Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
File:                     P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json)
Hash identifier:          AF9FX19GnyK5LLfBfEeRSUBkSrexVCjS4lu2Ke4ucXw=
Subject key identifier:   FD:37:A7:9B:0E:2F:3B:4B:43:71:3A:61:C6:53:43:AA:8C:D6:20:16
Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
Certificate issuer:       /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Certificate serial:       18A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
Manifest number:          188A
Signing time:             Tue 28 Jul 2026 16:35:29 +0000
Manifest this update:     Tue 28 Jul 2026 16:35:28 +0000
Manifest next update:     Tue 04 Aug 2026 16:35:28 +0000
Files and hashes:         1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: 23axpRvCX1QAqyVAa9q/scNktDO+WISKnbSPOh6i2hA=)
                          2: 9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa (hash: 1b/fr6wNwvJibWfsmHfs3HnHHQMNJqFyMRfvdbN6JHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
                          rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6312 (0x18a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
        Validity
            Not Before: Jul 28 16:35:28 2026 GMT
            Not After : Aug  4 16:35:28 2026 GMT
        Subject: CN=6a68da51-d8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:60:10:0f:ca:87:a1:e2:0c:ba:d8:45:53:
                    d0:be:1a:10:d0:2f:e0:68:10:db:76:bd:5e:31:22:
                    5a:49:de:c6:ae:4f:b7:d5:d8:e2:06:89:cd:0b:d4:
                    db:bc:d8:14:18:be:13:a1:9b:b5:50:b9:eb:e4:30:
                    fa:8e:f8:b5:61:45:da:42:62:42:16:2d:15:55:08:
                    0c:ad:99:8d:d6:32:f8:0e:a9:14:0e:f9:28:f2:4d:
                    e7:74:80:38:dd:d7:0f:3f:aa:a3:71:eb:13:6d:74:
                    3e:05:15:88:a9:c2:5f:d9:6a:16:9d:74:75:f5:83:
                    08:12:8b:bf:b6:3e:9b:35:09:17:f9:2b:8c:ae:3d:
                    1f:cd:bc:85:4f:2d:0e:61:0c:e9:f8:b7:6b:b5:4d:
                    0d:95:fb:23:58:b0:87:25:4d:02:57:a7:bd:b9:75:
                    eb:db:81:30:28:f9:29:0b:df:96:c4:b2:72:dc:58:
                    a4:fc:e8:28:26:e8:04:76:60:c8:11:32:85:96:54:
                    d4:d9:ca:4b:ee:80:64:22:5e:14:26:43:fc:d3:56:
                    7c:3e:57:4a:5d:20:39:58:5b:ba:cb:39:e5:b4:a8:
                    73:b6:ec:40:e7:18:11:e4:17:c0:98:25:e7:98:21:
                    d1:ac:26:35:70:29:f1:11:36:34:7c:50:14:db:28:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:37:A7:9B:0E:2F:3B:4B:43:71:3A:61:C6:53:43:AA:8C:D6:20:16
            X509v3 Authority Key Identifier:
                keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:49:33:96:d4:a5:8c:1d:2a:d0:08:e2:a7:b8:cc:9f:de:2b:
         e6:f2:57:15:aa:1d:86:c0:0c:09:16:4d:e2:bb:31:9f:b9:86:
         17:c4:4a:85:50:4f:d2:c6:a2:d9:5c:cb:1c:6a:fa:33:30:86:
         1a:61:94:cc:8b:be:c3:4f:83:21:f5:05:26:ec:88:52:48:ab:
         44:8a:8f:7e:b0:cf:83:b9:25:5f:4f:ac:f8:9e:9a:c6:61:33:
         ef:87:e1:95:48:44:b0:d7:92:7e:6f:8c:56:ef:36:2b:b6:93:
         c5:4e:ce:9c:68:14:a5:23:5b:45:59:64:fa:10:63:31:37:fb:
         7b:f6:d7:7b:9d:2c:65:21:22:d6:9d:53:98:f9:0b:15:ea:2e:
         a8:9d:e7:e2:d0:1c:15:9b:e9:c6:14:c1:90:74:8c:76:98:b1:
         f0:65:7a:3f:12:cf:0e:f0:7a:c8:c9:3a:fe:79:9c:0e:12:99:
         c6:c9:fa:3b:7f:00:8d:c4:0e:63:14:1c:c1:26:83:c1:7e:c9:
         aa:98:22:b6:80:c3:a7:68:1d:35:b6:8d:0b:a7:6b:5c:ee:9c:
         0c:15:62:8d:b7:b5:40:3d:db:ca:4e:93:1b:eb:53:4c:cf:e8:
         9c:ef:12:53:c9:c0:ed:df:d3:ad:b2:20:63:c5:88:59:6c:88:
         85:d8:73:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:01 2026 by rpki-client