Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File:                     7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier:          kkKKOce8rPlg9WB7/TQDrB5L5wQbEL9Ku8mc73l/kc4=
Subject key identifier:   87:AA:65:0E:95:C7:80:82:64:DC:ED:3F:2E:3D:A2:E4:52:DE:F7:C7
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer:       /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial:       0BFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number:          0BEB
Signing time:             Tue 28 Jul 2026 19:13:01 +0000
Manifest this update:     Tue 28 Jul 2026 19:13:01 +0000
Manifest next update:     Tue 04 Aug 2026 19:13:01 +0000
Files and hashes:         1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: d3nccbCnjkaZp+DM11Mklw1rn0usvg79JsaaOTobPlA=)
                          2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3069 (0xbfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
        Validity
            Not Before: Jul 28 19:13:01 2026 GMT
            Not After : Aug  4 19:13:01 2026 GMT
        Subject: CN=6a68ff3d-eb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:c1:c7:d1:13:88:6a:df:89:93:41:fd:19:
                    46:84:f4:d3:37:81:0f:87:6a:33:f6:a3:83:fc:d2:
                    ed:fe:05:2b:08:48:f4:6b:96:f1:20:70:3b:77:9a:
                    a6:ba:4a:83:5b:f9:ba:29:34:e8:14:d4:ac:52:8c:
                    99:2a:85:38:56:37:3b:36:05:8d:24:9c:c7:76:04:
                    59:2a:fa:0e:73:f8:19:73:d6:a4:d9:b0:91:cd:14:
                    75:fc:5e:98:11:4a:ad:06:1f:17:81:9c:a3:87:df:
                    0b:74:cb:1b:77:42:d1:7e:dd:00:d1:f0:88:0d:d9:
                    b5:4d:58:05:e1:ea:71:af:da:78:94:35:65:45:5d:
                    5b:3a:2a:31:5d:94:1c:b0:cb:6c:0e:99:cc:3a:d0:
                    10:5b:70:9c:e5:82:f7:1b:ec:97:75:54:e8:63:f3:
                    13:64:20:3c:01:b1:3e:b8:48:6e:05:c6:69:bd:36:
                    5a:83:48:2c:86:d0:7c:35:89:0f:46:08:cf:ba:2d:
                    13:af:97:d1:d1:0f:54:65:f8:4a:6b:73:0e:29:1b:
                    11:35:29:49:08:b9:23:c2:83:d9:5d:62:46:42:f0:
                    e9:97:29:e1:43:73:03:2b:8e:a6:dd:34:49:3a:c8:
                    6c:89:31:ae:a1:fb:ee:48:4a:ca:18:02:df:77:55:
                    79:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AA:65:0E:95:C7:80:82:64:DC:ED:3F:2E:3D:A2:E4:52:DE:F7:C7
            X509v3 Authority Key Identifier:
                keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:69:a8:f1:03:c0:b4:87:3d:73:67:17:ee:97:61:96:9f:34:
         8f:20:cf:09:de:00:34:d5:dc:19:59:ff:47:ab:29:24:55:eb:
         97:38:65:bd:fe:41:0d:e7:d8:b2:f1:9d:9e:2e:20:43:1e:0c:
         b1:45:b8:8f:91:e0:54:c4:d0:c4:04:5e:b7:c0:9b:ca:11:d5:
         f6:ba:bd:ec:fd:43:23:5c:c9:de:ce:ba:7d:d3:01:ca:05:c9:
         aa:9f:20:41:20:ec:a4:1f:33:c6:a6:29:ec:ab:c2:ab:13:94:
         89:26:bc:7c:56:2a:78:50:37:6b:24:14:83:2b:f9:a7:4e:56:
         18:3b:33:ba:89:5a:e2:99:e3:9e:71:9d:e2:6b:be:79:ab:57:
         c3:a9:5e:61:51:d1:ac:9a:4f:2b:d4:c7:10:f0:ab:b9:8f:a8:
         bb:98:6c:62:2b:82:18:19:7b:a1:26:83:b0:f2:d3:1d:cd:af:
         8f:53:b5:7a:25:67:8f:58:e6:1c:66:5b:ab:2c:3d:4a:e1:cf:
         ff:8a:14:44:6c:87:39:5a:a1:ba:f4:b7:a1:1f:2b:d2:93:c2:
         fb:a3:3b:31:1d:32:72:ae:9d:2d:d5:56:78:95:3d:bf:51:9f:
         b2:be:bf:3a:09:59:47:d3:e4:4e:8e:31:e3:c1:63:3e:79:e7:
         48:41:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:33:20 2026 by rpki-client