Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
File:                     7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json)
Hash identifier:          lETkox0YlUlsoBq7eRn8uJMAExgjvYRbkBoVpFISTqI=
Subject key identifier:   FD:DB:8D:BF:39:DB:CB:2F:66:72:E9:82:0C:54:CE:87:22:7A:45:96
Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
Certificate issuer:       /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
Manifest number:          01F7
Signing time:             Mon 01 Jun 2026 03:58:05 +0000
Manifest this update:     Mon 01 Jun 2026 03:58:04 +0000
Manifest next update:     Mon 08 Jun 2026 03:58:04 +0000
Files and hashes:         1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: AX0wQdYKAcpe7oSg99DviG+LmPoRZKYj68SSnzUbF/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
                          rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 03:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
        Validity
            Not Before: Jun  1 03:58:04 2026 GMT
            Not After : Jun  8 03:58:04 2026 GMT
        Subject: CN=6a1d034d-509b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:ba:de:cf:73:e6:d2:79:e1:7e:0f:f9:b9:
                    19:ea:bc:11:39:4f:59:43:b4:95:e1:3c:2e:36:b0:
                    8c:39:2f:9c:d3:b4:fc:c3:55:fa:e9:34:bf:52:fc:
                    42:b0:5c:a8:8b:eb:c3:23:34:7e:3f:8a:91:4c:e0:
                    c4:7a:c5:18:cc:65:cb:cd:a5:3f:f3:cb:ca:6f:6d:
                    c3:c8:78:27:f1:77:6e:cc:92:ff:0a:ba:28:05:6a:
                    e9:7c:8c:f7:b1:38:bf:46:dc:03:a1:c2:10:14:b8:
                    b4:92:09:23:90:a0:47:65:d3:18:59:25:a9:63:35:
                    0d:62:4f:8b:aa:fc:1a:c6:02:42:0b:b9:f4:9e:41:
                    31:e7:11:51:f8:28:a0:c7:9b:dd:10:0a:54:be:33:
                    58:a6:6c:50:a0:4e:32:97:d3:19:cf:50:2f:4c:74:
                    19:b4:77:c4:69:17:f0:fa:f3:49:d9:56:4f:a2:05:
                    32:27:23:35:ad:42:67:5b:e0:ef:9b:04:a9:e8:de:
                    10:ff:36:fe:03:4b:01:12:d6:57:5f:ea:a6:98:7e:
                    a5:f1:f3:0b:3b:08:59:d4:34:6e:e9:a2:80:98:07:
                    66:62:fe:cd:4f:48:5a:51:cb:7b:8d:90:c0:5e:c1:
                    5f:01:77:bd:60:29:6a:7d:a1:d8:45:75:8c:b7:f0:
                    24:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DB:8D:BF:39:DB:CB:2F:66:72:E9:82:0C:54:CE:87:22:7A:45:96
            X509v3 Authority Key Identifier:
                keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ea:a2:8f:8b:97:72:cd:d8:75:ce:ba:11:2c:00:8d:50:55:
         bc:2f:6d:b9:e7:5f:3d:1e:f1:70:ad:79:07:95:58:9b:20:11:
         66:d3:73:8d:c7:a1:b1:a2:3b:0e:ca:c1:5c:8c:38:75:67:c4:
         ac:55:fd:59:41:0d:1e:54:da:18:9f:55:8b:ed:fd:14:41:05:
         5f:bb:c4:ac:39:75:c8:e2:e1:23:7d:94:69:78:a4:73:02:e0:
         9d:f5:a1:c4:c1:80:db:15:9c:64:15:e9:da:83:b2:44:a6:8b:
         05:d2:b1:42:ae:5a:61:14:d6:e3:82:57:c8:ad:d0:ce:cb:1d:
         49:05:bb:78:39:c6:7d:83:ac:4d:23:6a:7b:b0:be:b6:95:0f:
         be:27:b1:0d:f2:68:d2:7b:65:48:ed:c6:a4:44:62:99:ab:47:
         ab:48:a7:55:cb:ae:84:1c:5d:14:0d:6c:e6:52:73:78:fe:82:
         79:3d:03:ae:e2:35:6c:54:9b:a5:95:7b:81:ad:dc:49:78:d1:
         64:22:45:01:73:26:46:6a:e9:24:7b:9e:2a:cb:c0:26:f8:93:
         28:24:e9:0f:81:3f:24:96:5d:ce:98:94:d4:22:af:4b:99:a9:
         ee:d9:8f:00:dc:e4:99:fc:4e:e3:68:74:88:ef:c5:e3:40:29:
         5c:8f:71:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:59 2026 by rpki-client