Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
File:                     -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json)
Hash identifier:          7h87yzVSw/pNk/ukpKWTKHTtE3QVZG5ICcXUEUVFBhI=
Subject key identifier:   A9:A2:09:F4:06:2D:8A:31:4C:88:80:82:50:A3:B3:E9:3E:0D:7E:62
Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
Certificate issuer:       /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Certificate serial:       0D3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
Manifest number:          0D0E
Signing time:             Sat 04 Jul 2026 18:29:52 +0000
Manifest this update:     Sat 04 Jul 2026 18:29:51 +0000
Manifest next update:     Sat 11 Jul 2026 18:29:51 +0000
Files and hashes:         1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: OF6lutRMxL0p2K8ySL99D7ZqADFnlKcda4feaxlJ93s=)
                          2: CB737E28422611F1882323FB8F833773.roa (hash: Sas3K0pNeR22zRvDEW+/zPRH6R1LCgFXxVnXBhEToJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
                          rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 18:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3388 (0xd3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1D5, serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
        Validity
            Not Before: Jul  4 18:29:51 2026 GMT
            Not After : Jul 11 18:29:51 2026 GMT
        Subject: CN=6a495120-0224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:eb:fc:68:c3:2a:6d:07:0c:0e:72:44:0f:96:
                    18:bb:e0:1b:b5:dd:a7:d7:75:f4:79:b7:f6:82:6a:
                    2b:ff:f7:04:af:96:23:68:c6:96:e5:62:f5:42:6b:
                    91:cf:ba:54:8c:d9:f2:29:62:1a:b8:2e:1d:fd:ce:
                    fc:fc:c0:b0:db:d6:11:15:5a:b7:29:18:25:ba:a1:
                    da:40:25:c0:2c:e6:5a:1e:8e:80:a4:c8:ca:b4:fb:
                    a5:e4:27:3c:36:61:ae:8b:97:2b:ef:5f:f6:e4:37:
                    e6:91:09:f0:18:b2:3e:c9:ed:0b:e0:fc:89:18:16:
                    5d:7e:f3:88:4d:2a:09:aa:c2:13:60:6b:76:09:49:
                    34:79:a7:d8:0e:34:dc:46:5a:cf:bb:62:71:5a:6f:
                    f0:b8:70:b6:52:89:d3:be:a4:2d:70:29:42:1f:78:
                    35:da:85:bf:be:75:b2:ac:cf:a6:45:7d:01:c6:a8:
                    b3:0e:ed:ce:3e:2f:60:9c:d6:f7:8e:57:67:2d:f3:
                    a7:23:c5:5b:c7:b4:8e:8d:b4:6f:d7:6e:1a:ba:e7:
                    21:b0:71:62:c1:8a:61:69:85:1e:45:86:2f:7e:89:
                    c2:47:fe:c9:05:f0:10:63:2b:06:fd:04:62:fc:fb:
                    39:8b:c8:e2:e4:76:4a:45:14:d4:5b:fc:6c:49:50:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A2:09:F4:06:2D:8A:31:4C:88:80:82:50:A3:B3:E9:3E:0D:7E:62
            X509v3 Authority Key Identifier:
                keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0d:9f:67:d6:81:a4:a1:91:3f:91:df:10:71:fd:9b:9e:c6:
         09:41:5b:52:ee:03:83:74:30:88:1f:e5:d1:ce:dd:79:f9:4e:
         85:ce:52:8a:6f:b9:8c:0b:f2:bd:18:30:db:27:9e:f8:c2:5b:
         e4:ce:aa:4f:12:8b:46:4c:1e:f7:9c:2a:37:1b:95:7a:6f:52:
         8f:1c:8f:29:43:7e:30:54:bf:6b:d7:ef:8d:c6:97:75:4c:79:
         51:34:c9:36:71:02:45:74:8e:68:8d:3d:85:06:36:93:96:ad:
         b6:97:28:59:d4:15:b5:61:27:fa:06:a6:5c:13:7c:3a:17:42:
         e0:20:25:f2:7d:a7:07:0f:ff:dd:ac:8c:2f:67:27:09:9d:8f:
         11:c0:8f:dc:c9:46:37:87:62:4e:85:34:1e:ab:b9:80:47:1b:
         b4:f1:93:f5:d2:8e:69:8d:90:ef:e4:64:f0:10:47:c9:8d:74:
         65:8a:c0:de:93:2d:4d:8d:e8:de:24:9d:b9:5b:a5:ca:15:61:
         ba:dd:99:d8:68:62:10:58:14:1a:60:78:70:46:86:fb:95:7d:
         a9:5c:a8:12:40:d3:d8:71:bc:d5:b7:ed:f6:d9:0f:1a:eb:81:
         65:f9:77:81:d9:6f:20:29:8a:e9:89:95:d7:85:f6:4e:6f:ae:
         ea:f2:06:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD
M0Q5Njg2NjMwHhcNMjYwNzA0MTgyOTUxWhcNMjYwNzExMTgyOTUxWjAYMRYwFAYD
VQQDEw02YTQ5NTEyMC0wMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9uv8aMMqbQcMDnJED5YYu+Abtd2n13X0ebf2gmor//cEr5YjaMaW5WL1QmuR
z7pUjNnyKWIauC4d/c78/MCw29YRFVq3KRgluqHaQCXALOZaHo6ApMjKtPul5Cc8
NmGui5cr71/25DfmkQnwGLI+ye0L4PyJGBZdfvOITSoJqsITYGt2CUk0eafYDjTc
RlrPu2JxWm/wuHC2UonTvqQtcClCH3g12oW/vnWyrM+mRX0BxqizDu3OPi9gnNb3
jldnLfOnI8Vbx7SOjbRv124auuchsHFiwYphaYUeRYYvfonCR/7JBfAQYysG/QRi
/Ps5i8ji5HZKRRTUW/xsSVA5dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmiCfQG
LYoxTIiAglCjs+k+DX5iMB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG
NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo
bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjFENS9FRTAxODA3ODBGNjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYw
NXN0SHVWZzA0cW5EMldobU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfw2fZ9aBpKGRP5HfEHH9m57GCUFbUu4Dg3QwiB/l0c7deflOhc5Sim+5jAvy
vRgw2yee+MJb5M6qTxKLRkwe95wqNxuVem9SjxyPKUN+MFS/a9fvjcaXdUx5UTTJ
NnECRXSOaI09hQY2k5attpcoWdQVtWEn+gamXBN8OhdC4CAl8n2nBw//3ayML2cn
CZ2PEcCP3MlGN4diToU0Hqu5gEcbtPGT9dKOaY2Q7+Rk8BBHyY10ZYrA3pMtTY3o
3iSduVulyhVhut2Z2GhiEFgUGmB4cEaG+5V9qVyoEkDT2HG81bft9tkPGuuBZfl3
gdlvICmK6YmV14X2Tm+u6vIGPw==
-----END CERTIFICATE-----
Generated at Mon Jul 6 13:13:58 2026 by rpki-client