Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File:                     7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier:          Dwyt/D8fDqYX/DnV55QOXIuiaEBHK60IgYNNQf78Kv8=
Subject key identifier:   50:21:D5:25:B5:4F:57:47:3E:39:2E:2F:83:74:3D:40:6E:03:1A:08
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer:       /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial:       0D0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number:          15BC
Signing time:             Wed 20 May 2026 18:09:19 +0000
Manifest this update:     Wed 20 May 2026 18:09:19 +0000
Manifest next update:     Wed 27 May 2026 18:09:19 +0000
Files and hashes:         1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: GEv2+QBrbRmJ2JXnNnnVZ/3hesLl5SqpzVWvZYGFg4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
        Validity
            Not Before: May 20 18:09:19 2026 GMT
            Not After : May 27 18:09:19 2026 GMT
        Subject: CN=6a0df8cf-a7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e7:11:77:41:d9:ca:f4:8b:98:c2:76:33:bf:
                    02:d5:b1:4b:e6:ae:96:6b:97:ec:7b:51:05:64:93:
                    e8:31:21:97:66:20:76:3f:3a:b5:51:8b:db:ca:80:
                    18:1d:b8:95:d6:52:61:2c:fd:e6:74:50:a7:58:83:
                    2b:08:c8:96:0f:89:5b:b4:ff:cc:f8:f9:75:9d:59:
                    b0:69:f3:86:e0:8c:0d:8d:43:b9:d0:a0:bf:27:d8:
                    36:63:fb:43:37:47:ac:06:21:9f:9a:84:7d:9d:92:
                    74:c3:ac:47:94:9e:0b:d3:33:60:fe:09:6d:26:ef:
                    ed:28:a8:73:28:f5:08:93:dd:36:0f:ee:0c:a4:cb:
                    da:e3:3d:df:df:0a:e2:64:2d:96:12:d4:70:c3:ea:
                    d3:c1:1f:84:35:de:b4:03:a6:34:83:a5:6f:b5:ec:
                    9c:1f:60:9d:1f:ca:1d:97:47:30:c4:17:cf:c1:e7:
                    10:04:06:b6:75:af:73:e0:7e:72:7f:13:20:bf:72:
                    eb:4f:96:3f:30:f3:8b:46:f4:7a:a4:8e:cc:b6:9d:
                    59:1c:e0:3a:59:d6:7b:64:80:b9:ba:6d:90:aa:e2:
                    b6:1f:70:ed:3e:17:67:51:05:8f:28:aa:d3:62:30:
                    31:dc:0d:94:93:ce:ea:eb:6d:0e:19:30:09:a9:e8:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:21:D5:25:B5:4F:57:47:3E:39:2E:2F:83:74:3D:40:6E:03:1A:08
            X509v3 Authority Key Identifier:
                keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:bc:79:af:32:2d:84:2c:96:b8:64:63:55:0f:f4:7c:f1:69:
         c5:2f:70:16:23:bf:b3:7a:46:27:e8:3e:3b:88:24:6e:7e:95:
         42:77:67:ea:76:6e:d2:7b:ca:a3:45:eb:76:5d:1a:a6:f7:7e:
         a3:6d:e2:38:e3:ca:1f:15:f5:36:f0:13:59:67:17:06:09:9d:
         da:41:3d:1a:8f:15:f7:e9:10:db:e2:f0:29:43:e1:83:bd:f5:
         4a:32:48:56:5e:3c:65:8c:9f:b0:67:bd:01:90:7e:e7:bb:08:
         5a:9a:39:ee:50:a6:d4:ed:1d:fb:fa:01:92:d4:41:a3:89:25:
         f2:08:43:af:67:26:7c:7f:31:4d:19:3f:e1:ed:53:d2:d0:31:
         c6:92:5d:51:7d:fb:fc:e6:02:cb:e0:59:ad:f1:fa:73:67:fc:
         17:f8:1b:39:84:a7:f1:c7:a4:94:57:8f:06:de:12:2f:fc:19:
         33:88:5e:77:6f:24:27:16:61:8b:06:e6:f8:01:2f:eb:21:64:
         94:fc:46:f4:ca:bf:13:ba:52:fd:22:05:44:5a:52:81:7e:0f:
         af:9b:71:35:4e:08:93:0b:d8:ad:a0:99:22:d0:da:65:2e:74:
         5e:05:7c:2e:01:a1:29:c9:ee:c5:b7:f1:76:58:81:7f:92:4a:
         01:99:36:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3RDAxMTAvBgNVBAUTKEVDM0I5MEMzNDg4NkZEMDkyOEUzMTI1NDYxRkJCNDE1
MkJFOTkxMzcwHhcNMjYwNTIwMTgwOTE5WhcNMjYwNTI3MTgwOTE5WjAYMRYwFAYD
VQQDEw02YTBkZjhjZi1hN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ecRd0HZyvSLmMJ2M78C1bFL5q6Wa5fse1EFZJPoMSGXZiB2Pzq1UYvbyoAY
HbiV1lJhLP3mdFCnWIMrCMiWD4lbtP/M+Pl1nVmwafOG4IwNjUO50KC/J9g2Y/tD
N0esBiGfmoR9nZJ0w6xHlJ4L0zNg/gltJu/tKKhzKPUIk902D+4MpMva4z3f3wri
ZC2WEtRww+rTwR+ENd60A6Y0g6VvteycH2CdH8odl0cwxBfPwecQBAa2da9z4H5y
fxMgv3LrT5Y/MPOLRvR6pI7Mtp1ZHOA6WdZ7ZIC5um2QquK2H3DtPhdnUQWPKKrT
YjAx3A2Uk87q620OGTAJqehE5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAh1SW1
T1dHPjkuL4N0PUBuAxoIMB8GA1UdIwQYMBaAFOw7kMNIhv0JKOMSVGH7tBUr6ZE3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdEMC85ODJCMkQ1QTAw
ODIxMUVBQjcxRjRBMkJDNEY5QUUwMi83RHVRdzBpR19Ra280eEpVWWZ1MEZTdnBr
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdEdVF3MGlHX1FrbzR4SlVZZnUwRlN2cGtUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDdEMC85ODJCMkQ1QTAwODIxMUVBQjcxRjRBMkJDNEY5QUUwMi83RHVRdzBpR19R
a280eEpVWWZ1MEZTdnBrVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHrx5rzIthCyWuGRjVQ/0fPFpxS9wFiO/s3pGJ+g+O4gkbn6VQndn6nZu0nvK
o0Xrdl0apvd+o23iOOPKHxX1NvATWWcXBgmd2kE9Go8V9+kQ2+LwKUPhg731SjJI
Vl48ZYyfsGe9AZB+57sIWpo57lCm1O0d+/oBktRBo4kl8ghDr2cmfH8xTRk/4e1T
0tAxxpJdUX37/OYCy+BZrfH6c2f8F/gbOYSn8ceklFePBt4SL/wZM4hed28kJxZh
iwbm+AEv6yFklPxG9Mq/E7pS/SIFRFpSgX4Pr5txNU4IkwvYraCZItDaZS50XgV8
LgGhKcnuxbfxdliBf5JKAZk21w==
-----END CERTIFICATE-----
Generated at Thu May 21 11:04:01 2026 by rpki-client