Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
File:                     S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json)
Hash identifier:          DI9B+a/57WaxwiRY54T9tU9nF267FXibJ4+7Rq+X0Nc=
Subject key identifier:   E8:E6:E6:AF:F0:6C:3A:1E:CC:B6:95:9A:23:B4:E2:D3:09:45:68:D2
Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
Certificate issuer:       /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
Manifest number:          A0
Signing time:             Mon 27 Jul 2026 09:27:53 +0000
Manifest this update:     Mon 27 Jul 2026 09:27:52 +0000
Manifest next update:     Mon 03 Aug 2026 09:27:52 +0000
Files and hashes:         1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: TN7w0hud4+QAs9qTh99lsZkzCcV60EwqMKxVIR43y1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
        Validity
            Not Before: Jul 27 09:27:52 2026 GMT
            Not After : Aug  3 09:27:52 2026 GMT
        Subject: CN=6a672498-0ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:c6:8f:e5:f4:b7:c2:32:e6:83:05:03:bd:
                    52:2a:d7:c8:9b:f4:65:81:a9:2e:a5:75:09:41:4f:
                    6e:7f:80:47:c7:cf:84:cf:c1:13:d0:4e:00:e3:76:
                    9f:6f:20:a4:ca:30:c6:13:ce:1c:95:32:cc:96:a9:
                    ac:2c:6d:e3:d3:ba:ce:5d:97:2f:50:cc:a8:96:c2:
                    98:41:16:1d:5b:fe:2f:c0:d2:a9:ab:17:25:12:f5:
                    38:42:6d:cd:de:f2:e6:ef:be:82:82:f8:77:df:f8:
                    d3:60:ad:7c:98:f2:6c:53:df:9b:4d:0c:49:91:e7:
                    c9:8f:60:2a:07:d6:88:6a:ea:23:34:32:6d:34:bd:
                    85:13:01:43:33:79:8d:ff:89:76:fb:84:d4:40:1d:
                    71:d5:35:f5:15:f0:a1:19:e0:fb:f9:c5:f6:ec:bc:
                    e8:5a:e2:b8:06:be:7e:eb:cf:88:4c:a3:9a:22:60:
                    97:73:66:17:8f:57:3b:8d:be:87:03:63:96:77:0d:
                    37:b2:46:12:b9:27:a7:63:04:d4:fb:82:4c:09:e5:
                    3f:bf:47:1d:f5:7a:01:7e:13:4d:13:37:a4:07:5d:
                    61:12:62:f0:77:17:78:21:37:ad:e3:f6:83:02:c7:
                    b1:b3:10:12:6c:c3:c1:7b:9c:2e:d6:68:7b:92:4a:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E6:E6:AF:F0:6C:3A:1E:CC:B6:95:9A:23:B4:E2:D3:09:45:68:D2
            X509v3 Authority Key Identifier:
                keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:56:d6:6c:e7:39:da:7f:f2:5c:cf:e2:d5:86:4e:73:1b:1b:
         41:ed:97:1b:5d:7f:a0:1c:52:e1:2d:6b:3b:ac:2a:fe:e1:94:
         9e:0e:13:57:e2:ce:46:65:6f:55:de:ca:2a:c7:1a:26:1d:87:
         70:33:05:fc:fb:f9:38:92:5d:02:10:0f:0c:2e:21:42:28:53:
         98:cf:a5:9c:76:cb:19:a9:bc:2c:37:90:26:11:30:6c:6e:76:
         33:14:fc:25:39:87:aa:37:39:81:cf:41:d5:a7:fd:a9:91:e6:
         19:66:a3:de:73:d5:1c:d2:bf:7f:d3:c4:70:44:0d:2a:6f:d0:
         0a:9c:9e:88:be:89:b7:ba:2c:aa:db:53:47:3c:30:43:3c:44:
         2d:41:9f:9b:97:39:e6:58:da:40:a8:56:24:7f:7e:68:2c:40:
         08:02:2b:81:da:63:93:44:d7:1a:55:8c:95:7f:0f:af:60:bf:
         69:c9:6b:39:00:70:9a:d7:7f:76:3e:08:68:92:b8:0d:2c:cc:
         77:7a:84:3e:de:71:3d:fb:f4:ea:92:b8:9b:bd:b2:d8:5c:93:
         5b:88:fb:84:aa:bd:92:6f:d8:cc:0e:1e:0e:e5:dc:8c:a2:73:
         98:20:21:1f:74:18:37:32:61:ac:4c:2f:5d:e8:48:47:43:7b:
         ef:85:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:54 2026 by rpki-client