Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File:                     X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier:          2kF2VvfnkxyrkKqgR9h2pA8I7aUpxLDpDwWp2XMECJA=
Subject key identifier:   C9:0A:E1:59:39:AF:AC:1B:40:D1:68:2B:3F:2F:F2:94:C3:E1:CA:6D
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer:       /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial:       1F15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number:          1E82
Signing time:             Tue 28 Jul 2026 16:10:14 +0000
Manifest this update:     Tue 28 Jul 2026 16:10:13 +0000
Manifest next update:     Tue 04 Aug 2026 16:10:13 +0000
Files and hashes:         1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: xfQpGz2dbbfgyW4MWFFaOx101go2dNx657ZY/SosmkE=)
                          2: CD420BBC86EF11F19E006003A7EE528E.roa (hash: prjxQAidgmq4bIL41IJPb4DemAHY/2tYmvyzka4GluM=)
                          3: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
                          4: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
                          5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
                          rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7957 (0x1f15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
        Validity
            Not Before: Jul 28 16:10:13 2026 GMT
            Not After : Aug  4 16:10:13 2026 GMT
        Subject: CN=6a68d465-1fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:93:06:ae:57:e5:ce:36:b4:b4:e6:e4:87:db:
                    14:52:1a:08:77:70:ab:ce:c8:60:d3:dd:b7:a2:53:
                    49:75:83:9a:04:31:c6:16:f8:7c:ab:38:e0:b6:c9:
                    17:e9:1e:f5:fd:19:89:8d:d5:46:ba:28:8b:a1:62:
                    6f:26:1c:4a:2a:df:74:e1:f0:83:82:11:21:0f:bd:
                    79:21:18:13:97:fc:56:ab:af:7a:c2:64:a5:ab:16:
                    e9:bb:8b:17:78:e9:c9:49:5a:f6:41:5b:e5:50:97:
                    5d:cf:4a:7c:d0:4a:fd:44:27:f2:c5:2e:dd:1f:19:
                    ee:4f:98:37:cf:5f:fc:7f:1d:3a:57:f1:45:7f:f6:
                    8d:6b:57:53:a7:73:ab:cc:c1:69:95:9b:bd:94:c2:
                    f1:75:a5:99:79:3f:bb:a7:47:59:ff:66:87:2e:b1:
                    2d:14:82:fb:9b:3c:9f:11:9d:72:36:0c:4b:da:46:
                    17:e6:51:47:35:d4:12:07:23:62:0c:7c:b2:c7:3c:
                    f8:a8:e2:b1:89:b5:28:7d:cb:3c:c9:37:6e:70:39:
                    a6:2f:08:c8:f5:84:8b:79:2a:35:cf:f4:32:f2:82:
                    3a:e3:0c:19:d8:94:10:2d:f3:d7:1c:39:aa:84:1b:
                    57:77:3e:2e:fd:b4:80:39:0b:e2:51:2e:41:42:97:
                    c1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0A:E1:59:39:AF:AC:1B:40:D1:68:2B:3F:2F:F2:94:C3:E1:CA:6D
            X509v3 Authority Key Identifier:
                keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:51:f2:f7:5f:fb:8f:a2:7c:b7:d5:7d:7a:ed:c6:8b:d6:
         81:e5:6d:66:a9:70:42:e8:05:47:6c:d2:dd:26:78:42:04:b7:
         a2:b6:de:11:bd:dc:e8:6b:63:4b:14:dc:38:84:01:b1:3c:c0:
         6f:5d:ef:27:93:40:53:f1:84:38:9f:a6:e9:3c:ba:be:4f:d8:
         1b:df:39:7a:90:c2:16:ae:1b:9e:76:fe:dc:62:4d:dc:5d:b6:
         aa:ce:a9:2f:04:47:3f:62:da:d9:32:10:38:fb:f3:7d:17:b2:
         e6:1a:65:3e:8f:4b:52:53:2a:d0:05:b5:f5:22:6e:dc:fc:78:
         8c:cc:82:67:52:67:2f:a3:19:d1:d0:ea:6b:f6:f9:b8:2b:f1:
         af:15:1a:7b:a5:e5:5a:99:89:b6:86:ba:7a:3e:72:b8:8f:bb:
         d4:26:fe:9d:e9:b3:ad:45:6e:0c:83:b8:c5:db:6a:2d:0c:64:
         ef:b4:47:d9:c8:03:86:2e:7b:96:0d:ae:5a:f0:57:52:3e:83:
         42:2f:10:31:aa:71:fb:43:66:42:b1:51:76:0a:a3:26:97:14:
         1d:a6:d6:8b:6a:bf:9c:cf:89:8b:29:8e:79:af:e7:27:b7:67:
         14:7c:da:00:36:d4:ba:39:d0:f9:0a:50:db:2d:65:d6:42:59:
         3f:9f:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:52:41 2026 by rpki-client