:7f:ef:57:c7:4f:c5:8e:7e:04:5b:f6:4c:48:23:bf:22:7e:
         d6:1d:5e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:42:57 2026 by rpki-client