Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
File:                     7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json)
Hash identifier:          rqWMHVM1oa6M2WaqGMHLdcT0eeVHXJRGIAxqgBVnsgE=
Subject key identifier:   F3:EF:19:7B:1B:ED:FE:D3:37:7D:A3:1E:96:89:DA:32:81:21:FF:25
Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
Certificate issuer:       /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
Manifest number:          B1
Signing time:             Mon 27 Jul 2026 09:15:35 +0000
Manifest this update:     Mon 27 Jul 2026 09:15:35 +0000
Manifest next update:     Mon 03 Aug 2026 09:15:35 +0000
Files and hashes:         1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: uRILlfStLup+3wQ3lYQPCau3tB1HJVkTzAPzAxAezSo=)
                          2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: HxCACU6dtVJKQL4jCvo8QQmANlxdh6BLrwvzeSETm8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
                          rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
        Validity
            Not Before: Jul 27 09:15:35 2026 GMT
            Not After : Aug  3 09:15:35 2026 GMT
        Subject: CN=6a6721b7-b091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:c8:2d:c0:82:a6:48:f9:8c:c3:ed:38:10:
                    ed:a3:3d:61:ca:b6:4f:07:62:12:d9:64:d6:e7:98:
                    19:fe:0a:b3:cf:31:7c:d2:a3:ed:d3:0d:3e:2e:9d:
                    31:74:eb:af:e1:69:c0:d4:56:c9:b2:9b:46:65:2b:
                    40:44:00:bf:f4:ac:97:a6:2f:ad:47:00:0b:0a:31:
                    63:51:a9:26:48:c7:1b:cc:73:fc:10:1a:de:85:99:
                    71:cb:e0:cb:db:15:a2:a9:b5:eb:f9:3b:a3:65:44:
                    74:3e:ea:67:d4:19:bd:23:d5:d1:ce:93:f2:11:bc:
                    33:56:95:58:1d:52:ab:2f:a6:65:38:03:cf:03:a6:
                    5f:d7:1c:17:20:b9:54:eb:d2:74:fa:c8:68:a6:e1:
                    e0:1e:45:6f:98:6d:b2:06:b8:72:02:b3:d6:5d:9d:
                    bd:9d:93:26:e8:bf:90:e1:35:39:c4:7d:b9:5f:97:
                    c7:b8:31:c2:42:55:24:26:bf:7a:88:24:fd:48:e6:
                    a4:e1:ac:46:1d:01:2e:81:a4:b1:87:da:d2:a7:89:
                    a3:7f:9f:7a:7d:15:c6:ea:7d:80:72:d0:f2:13:c0:
                    4b:b6:e7:8d:a2:e9:11:96:9d:59:cd:b2:6e:8d:a4:
                    e0:24:74:3e:e7:51:a0:3e:59:16:35:96:61:57:1d:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EF:19:7B:1B:ED:FE:D3:37:7D:A3:1E:96:89:DA:32:81:21:FF:25
            X509v3 Authority Key Identifier:
                keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:53:37:c9:1a:6a:28:45:d7:62:6b:00:81:db:bb:20:6e:70:
         2d:9b:d8:39:fd:aa:99:f0:df:25:18:81:23:ca:bc:73:34:19:
         56:e4:1a:74:fc:60:cd:3c:b9:b1:4b:62:97:27:70:9f:10:d1:
         08:c0:b1:1f:6c:3a:32:70:c1:67:ec:2c:ae:9e:db:1b:da:9a:
         89:47:23:50:45:21:52:71:16:be:86:07:0a:10:5c:fc:38:d1:
         97:10:c0:b8:b4:3e:c5:fd:ac:b6:1c:fe:12:66:51:34:96:0a:
         be:c1:d3:fb:e2:b9:c7:e9:2a:f9:81:4d:39:09:9a:d9:30:ac:
         b4:9b:df:d3:c9:76:6d:af:ee:77:ee:de:da:a3:c1:28:ef:aa:
         61:66:40:01:e9:aa:c7:fb:d9:ad:30:99:90:3d:12:16:6c:3f:
         e4:8b:91:03:cd:7f:44:d4:6f:e4:9c:22:95:e0:2f:9b:54:81:
         37:c3:8a:98:b1:d3:64:78:fd:3f:d9:4b:02:9c:3c:77:d0:ae:
         96:cc:23:80:bf:23:e4:bd:68:07:fd:fa:34:ba:4e:d0:5f:6b:
         dc:94:10:09:7a:24:0d:07:4a:5b:92:f3:71:9e:2b:d5:3b:b5:
         0e:f1:a1:9a:99:d5:4e:76:bd:0d:d0:6e:e3:9a:a5:28:5c:9f:
         af:37:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:52 2026 by rpki-client