Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
File:                     e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json)
Hash identifier:          3i0EFKatQD5rw+DogoY/8AM9vt2Zi+HNlRNJ7L91w04=
Subject key identifier:   40:26:56:12:88:D7:FA:60:2E:BE:F0:9C:1F:22:25:AF:80:56:AF:52
Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Certificate issuer:       /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
Manifest number:          7F
Signing time:             Wed 29 Jul 2026 09:14:15 +0000
Manifest this update:     Wed 29 Jul 2026 09:14:14 +0000
Manifest next update:     Wed 05 Aug 2026 09:14:14 +0000
Files and hashes:         1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: tZfNQJtkQ+PAkopNSWE/Sbv3rOb226t0ZIt5uiIHE8o=)
                          2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: CPLpp/+FM2b54xSn6vuECW27aWUXXJQyS5P46Daeh1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 09:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
        Validity
            Not Before: Jul 29 09:14:14 2026 GMT
            Not After : Aug  5 09:14:14 2026 GMT
        Subject: CN=6a69c467-fbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:3c:a7:f2:1b:fe:d5:47:bc:6e:a4:41:4c:
                    ac:74:c5:b0:5b:16:16:c7:15:1d:8f:55:d2:d0:59:
                    43:8d:3d:28:dd:82:4a:60:d6:4b:71:93:9d:00:00:
                    0f:16:4d:dd:d3:b5:0d:46:81:fd:1c:23:5f:7f:c0:
                    c4:68:71:4d:97:0e:c4:f4:34:54:1a:38:94:d7:36:
                    72:c5:4b:f4:58:ab:0b:2c:df:d5:02:40:05:c3:ee:
                    6d:75:4b:a5:83:cc:57:8d:f9:84:03:97:38:90:7c:
                    2b:8d:2c:83:c9:63:f0:38:77:e5:06:f7:b5:0b:ed:
                    e1:3d:81:a8:84:23:46:30:d0:51:0a:0a:2f:27:68:
                    b2:d8:4a:39:07:06:d9:c6:01:58:3c:29:2c:18:8e:
                    92:f0:66:a1:1d:8a:cb:7a:4a:22:cd:4b:dc:e0:ff:
                    7b:a0:0b:61:d4:a0:8d:d3:c5:7c:8f:22:1d:d7:4f:
                    ff:5a:fe:f3:12:10:11:02:0a:5c:bd:64:92:ce:8c:
                    7c:f8:67:cd:5d:83:da:10:ef:52:b6:74:69:0f:39:
                    7f:01:b1:73:3d:77:a8:0e:c7:6e:ff:03:2a:e1:b3:
                    c8:35:48:61:de:9f:c2:ef:92:d2:82:ec:73:02:e3:
                    a4:85:f9:75:5b:22:48:95:c9:e2:7b:37:d2:fc:ff:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:26:56:12:88:D7:FA:60:2E:BE:F0:9C:1F:22:25:AF:80:56:AF:52
            X509v3 Authority Key Identifier:
                keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:3e:3e:a4:5d:fa:6a:08:3c:0d:5c:4b:16:f3:85:99:72:
         44:55:f4:67:be:22:45:f4:bc:b5:d3:2f:0c:e4:33:92:e9:7d:
         ca:19:7a:f8:36:b5:0d:26:38:a3:1a:9c:03:e0:13:f6:f1:84:
         b1:3b:30:a4:c0:f5:72:ac:bd:f1:70:2d:fb:39:a5:79:4b:3d:
         03:a7:a8:04:c9:08:74:e8:e9:e8:ca:71:1f:db:26:aa:31:6f:
         a1:78:5a:ad:97:e4:3d:b0:18:ca:9e:a1:72:d7:ed:d8:84:e1:
         3a:a1:ea:94:b2:a5:7f:4b:98:5d:0e:c3:18:9b:b1:eb:23:4e:
         3e:66:fb:ad:02:e6:e9:fa:e9:35:d8:94:ff:4c:b9:27:45:11:
         4a:65:80:41:46:a2:46:4d:d2:57:9b:41:ac:1a:b7:0b:28:74:
         23:cc:a7:70:33:f4:3a:4f:ca:80:c8:3f:2f:54:d7:68:4b:78:
         22:98:57:f1:c7:fc:c8:40:82:fa:9d:dd:47:42:16:3b:96:14:
         25:06:03:06:d2:b7:1c:96:fe:55:77:84:18:20:3d:a3:df:08:
         5f:18:8b:ad:8e:f2:42:11:a4:b9:f3:af:ae:57:77:57:42:34:
         25:6e:63:58:c5:03:c6:d3:f3:81:ec:d9:98:8f:60:9b:a8:b7:
         c7:c7:84:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:12:51 2026 by rpki-client