Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft
File:                     7G3y7NGPKF-XuI-EQf0pep7buUw.mft (raw, json)
Hash identifier:          w/fg6Tc3BtqUwaGnJV1G3i6LiIvneZ855sEr3W7MlVM=
Subject key identifier:   63:02:90:8A:89:C9:6E:CB:A5:CE:8C:D3:85:C7:30:8B:38:9C:3A:A4
Authority key identifier: EC:6D:F2:EC:D1:8F:28:5F:97:B8:8F:84:41:FD:29:7A:9E:DB:B9:4C
Certificate issuer:       /CN=A911725F/serialNumber=EC6DF2ECD18F285F97B88F8441FD297A9EDBB94C
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7G3y7NGPKF-XuI-EQf0pep7buUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft
Manifest number:          44
Signing time:             Wed 13 May 2026 13:49:33 +0000
Manifest this update:     Wed 13 May 2026 13:49:33 +0000
Manifest next update:     Wed 20 May 2026 13:49:33 +0000
Files and hashes:         1: 7G3y7NGPKF-XuI-EQf0pep7buUw.crl (hash: B/OaH2Qahg0fD4SYncNNeYdZElVSxdAHj71+tXOEW84=)
                          2: 8FFAAB884ED211F180A862EE95833773.roa (hash: GX3I9MgW0CZN72FKS2GkX1/a/qV5b7VInbm94vEgK18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.crl
                          rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7G3y7NGPKF-XuI-EQf0pep7buUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 13:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911725F, serialNumber=EC6DF2ECD18F285F97B88F8441FD297A9EDBB94C
        Validity
            Not Before: May 13 13:49:33 2026 GMT
            Not After : May 20 13:49:33 2026 GMT
        Subject: CN=6a04816d-2251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:16:c5:13:ea:23:51:54:1f:10:e7:f9:cb:
                    6a:97:f7:9c:d5:06:f1:27:4f:85:c8:f4:82:9f:6b:
                    e5:c5:93:3b:f3:4d:79:1b:e0:d6:2b:87:a0:83:af:
                    b0:9a:b6:d8:63:95:e9:83:96:2f:6b:ba:d0:a5:94:
                    dd:4b:84:b6:d4:cc:8b:d8:37:61:71:8f:7a:da:e0:
                    53:3a:6b:35:30:65:8e:95:69:4d:38:d5:88:83:de:
                    a9:b7:a8:85:5e:a4:b1:41:eb:81:6a:18:df:5e:1a:
                    ef:42:ad:98:f7:07:07:41:e3:3e:b6:69:d6:78:13:
                    71:d4:8b:3b:75:10:3a:bc:3a:44:32:6a:6c:b4:27:
                    45:eb:73:91:0b:d5:a8:81:59:41:71:0a:82:02:34:
                    c0:7d:46:24:47:96:28:f0:7f:14:a5:4d:f6:f8:10:
                    0b:b0:1e:91:7c:fb:e3:95:73:bf:79:20:b6:80:73:
                    56:72:04:ef:5c:9d:6f:ba:32:7e:ff:82:84:5b:fb:
                    ed:c8:d5:f9:ab:76:b1:4e:d2:52:e0:b6:e7:bd:02:
                    e3:13:6e:7c:8c:8c:3f:6c:be:3c:e8:b2:60:e8:88:
                    45:c0:87:8e:4b:7c:5e:06:5d:35:1b:c3:d7:20:4b:
                    b7:e1:7c:e1:df:f5:22:75:6f:ae:08:8a:a1:dc:a0:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:90:8A:89:C9:6E:CB:A5:CE:8C:D3:85:C7:30:8B:38:9C:3A:A4
            X509v3 Authority Key Identifier:
                keyid:EC:6D:F2:EC:D1:8F:28:5F:97:B8:8F:84:41:FD:29:7A:9E:DB:B9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7G3y7NGPKF-XuI-EQf0pep7buUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:75:6e:e0:a1:fa:ab:40:7d:0d:b3:75:c2:93:ca:06:ef:cb:
         4d:43:02:b7:f6:cf:4e:ca:a9:7c:0a:b1:d0:2d:14:72:0b:59:
         2c:86:d7:f3:35:ca:97:d5:f0:76:c2:49:ef:af:ae:c1:87:f1:
         c9:1b:99:87:e0:65:d5:e9:7f:b5:be:e5:48:bc:bf:24:08:89:
         23:36:15:1b:84:04:47:44:8c:02:7d:5a:d5:50:c1:12:5f:b3:
         81:8b:0c:10:81:bc:8c:d8:40:35:f4:ee:c1:ab:12:36:db:d1:
         31:eb:8e:7b:6c:ca:44:73:2a:78:cb:5f:98:ba:5e:25:f7:ab:
         f8:af:85:b1:2d:c9:7f:f5:a9:e6:fa:b8:8a:e3:22:f5:26:c3:
         aa:be:b8:df:bc:ad:5f:58:85:82:40:f9:1d:c0:3c:ed:d5:12:
         1d:20:5f:15:0d:df:46:ce:d6:8d:d9:38:11:f5:f5:2d:a4:0c:
         3a:f7:bc:10:b1:b8:bb:1d:94:0a:fc:08:14:75:91:cb:07:8b:
         ae:d1:06:8f:d1:cd:5b:13:60:64:dd:b4:9d:b9:54:0c:8c:73:
         c1:52:75:50:d9:22:12:03:f6:46:a3:b3:41:2b:eb:3f:47:3f:
         24:f6:2d:80:ca:67:35:75:67:33:13:df:ce:a0:0c:59:fe:02:
         de:db:98:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:53:07 2026 by rpki-client