Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
File:                     7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json)
Hash identifier:          plCbZEypnLkc2QdkS+dXWD5s6dKWUqA0ugBaT7AKD2M=
Subject key identifier:   82:12:0A:18:A7:E5:45:39:9F:89:4F:E4:83:6D:BC:07:B7:F7:07:9E
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Certificate issuer:       /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial:       0D1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
Manifest number:          0D10
Signing time:             Mon 22 Jun 2026 18:13:33 +0000
Manifest this update:     Mon 22 Jun 2026 18:13:32 +0000
Manifest next update:     Mon 29 Jun 2026 18:13:32 +0000
Files and hashes:         1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: pbNrHqGhIMWGl7T6/47fL6RSDoTqiMal2AS6oNzcLAY=)
                          2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: YTtkDc7LdxWurMFpFmPW6K963HgmXdSoLXjMrXv0k5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
                          rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3357 (0xd1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
        Validity
            Not Before: Jun 22 18:13:32 2026 GMT
            Not After : Jun 29 18:13:32 2026 GMT
        Subject: CN=6a397b4c-30fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:60:f4:9a:5c:71:46:79:db:e6:63:16:a9:
                    8b:8e:80:4a:ec:b4:8a:3a:c7:ac:7f:71:c7:0e:b1:
                    5d:78:66:b2:f4:e0:07:77:39:fd:af:3a:a6:2a:97:
                    33:02:3f:4e:5f:87:07:10:30:b7:b6:5d:0f:e1:99:
                    ad:a2:45:d5:87:f4:f5:cc:90:8b:90:04:e4:e1:f5:
                    5c:7b:ca:41:fb:76:15:bb:f0:f8:60:a2:ce:2b:f2:
                    14:82:7f:b1:76:c7:a0:ae:91:d1:ee:93:f1:f9:be:
                    2c:96:fa:6f:9e:ca:fb:aa:7b:96:df:f3:0e:01:96:
                    35:a2:48:d6:7e:19:f0:a6:fd:9d:38:c9:d7:c2:98:
                    0c:22:05:6a:0c:40:fc:77:dc:67:77:6d:ca:9b:42:
                    ea:48:d8:71:48:d4:7a:7a:78:3a:84:b6:2d:82:d3:
                    f4:98:df:1d:5b:f0:a4:83:af:cf:c7:86:03:e9:a7:
                    d1:60:e7:b2:77:c4:26:e5:78:0c:7b:c4:27:1d:e2:
                    6b:88:56:f3:f8:da:79:96:a3:11:17:19:02:64:e4:
                    6f:99:d8:64:a0:5b:5a:19:d4:b2:e2:fa:9f:64:0b:
                    9d:4d:56:19:2b:a8:e8:1e:39:85:13:0d:c2:93:80:
                    04:08:d5:e9:be:37:6e:fb:51:c9:68:ac:aa:7c:99:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:12:0A:18:A7:E5:45:39:9F:89:4F:E4:83:6D:BC:07:B7:F7:07:9E
            X509v3 Authority Key Identifier:
                keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6c:e8:07:95:a4:c6:1f:ce:20:15:09:e6:ef:2c:ac:33:66:
         40:66:38:3d:82:51:c2:ea:80:69:fd:b3:06:fe:33:d2:30:dd:
         11:1f:21:92:75:08:91:eb:a7:72:50:0c:5d:42:da:12:92:c1:
         22:47:4c:8f:47:a0:63:e1:6b:c4:88:f0:79:94:e5:59:97:88:
         41:7f:9d:f2:24:50:6d:e3:7c:53:0e:43:17:40:e9:f0:45:51:
         84:4a:c8:48:2f:e3:4a:2c:6e:f7:68:7f:7a:88:8f:3b:ef:5b:
         a1:86:a1:ae:30:77:63:98:74:33:3a:cd:96:23:6f:28:fc:e3:
         bb:f7:cf:8a:7b:40:50:2f:f0:eb:91:2e:e2:c5:05:96:32:53:
         ca:c3:45:cf:56:ef:7d:13:3f:36:30:b4:6f:30:1c:a0:93:b2:
         e0:cf:42:9b:54:78:96:4c:56:cd:ba:26:72:13:e8:12:3e:42:
         ae:f5:00:65:78:c5:c0:a7:8e:d0:07:6e:e9:28:46:e0:7b:a7:
         79:1d:34:e2:0d:ed:ce:c9:58:77:58:ee:c1:66:11:93:b4:20:
         20:8a:5f:8d:bf:8b:ce:2f:6f:8d:8c:20:4c:dc:9e:96:d7:42:
         1a:d4:c3:9e:3d:b5:f0:76:a7:a5:c2:68:11:51:e3:8a:42:0b:
         5b:71:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:42 2026 by rpki-client