Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
File:                     7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft (raw, json)
Hash identifier:          J7NaQam26VtVUeZ7blhPbc89mEJihKPFV0UId5asvnU=
Subject key identifier:   6E:C0:AE:73:F9:74:13:30:A4:42:F0:82:F7:23:76:3D:B7:26:EC:F5
Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
Certificate issuer:       /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Certificate serial:       0731
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
Manifest number:          0728
Signing time:             Sun 26 Jul 2026 22:44:42 +0000
Manifest this update:     Sun 26 Jul 2026 22:44:41 +0000
Manifest next update:     Sun 02 Aug 2026 22:44:41 +0000
Files and hashes:         1: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl (hash: 20DNkPjwZCRu4U0fo3b8AHxeUB0U5ZS9l1DYPQSs4ZI=)
                          2: 0665D2328D1A11EB80593760C4F9AE02.roa (hash: oswZbi98lBFbTOsN/D9Inuh/1yJOiKpEn94+Noc/S+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
                          rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841 (0x731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
        Validity
            Not Before: Jul 26 22:44:41 2026 GMT
            Not After : Aug  2 22:44:41 2026 GMT
        Subject: CN=6a668dda-dcb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:14:79:88:9f:3b:15:b6:2b:0a:29:7f:5c:
                    ee:a5:97:9f:ac:89:dd:e6:fa:fe:1d:af:25:e4:82:
                    e6:ec:f2:95:97:aa:d3:83:41:c2:67:ba:88:a7:81:
                    9a:3b:d6:b2:ed:28:71:bb:7d:6b:59:ce:a0:d4:a9:
                    a5:20:b3:af:d1:53:a8:34:ee:83:f3:6e:05:74:da:
                    41:a5:0b:13:94:94:bd:e6:c2:84:63:e9:43:69:6e:
                    1d:01:e9:ac:1f:fa:0c:d2:d0:1c:a3:5c:ff:38:53:
                    13:25:79:9c:09:ae:bd:60:9a:b1:7b:87:09:ec:17:
                    29:3a:f7:66:2e:af:75:d0:18:74:54:d7:81:f1:50:
                    8f:7e:bf:d8:65:24:72:fc:ab:0b:08:2e:bd:32:ad:
                    3d:b7:36:9d:54:4a:05:ae:e4:af:82:b5:86:4f:2f:
                    21:fa:c9:a6:0d:0e:4d:10:b2:b9:03:02:67:95:b3:
                    7e:8d:79:e1:8e:f3:2c:df:aa:f8:ce:61:cd:82:fa:
                    a6:72:9d:82:ca:66:6c:68:b2:e9:b9:0a:bb:60:08:
                    e8:a7:fe:73:f0:8f:bb:a4:be:bf:a8:e6:6d:2d:2c:
                    4a:8c:51:3c:c7:b6:b9:6e:e6:ae:21:8c:d1:11:ca:
                    a1:b7:ce:fc:70:24:6d:d7:18:40:01:39:df:c3:43:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C0:AE:73:F9:74:13:30:A4:42:F0:82:F7:23:76:3D:B7:26:EC:F5
            X509v3 Authority Key Identifier:
                keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a5:d3:e5:83:31:c8:3c:09:30:0d:55:da:d1:6b:02:43:5d:
         e3:ad:2a:8c:2c:19:c9:32:18:16:b3:6c:11:bd:39:88:55:4f:
         db:80:d8:95:99:14:d0:6f:3e:df:97:31:fc:a3:54:fa:93:3e:
         21:41:c7:bf:ae:d5:d1:a9:87:c0:e8:e9:73:e3:d7:6d:85:99:
         21:b9:42:9b:d2:2f:6f:a2:60:f3:9d:24:29:5a:48:7f:e9:f6:
         65:52:85:f6:75:7e:b2:3d:64:cb:7d:5d:21:66:3b:fa:7c:48:
         16:ec:69:dc:96:9c:38:4e:0c:b2:44:52:a9:72:2e:cd:74:d8:
         ac:51:45:10:d6:92:91:be:46:14:fd:6f:cd:a7:cf:1d:22:bf:
         75:4b:c1:93:8b:2d:ae:92:55:38:5c:7d:cd:4b:31:a1:c9:28:
         d9:ae:17:32:39:47:73:31:e7:9c:47:a1:e2:73:a7:a1:8a:6d:
         7c:b4:85:31:86:37:17:c8:fa:32:17:34:c3:ca:ec:2b:d7:04:
         f4:c6:9d:46:8b:9f:9e:b2:ab:60:df:94:b7:5a:af:bc:a7:c8:
         fd:d4:dc:96:83:7b:6d:f5:e8:96:24:eb:ce:d8:e9:71:35:b7:
         96:4a:62:b4:5d:49:11:98:a0:b9:83:ff:26:9e:22:d1:05:79:
         eb:2f:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:12 2026 by rpki-client