Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
File:                     P7b20GZYOGwje40UDa0VsoOLtco.mft (raw, json)
Hash identifier:          5GsNOAnvvb6LKZlt49wW5OKMbmyxerEpSgzw5x7uvIc=
Subject key identifier:   37:C3:2D:8B:B5:50:AC:21:26:B4:33:2B:06:3E:6B:B4:D5:AD:E9:33
Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA
Certificate issuer:       /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
Certificate serial:       0C0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
Manifest number:          0BFB
Signing time:             Tue 28 Jul 2026 19:06:46 +0000
Manifest this update:     Tue 28 Jul 2026 19:06:45 +0000
Manifest next update:     Tue 04 Aug 2026 19:06:45 +0000
Files and hashes:         1: P7b20GZYOGwje40UDa0VsoOLtco.crl (hash: WCFUuIL3iPABr1X9ZKi5qrb1TN2GAtHZH1+sVsj/WA0=)
                          2: 9F9FD574758811EA93AADD3FC4F9AE02.roa (hash: pKr8yU46bzkgepRuOhx0qrjQP+ajOBOvuvImXMjNl5M=)
                          3: 2F5ED8E43E1711EA9A272644C4F9AE02.roa (hash: PFnTC09cAoqCoBorNAGMNJ3mW6exO1vhuxEz+nu9KcI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl
                          rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3087 (0xc0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B171C, serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
        Validity
            Not Before: Jul 28 19:06:45 2026 GMT
            Not After : Aug  4 19:06:45 2026 GMT
        Subject: CN=6a68fdc6-0abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:0f:fc:0e:e3:ae:74:3e:6b:43:5a:ed:9d:
                    3e:23:03:7a:95:32:08:b1:23:88:bd:80:28:44:93:
                    96:ca:80:df:cb:d1:a2:c9:69:4c:20:e0:76:fd:04:
                    87:df:b9:30:67:bb:91:d8:96:00:cf:08:f4:7a:89:
                    2c:92:e3:2a:bf:25:db:5f:eb:97:57:46:c9:ac:11:
                    1d:23:60:59:64:1f:8a:ec:6f:84:7a:d7:84:89:cf:
                    1d:b8:a9:62:94:a3:5e:ed:c9:bd:79:1b:49:c6:2e:
                    f6:d9:f2:93:ad:22:37:c4:30:35:08:3b:c7:8a:a9:
                    90:b4:65:00:87:2b:28:36:18:75:cf:23:5f:6d:b1:
                    93:66:a0:f3:43:92:f0:c6:7a:38:9f:87:3a:87:9c:
                    69:ee:76:58:f0:b7:83:28:c2:b2:cc:18:a3:18:bb:
                    a8:d5:99:f6:83:4a:9f:a5:14:95:a9:ac:48:b9:d9:
                    de:73:c6:b8:56:e5:a3:a0:ab:dc:3f:56:da:b2:ba:
                    79:34:a8:bf:51:e8:c5:d1:be:ea:e0:be:1b:c6:b7:
                    e3:20:d5:5d:1a:5c:74:27:ab:39:de:db:4f:a8:97:
                    6c:db:1c:60:92:d3:14:8b:f4:12:6a:c5:0e:2b:f0:
                    74:a3:b4:a1:74:d6:96:16:a3:72:c8:df:18:11:52:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C3:2D:8B:B5:50:AC:21:26:B4:33:2B:06:3E:6B:B4:D5:AD:E9:33
            X509v3 Authority Key Identifier:
                keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:b5:17:78:f5:46:db:5d:ab:2c:50:97:8b:da:9d:0c:91:
         87:50:0e:c6:6d:7a:ac:7c:6e:c0:ac:da:83:39:1e:13:00:eb:
         72:a4:84:d1:38:b6:75:80:c1:70:b1:28:16:3b:33:2b:78:c9:
         cb:08:45:49:14:b3:68:2f:c3:16:21:20:6d:a7:e3:79:14:27:
         23:bc:cd:c1:fa:5b:83:f9:0a:ec:23:9d:6b:78:92:cc:e0:73:
         60:81:eb:96:47:92:9b:63:87:00:61:f9:f2:56:17:70:ae:a4:
         71:5f:36:19:65:1d:bc:41:5e:a9:9e:43:69:e8:a1:16:a5:70:
         9c:48:15:6c:9f:7c:b3:06:89:46:0d:2c:11:70:d5:23:41:df:
         19:f3:2e:96:f9:30:cf:85:3d:20:72:78:06:63:63:92:ae:60:
         62:59:27:c6:36:c8:a1:18:e9:51:e4:9f:89:ca:de:c6:b2:21:
         5a:54:5f:41:82:a6:df:6f:f7:69:06:56:58:10:ea:3b:ed:07:
         e8:0c:70:58:03:ef:3d:7a:90:92:43:0d:57:ef:f0:de:4e:68:
         c3:e1:e1:b6:e9:bb:1b:83:ef:70:2c:d6:74:85:50:1f:07:8a:
         a5:f4:79:93:4c:5b:0b:d7:60:89:e1:70:ea:4e:ef:de:68:c1:
         67:2b:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:48:56 2026 by rpki-client