Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
File:                     l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json)
Hash identifier:          H6zzX5YbCVWkyeeaCeG8Zm2Q/rlmCrz1+V++pbR5b8A=
Subject key identifier:   18:D0:AB:26:38:05:B9:85:09:AE:A1:0F:3A:11:79:26:A4:D9:C7:52
Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
Certificate issuer:       /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Certificate serial:       0C2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
Manifest number:          0C09
Signing time:             Tue 28 Jul 2026 19:05:28 +0000
Manifest this update:     Tue 28 Jul 2026 19:05:28 +0000
Manifest next update:     Tue 04 Aug 2026 19:05:28 +0000
Files and hashes:         1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: zPqi3zZuD2nylVOHKiGiCyLb9YT786fhSkb+NR0qJPs=)
                          2: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=)
                          3: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
                          rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3115 (0xc2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
        Validity
            Not Before: Jul 28 19:05:28 2026 GMT
            Not After : Aug  4 19:05:28 2026 GMT
        Subject: CN=6a68fd78-950c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:4d:e0:30:28:22:d3:b8:54:38:65:1d:71:
                    d1:21:11:a7:36:11:a3:cb:45:41:00:89:2c:ec:bb:
                    16:36:cb:08:51:f6:99:d9:3f:bb:5e:29:57:a7:73:
                    b9:3b:2f:28:af:3d:99:01:53:ab:ff:76:d6:5d:54:
                    f0:12:e7:c4:d7:61:ef:40:dc:f7:d5:c7:e3:14:dd:
                    5f:be:56:12:c8:ee:6d:3d:b6:32:be:d3:22:b9:ca:
                    c5:0f:d0:c4:28:52:42:da:2a:41:ae:a9:42:5b:9e:
                    2f:96:98:b9:ef:26:d8:6c:c7:a3:a8:cf:c9:6e:62:
                    0d:b4:d6:55:50:b8:fe:37:f4:08:ca:86:c6:c8:0a:
                    86:66:65:20:33:c4:1b:4e:28:3e:96:13:36:a8:15:
                    2a:be:5f:64:f7:26:f6:89:4f:a9:32:18:3f:b5:b4:
                    fa:ac:f4:7d:a5:26:16:a2:d6:c5:8f:f2:fb:98:83:
                    09:18:85:8f:0b:e9:3a:89:76:28:5e:9d:b8:56:6b:
                    c1:71:73:36:d3:02:15:55:97:95:6a:23:df:7f:63:
                    c1:3a:c6:2c:d2:b0:8f:95:0c:6f:53:59:2d:c8:6f:
                    42:b0:60:fd:60:c8:87:99:47:e3:c4:76:e7:d6:fa:
                    13:e3:7c:39:18:bd:86:54:20:67:68:f5:50:ab:fe:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D0:AB:26:38:05:B9:85:09:AE:A1:0F:3A:11:79:26:A4:D9:C7:52
            X509v3 Authority Key Identifier:
                keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3b:19:21:56:33:4c:ac:cf:d2:a1:da:e2:d0:20:d3:3c:39:
         c3:24:70:2a:c4:03:1c:98:c9:0d:22:93:1c:25:9f:47:8e:1e:
         d7:ef:2c:40:eb:d2:ca:5c:32:98:c7:3e:0e:3b:e0:a4:1f:33:
         c7:65:a8:9f:04:cb:ee:bc:eb:87:5f:eb:2c:d9:c6:76:d8:e2:
         84:d2:ee:73:27:ce:63:c3:06:2d:33:aa:3c:50:2f:5b:3d:74:
         c5:6f:a7:6e:47:a1:7c:7c:37:98:8d:7e:8d:51:25:6c:27:87:
         f3:9d:7b:f3:46:be:41:9e:35:8b:4b:78:99:a6:0c:16:9b:32:
         8d:bd:06:08:e9:a3:e9:e2:03:f3:d0:0a:48:51:fa:ae:d1:cc:
         85:72:fc:1e:78:90:74:88:9d:5a:98:86:7f:35:79:79:d2:85:
         af:58:62:72:d9:8d:a1:eb:01:d8:56:f6:97:9b:6f:17:61:61:
         5b:1a:ab:29:69:ff:d5:6b:c7:5a:99:d6:65:6e:bb:0e:76:a6:
         fd:5a:93:c3:6b:4b:b5:76:e7:6f:36:d1:bd:62:eb:72:f8:38:
         58:29:54:03:5b:ab:d7:bd:ea:e1:95:16:4d:ca:2d:d5:1a:a7:
         6b:3c:ec:81:d3:ab:0b:96:ee:16:48:88:99:09:98:c4:ed:01:
         aa:0a:63:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:24 2026 by rpki-client