Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
File:                     -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json)
Hash identifier:          1JkpWWjlwr71SKjmpNA9rLK5Rpc7lzSaqH6k+L2Hdhg=
Subject key identifier:   58:27:15:CE:6A:37:A2:2E:49:EC:0F:F5:01:37:37:9A:71:7A:BD:CA
Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
Certificate issuer:       /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Certificate serial:       1341
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
Manifest number:          1334
Signing time:             Fri 08 May 2026 16:58:49 +0000
Manifest this update:     Fri 08 May 2026 16:58:48 +0000
Manifest next update:     Fri 15 May 2026 16:58:48 +0000
Files and hashes:         1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: OP3jSbmcmylQLV9ioPmH1WcavM+JUEo/up0h6CpnE2w=)
                          2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: o60MWP+DlNCHL5TPTYVqrO/Lu4kM0QYf6Eyv0LamcPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
                          rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 15 May 2026 16:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4929 (0x1341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
        Validity
            Not Before: May  8 16:58:48 2026 GMT
            Not After : May 15 16:58:48 2026 GMT
        Subject: CN=69fe1648-a443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:20:66:51:4b:f2:ad:20:f0:e5:3e:ee:29:
                    7d:78:90:af:28:8e:ad:d5:06:62:5f:83:93:1f:9a:
                    9c:95:ee:cf:db:4f:95:8f:e5:56:44:7a:7c:a7:19:
                    4d:6e:43:c8:d7:f1:98:7f:4e:f8:8b:31:37:c0:7b:
                    21:9a:1f:67:b9:20:11:f5:12:1c:44:48:3a:ad:b0:
                    7c:85:74:c7:de:34:19:1b:cd:e2:66:6f:44:12:c7:
                    a0:83:b8:9b:a4:1c:c9:df:1d:a0:9d:6a:20:3f:0c:
                    8a:64:94:08:7e:4e:92:c6:3b:84:4e:cc:eb:34:6a:
                    29:34:6c:db:ef:d3:c8:8c:16:84:df:c7:9f:11:ca:
                    67:49:ab:bb:ae:7e:42:ba:bd:10:a6:44:81:4f:71:
                    48:3b:09:ad:44:fc:14:36:24:41:4c:f6:57:9d:6a:
                    10:87:63:75:68:c3:7d:9c:70:a1:76:bc:7e:67:6e:
                    c6:4e:46:bb:08:99:ce:66:a7:2e:7a:70:48:ce:52:
                    4d:74:4c:eb:cc:1d:ea:95:95:a8:2c:2f:a4:36:48:
                    a3:e9:62:6a:ef:e1:2d:d9:63:9f:e6:26:45:a0:bc:
                    fa:e4:e7:0e:e4:3d:24:f5:06:9d:97:99:2c:f2:e9:
                    18:98:6a:88:ba:c5:f8:4d:da:29:c3:53:f6:4b:fa:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:15:CE:6A:37:A2:2E:49:EC:0F:F5:01:37:37:9A:71:7A:BD:CA
            X509v3 Authority Key Identifier:
                keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:48:5c:b8:15:44:70:be:e0:b6:a8:b9:16:2a:a4:3b:4c:e2:
         f9:1d:b1:37:32:03:d4:bc:d0:8e:89:60:8e:13:69:3b:6b:fc:
         f3:6b:58:b9:1f:4f:7b:4d:ce:0f:a1:56:02:c4:8b:e5:b6:90:
         66:71:fc:a0:dd:86:cf:62:c8:1b:91:76:49:a7:1a:a1:81:7f:
         59:7d:90:b9:75:27:7f:09:23:f2:45:67:18:bf:90:01:db:83:
         5f:b6:2a:c8:2e:0c:29:0f:62:d9:b0:97:9f:f1:2d:ec:81:d0:
         6e:33:f6:d1:89:af:0e:91:5a:b7:50:b3:bf:f9:5e:e2:db:12:
         48:fc:5b:64:6e:ba:fa:9d:61:24:ba:f0:0f:08:eb:8e:cb:d0:
         12:ca:c5:64:79:0b:9f:c1:17:d3:1a:4d:96:4b:d8:81:04:72:
         21:f5:99:41:eb:b1:1f:45:38:00:28:34:2a:ce:c5:7e:70:0c:
         8e:e2:66:1a:ee:a8:3c:1c:c0:a1:62:13:ad:4d:f9:3e:fa:5c:
         cb:d4:e8:0d:34:6d:80:7d:22:e9:72:6b:5b:38:01:c7:98:d0:
         26:45:50:66:ad:2e:37:79:e5:0d:65:ca:47:9e:a1:c1:9c:29:
         55:63:3f:f4:88:36:4b:1a:c2:da:92:bc:f9:8f:f9:53:87:dc:
         28:a2:85:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy
OEE2NDVGNEIwHhcNMjYwNTA4MTY1ODQ4WhcNMjYwNTE1MTY1ODQ4WjAYMRYwFAYD
VQQDEw02OWZlMTY0OC1hNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgUgZlFL8q0g8OU+7il9eJCvKI6t1QZiX4OTH5qcle7P20+Vj+VWRHp8pxlN
bkPI1/GYf074izE3wHshmh9nuSAR9RIcREg6rbB8hXTH3jQZG83iZm9EEsegg7ib
pBzJ3x2gnWogPwyKZJQIfk6SxjuETszrNGopNGzb79PIjBaE38efEcpnSau7rn5C
ur0QpkSBT3FIOwmtRPwUNiRBTPZXnWoQh2N1aMN9nHChdrx+Z27GTka7CJnOZqcu
enBIzlJNdEzrzB3qlZWoLC+kNkij6WJq7+Et2WOf5iZFoLz65OcO5D0k9Qadl5ks
8ukYmGqIusX4Tdopw1P2S/pLTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgnFc5q
N6IuSewP9QE3N5pxer3KMB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB
OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT
dnBGZEFqNFluV0VvcGtYMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmkhcuBVEcL7gtqi5FiqkO0zi+R2xNzID1LzQjolgjhNpO2v882tYuR9Pe03O
D6FWAsSL5baQZnH8oN2Gz2LIG5F2SacaoYF/WX2QuXUnfwkj8kVnGL+QAduDX7Yq
yC4MKQ9i2bCXn/Et7IHQbjP20YmvDpFat1Czv/le4tsSSPxbZG66+p1hJLrwDwjr
jsvQEsrFZHkLn8EX0xpNlkvYgQRyIfWZQeuxH0U4ACg0Ks7FfnAMjuJmGu6oPBzA
oWITrU35Pvpcy9ToDTRtgH0i6XJrWzgBx5jQJkVQZq0uN3nlDWXKR56hwZwpVWM/
9Ig2SxrC2pK8+Y/5U4fcKKKF8w==
-----END CERTIFICATE-----
Generated at Sat May 9 09:28:05 2026 by rpki-client