Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
File:                     CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json)
Hash identifier:          rivLvYAPHQ/9+Gt8C1FekragpY6vQUZyk1qmlfw4NW0=
Subject key identifier:   7A:D7:E0:83:72:CB:C5:56:6A:38:46:61:9A:1A:98:5B:19:FD:9C:8A
Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
Certificate issuer:       /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
Manifest number:          0125
Signing time:             Mon 01 Jun 2026 06:33:15 +0000
Manifest this update:     Mon 01 Jun 2026 06:33:15 +0000
Manifest next update:     Mon 08 Jun 2026 06:33:15 +0000
Files and hashes:         1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: oqdyBl/XeNPSQmS+D30ETa5LDMvIqXDufKtpD5IafQU=)
                          2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: kXIL4LSVHjTAmVfJOU7g+OrmcpQ5rxALmYlyD25Zr5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
        Validity
            Not Before: Jun  1 06:33:15 2026 GMT
            Not After : Jun  8 06:33:15 2026 GMT
        Subject: CN=6a1d27ab-ac7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:bc:05:cb:da:ab:bc:b1:1f:5c:df:ac:64:
                    e1:79:89:44:1b:db:e5:98:c3:62:b1:d4:c7:f1:8e:
                    d7:ed:57:62:f3:14:0c:a1:07:d7:4f:93:2d:16:c8:
                    70:9d:b7:33:ef:90:b7:aa:9a:ab:e9:d8:9b:9e:8a:
                    73:42:f2:d7:81:d1:9c:ba:67:cc:78:da:7d:b3:b5:
                    8a:14:15:e6:c1:2f:f9:3f:b6:83:38:f0:2d:1d:1d:
                    79:25:21:a2:e7:f4:a9:17:43:a7:7d:b8:bc:73:03:
                    a7:19:34:06:b4:53:a8:6f:88:3d:c5:aa:cb:57:d6:
                    40:48:69:b3:42:d7:a8:e0:19:36:09:84:c2:bd:9e:
                    5c:62:74:7a:df:67:8e:fc:a8:c6:0e:8a:e3:f0:0e:
                    57:86:7e:90:4e:31:a7:13:d5:50:3b:f5:52:3d:b3:
                    d5:fe:c4:01:dc:28:ae:6a:ac:cf:5b:d2:99:73:28:
                    78:cd:52:d0:5a:23:cd:91:aa:e5:42:bc:80:34:ee:
                    97:66:e6:df:10:03:59:1c:52:66:fd:75:97:47:47:
                    64:6c:8a:87:18:11:e2:19:0e:57:43:a9:e7:71:b9:
                    36:aa:7e:9b:09:fb:01:3e:87:8c:db:31:25:cf:a5:
                    2e:78:5f:df:18:d6:d0:2e:ce:41:d4:33:63:c6:94:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D7:E0:83:72:CB:C5:56:6A:38:46:61:9A:1A:98:5B:19:FD:9C:8A
            X509v3 Authority Key Identifier:
                keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c1:46:ce:ce:7b:e8:9c:a9:c5:82:69:b8:80:35:10:8f:b7:
         72:83:55:4f:16:67:db:80:70:e9:a4:f9:59:0d:4e:17:60:bf:
         22:f6:26:df:ba:b4:90:28:e7:42:1d:e7:ec:bd:f8:99:6f:6f:
         49:57:1f:e5:46:c7:3e:8f:e7:67:da:d2:a6:5c:4b:52:a3:bf:
         76:f4:86:53:2d:41:24:a9:91:11:4a:72:44:62:22:96:2e:70:
         4e:73:ba:04:e1:a4:21:68:35:f8:5b:c3:1a:82:de:2b:a8:75:
         ea:03:dc:6e:03:ff:9d:06:cc:c0:26:c8:1f:20:3a:ff:22:17:
         72:21:27:94:10:32:9b:16:4f:83:5e:db:66:8a:ed:a7:f8:93:
         6d:d8:e9:ae:30:b7:7a:8e:af:d5:f8:40:d0:e9:b1:88:58:00:
         55:c7:6d:6e:e2:a6:93:18:6d:64:3e:60:d1:f0:d6:01:93:d0:
         65:a2:56:78:7f:f8:b2:17:c1:19:cc:26:e7:a5:40:ac:f8:a0:
         2f:d3:5b:f5:19:99:85:c5:44:aa:1b:3e:5f:7a:f2:4a:a7:f4:
         65:a5:4c:05:4d:d8:7d:19:46:05:84:7d:4f:ba:ae:b3:2e:d7:
         18:ae:89:d5:24:73:8f:e2:4c:ee:88:5e:79:70:ca:9e:59:bf:
         18:90:d0:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc2MjcxMTAvBgNVBAUTKDA4MEVDMTRBMDAxMjVEOTE0QzdFNjI4NURFOUM1NjY4
OUM1ODcyQTQwHhcNMjYwNjAxMDYzMzE1WhcNMjYwNjA4MDYzMzE1WjAYMRYwFAYD
VQQDEw02YTFkMjdhYi1hYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAth+8Bcvaq7yxH1zfrGTheYlEG9vlmMNisdTH8Y7X7Vdi8xQMoQfXT5MtFshw
nbcz75C3qpqr6dibnopzQvLXgdGcumfMeNp9s7WKFBXmwS/5P7aDOPAtHR15JSGi
5/SpF0Onfbi8cwOnGTQGtFOob4g9xarLV9ZASGmzQteo4Bk2CYTCvZ5cYnR632eO
/KjGDorj8A5Xhn6QTjGnE9VQO/VSPbPV/sQB3CiuaqzPW9KZcyh4zVLQWiPNkarl
QryANO6XZubfEANZHFJm/XWXR0dkbIqHGBHiGQ5XQ6nncbk2qn6bCfsBPoeM2zEl
z6UueF/fGNbQLs5B1DNjxpT3uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrX4INy
y8VWajhGYZoamFsZ/ZyKMB8GA1UdIwQYMBaAFAgOwUoAEl2RTH5ihd6cVmicWHKk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzYyNy9FN0QyNTc4NkE4
OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1haRk1mbUtGM3B4V2FKeFlj
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzYyNy9FN0QyNTc4NkE4OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1ha
Rk1mbUtGM3B4V2FKeFljcVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqMFGzs576JypxYJpuIA1EI+3coNVTxZn24Bw6aT5WQ1OF2C/IvYm37q0kCjn
Qh3n7L34mW9vSVcf5UbHPo/nZ9rSplxLUqO/dvSGUy1BJKmREUpyRGIili5wTnO6
BOGkIWg1+FvDGoLeK6h16gPcbgP/nQbMwCbIHyA6/yIXciEnlBAymxZPg17bZort
p/iTbdjprjC3eo6v1fhA0OmxiFgAVcdtbuKmkxhtZD5g0fDWAZPQZaJWeH/4shfB
Gcwm56VArPigL9Nb9RmZhcVEqhs+X3rySqf0ZaVMBU3YfRlGBYR9T7qusy7XGK6J
1SRzj+JM7oheeXDKnlm/GJDQ9w==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:24:03 2026 by rpki-client