Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
File:                     7TFghH3ErtktjFnRmEZbHL7y3yI.mft (raw, json)
Hash identifier:          TXhDZD6aXe+eotfRU0r2nqjNgWcfituT96ucd9/TvZw=
Subject key identifier:   5B:CE:B7:B7:FA:CB:FB:8F:29:F3:41:FC:23:CD:97:62:0A:78:5B:6D
Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22
Certificate issuer:       /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
Manifest number:          018E
Signing time:             Mon 27 Jul 2026 06:09:40 +0000
Manifest this update:     Mon 27 Jul 2026 06:09:40 +0000
Manifest next update:     Mon 03 Aug 2026 06:09:40 +0000
Files and hashes:         1: 7TFghH3ErtktjFnRmEZbHL7y3yI.crl (hash: PavSzYbQzOTTTjkGgFLAAR23snMyXrJ7ikY4jAwspYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl
                          rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
        Validity
            Not Before: Jul 27 06:09:40 2026 GMT
            Not After : Aug  3 06:09:40 2026 GMT
        Subject: CN=6a66f624-3b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:82:b5:dc:99:e1:ec:20:ea:6e:a9:55:dc:
                    79:f6:aa:ed:46:ed:01:27:68:88:e8:da:58:3e:90:
                    a1:ef:62:69:89:66:03:a4:f8:c9:c8:6a:d5:3d:f1:
                    11:21:5d:64:38:af:02:14:ea:29:00:91:27:b3:63:
                    49:3f:5f:f1:ab:2d:da:0d:7e:e7:37:5a:69:fc:2c:
                    e2:0b:bd:6d:ce:ff:5a:a4:bc:23:97:55:ce:a2:c8:
                    6e:e2:35:a1:41:e7:6f:ff:19:fa:7e:f1:ff:c1:6b:
                    de:5c:23:e1:15:27:9d:7c:f2:57:db:0f:e8:63:a8:
                    c3:97:ed:a6:e2:12:62:26:8d:b4:be:cc:34:0a:b5:
                    59:c3:12:3b:c6:28:01:65:7d:66:78:a6:da:23:a8:
                    c9:e3:c6:42:02:48:f7:df:1f:2d:2d:96:c6:b4:6c:
                    6a:57:78:be:5d:d1:50:ec:d1:64:60:f0:4b:31:32:
                    29:fd:11:28:6c:0e:24:03:da:b0:25:6d:41:16:8f:
                    93:39:24:63:a5:78:fd:6d:ae:f6:31:cd:58:5d:a8:
                    8f:65:70:40:a8:f4:c3:8d:38:8a:c8:a7:f6:63:76:
                    ad:e0:50:22:70:76:e8:9f:d9:d4:e2:41:84:44:b9:
                    15:3c:74:55:7a:ea:a5:8a:d8:0a:82:cf:a1:e9:1d:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CE:B7:B7:FA:CB:FB:8F:29:F3:41:FC:23:CD:97:62:0A:78:5B:6D
            X509v3 Authority Key Identifier:
                keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:40:4a:fd:6b:a4:2a:15:69:1c:72:ca:27:b5:98:cf:70:
         10:8a:80:b7:14:13:f4:47:e8:07:02:ea:8a:b7:10:89:6d:8b:
         b9:90:1f:d2:da:b5:c4:13:8f:51:11:42:cf:8a:72:71:24:48:
         bb:1c:63:2a:91:be:25:30:e9:a3:54:84:2b:83:53:1f:74:61:
         79:69:cc:b4:03:b9:e2:14:32:cd:a3:a1:36:ab:c0:c9:27:62:
         1a:9e:44:58:c7:fb:8e:f1:8f:f4:5e:39:d7:7c:f0:5d:8e:92:
         e1:a7:b2:65:89:2d:96:76:91:91:56:22:11:be:cf:7e:42:39:
         5a:00:43:2e:d5:6a:72:3a:1f:f3:27:e0:9f:8a:88:2a:a6:9a:
         41:70:a9:a7:bb:16:b6:82:da:c9:14:c9:60:7a:b4:ed:43:14:
         44:12:a8:53:db:2d:15:0e:7d:a8:40:98:dd:18:9a:0f:6e:d4:
         7e:65:12:26:89:33:f3:61:b4:9b:79:0a:49:07:e6:ad:22:ad:
         98:12:6e:c4:38:49:0c:07:b0:81:a8:aa:93:1c:af:e3:a9:45:
         dd:24:26:a2:22:af:1f:2f:bb:e2:c1:fb:8e:30:58:43:eb:80:
         22:20:25:e6:64:c4:32:be:06:3f:d5:e1:ff:78:73:00:73:dd:
         9f:3a:bf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:31:43 2026 by rpki-client