Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
File:                     s-7PFnJWFEpGodq0i4CA15DSBDw.mft (raw, json)
Hash identifier:          UQ8/VvDzgvEG5A6TN3/FDujreLF6RyXa3n0BV9IPP/4=
Subject key identifier:   42:4E:CF:BA:2C:92:B3:11:61:C8:10:AB:B6:C5:13:53:5B:91:91:BD
Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C
Certificate issuer:       /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
Manifest number:          BD
Signing time:             Tue 19 May 2026 06:48:34 +0000
Manifest this update:     Tue 19 May 2026 06:48:33 +0000
Manifest next update:     Tue 26 May 2026 06:48:33 +0000
Files and hashes:         1: s-7PFnJWFEpGodq0i4CA15DSBDw.crl (hash: R5P0dz2UCXl9S1gsenxtaGb0KKUPt6GLy065DrDtBdM=)
                          2: E32B7E6E348811F0ABE70D36C4F9AE02.roa (hash: bpsElpWAfttAlw1MU5HfRRt7txL5XI5CkjdzcBwhBVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl
                          rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 06:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C
        Validity
            Not Before: May 19 06:48:33 2026 GMT
            Not After : May 26 06:48:33 2026 GMT
        Subject: CN=6a0c07c2-23a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:f6:f8:7c:9c:25:95:91:5c:02:95:3d:0e:
                    60:25:7b:a9:a4:54:a7:84:80:d5:e5:ed:1e:63:df:
                    ce:c0:48:ae:27:0b:30:00:df:4c:e8:00:8d:2b:c7:
                    44:81:67:2e:45:bd:3d:65:f0:56:ec:9f:3a:6c:3e:
                    81:b1:fa:ee:66:46:2e:88:b5:50:a4:ec:b4:6f:44:
                    46:02:4d:59:d1:d5:5a:11:de:6a:30:85:3b:22:4a:
                    1f:d3:fa:dc:d0:a3:14:0c:c4:ca:cf:ae:74:83:7f:
                    07:6b:54:0b:86:f1:e2:8c:2d:90:e6:3c:7f:32:21:
                    25:eb:06:db:a1:a4:61:7c:f0:b3:2d:27:17:b3:5a:
                    67:00:33:d5:41:2b:46:d9:45:35:32:28:c2:f8:cb:
                    5e:74:e0:5b:b1:af:27:b4:d6:96:af:b9:08:4b:f0:
                    1c:f9:f5:29:ea:ef:0f:01:f7:11:20:08:33:54:7e:
                    d7:ed:f8:51:08:8d:c2:9e:eb:ff:11:57:d3:a6:79:
                    e6:30:10:d2:21:55:1e:82:ea:c7:5e:9e:cb:34:c1:
                    3a:e8:f8:bf:f7:d1:eb:bb:be:62:16:a8:ae:3c:d7:
                    4f:9d:c6:a7:48:9b:fc:77:8b:1a:e2:fa:51:00:b8:
                    5e:b6:23:10:67:3a:1b:90:59:87:11:8f:bd:5b:c2:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4E:CF:BA:2C:92:B3:11:61:C8:10:AB:B6:C5:13:53:5B:91:91:BD
            X509v3 Authority Key Identifier:
                keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:09:05:15:47:a7:ad:98:65:6a:24:63:7a:38:9d:4c:7a:9c:
         6b:2d:5e:37:e4:99:80:8c:73:18:e1:72:bb:73:b7:f5:79:ab:
         25:13:e2:d8:5f:48:bc:6d:d6:54:4a:59:b3:2b:12:2b:1d:e4:
         9b:de:bd:af:42:18:c3:25:ca:0b:48:4f:cd:37:1a:90:34:a0:
         68:df:d9:1d:77:b9:5b:da:a2:3e:0e:a2:51:f9:35:7b:43:68:
         83:1e:b4:d3:f9:83:ef:97:d1:b7:04:a7:de:2a:7f:86:88:99:
         4f:3c:3f:ce:84:e2:e8:9b:7f:22:28:6f:b1:06:61:87:54:56:
         99:65:ff:72:64:31:ea:3a:87:2f:d1:81:3c:98:0a:96:0d:4f:
         ef:af:90:7c:44:c1:25:5c:c3:2d:9f:74:20:1c:0e:11:1a:fb:
         af:10:86:07:c4:d9:e2:db:17:1a:c9:c9:d6:bb:15:3c:3b:f6:
         f4:bc:71:cd:33:29:77:13:1e:29:ce:46:86:66:59:71:b8:01:
         dc:45:7c:ba:49:be:ac:f5:33:6d:07:bc:fe:2a:88:b0:f4:ac:
         4c:5d:7b:e3:4e:00:c6:71:75:8f:83:d9:ef:a7:f8:c9:d5:1d:
         e3:9f:16:cd:61:95:92:ea:7a:09:28:de:72:26:18:76:71:66:
         9f:ee:6b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:57 2026 by rpki-client