Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/7MPmdFTShIom3CPMPAlfFY8XQoQ.mft
File:                     7MPmdFTShIom3CPMPAlfFY8XQoQ.mft (raw, json)
Hash identifier:          PxbmEK09fORhfuqB0z5yHiNfKF5tF/rtvnTSiBTgCNQ=
Subject key identifier:   C6:64:3C:E5:88:B6:F8:AC:96:78:3A:8D:46:9F:C1:C5:4C:29:57:B8
Authority key identifier: EC:C3:E6:74:54:D2:84:8A:26:DC:23:CC:3C:09:5F:15:8F:17:42:84
Certificate issuer:       /CN=A9119461/serialNumber=ECC3E67454D2848A26DC23CC3C095F158F174284
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MPmdFTShIom3CPMPAlfFY8XQoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/7MPmdFTShIom3CPMPAlfFY8XQoQ.mft
Manifest number:          04
Signing time:             Tue 12 May 2026 23:32:47 +0000
Manifest this update:     Tue 12 May 2026 23:32:46 +0000
Manifest next update:     Tue 19 May 2026 23:32:46 +0000
Files and hashes:         1: 7MPmdFTShIom3CPMPAlfFY8XQoQ.crl (hash: NtzJNKBMdZg3tcZIrw7FRBlhXpa2H5DMT1GCty6D1i0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/7MPmdFTShIom3CPMPAlfFY8XQoQ.crl
                          rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/7MPmdFTShIom3CPMPAlfFY8XQoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MPmdFTShIom3CPMPAlfFY8XQoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119461, serialNumber=ECC3E67454D2848A26DC23CC3C095F158F174284
        Validity
            Not Before: May 12 23:32:46 2026 GMT
            Not After : May 19 23:32:46 2026 GMT
        Subject: CN=6a03b89e-3da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:b4:c8:0c:71:e7:71:2d:99:53:b3:08:9a:
                    7f:d7:17:b4:13:0c:8e:7a:78:67:fc:e9:2f:7a:97:
                    d1:40:f4:3d:64:0d:52:aa:68:f5:ef:65:6b:06:23:
                    ed:d2:f8:7b:c7:55:81:d6:b9:b2:0f:b5:10:6c:a9:
                    61:4d:d2:cd:33:9e:e5:15:2d:c2:36:20:8a:80:d6:
                    42:7a:af:55:0c:57:85:d0:6c:83:5f:52:45:18:ea:
                    f3:52:59:54:b7:1a:d0:23:21:78:0a:88:33:63:c9:
                    6b:37:09:44:ba:65:69:69:37:da:e6:09:ad:c6:e4:
                    b2:f1:b3:39:2c:1a:94:99:c5:7c:94:d9:b7:2c:bd:
                    87:f6:ff:bc:46:7d:0e:f2:0e:8f:57:19:ca:94:8b:
                    a7:76:7e:56:b6:4c:ba:96:f2:0c:40:f9:52:b9:6e:
                    18:9d:5b:f1:ce:da:e3:44:b7:e5:2e:cf:9c:3f:b6:
                    39:ee:4e:4b:17:63:af:fe:96:27:53:47:d2:df:0c:
                    05:80:df:86:a8:b0:a3:5c:dd:c3:ef:66:18:4f:e9:
                    70:c7:17:70:38:78:5d:72:e0:75:4a:46:20:56:c9:
                    36:9a:8d:97:79:5e:50:10:a8:ae:2f:c4:f6:30:d0:
                    2e:b4:79:72:a4:64:b0:cd:34:67:f4:65:96:a7:b2:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:64:3C:E5:88:B6:F8:AC:96:78:3A:8D:46:9F:C1:C5:4C:29:57:B8
            X509v3 Authority Key Identifier:
                keyid:EC:C3:E6:74:54:D2:84:8A:26:DC:23:CC:3C:09:5F:15:8F:17:42:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/7MPmdFTShIom3CPMPAlfFY8XQoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MPmdFTShIom3CPMPAlfFY8XQoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/7MPmdFTShIom3CPMPAlfFY8XQoQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c4:bf:04:8b:a4:a0:2b:2b:bc:38:70:5a:2a:eb:5c:df:9b:
         44:10:92:89:95:07:c0:8c:68:7d:39:c7:48:7f:0d:40:8a:20:
         41:aa:79:b1:22:8a:06:12:36:e7:58:9e:fa:17:79:ab:a6:23:
         62:87:0d:92:ea:3c:89:18:fc:ff:ce:fd:7b:f0:7d:ae:22:92:
         09:f2:16:9a:fd:57:71:36:bc:f0:9b:01:bc:aa:82:b7:68:b6:
         ab:01:be:49:aa:49:08:10:bb:ef:01:7c:b3:59:8c:3b:1f:f1:
         f0:92:04:7d:e0:76:76:41:d9:ae:d5:64:80:aa:c4:82:30:0a:
         c7:26:09:58:d3:e4:02:58:23:c5:4e:5e:6d:6a:da:5a:ff:56:
         cc:eb:7e:cb:7b:17:d2:6b:f7:8b:82:d0:6c:ca:2e:c7:84:6e:
         97:73:ba:8d:c3:44:e9:5d:c6:3d:14:5f:a2:1f:cf:59:f0:22:
         8d:bf:fd:45:80:50:b1:66:39:e2:25:fd:ba:75:6f:f3:cb:86:
         8d:53:e6:d3:df:c0:19:94:f5:74:5e:3b:57:21:ee:50:89:73:
         7a:3e:de:aa:68:98:a8:fc:3d:f2:79:59:6c:7f:78:4b:9b:b7:
         b8:8c:5d:53:2f:a8:1d:b3:70:4c:6e:c8:b5:fd:85:c3:38:53:
         b4:1d:f0:4d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
OTQ2MTExMC8GA1UEBRMoRUNDM0U2NzQ1NEQyODQ4QTI2REMyM0NDM0MwOTVGMTU4
RjE3NDI4NDAeFw0yNjA1MTIyMzMyNDZaFw0yNjA1MTkyMzMyNDZaMBgxFjAUBgNV
BAMTDTZhMDNiODllLTNkYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXZrTIDHHncS2ZU7MImn/XF7QTDI56eGf86S96l9FA9D1kDVKqaPXvZWsGI+3S
+HvHVYHWubIPtRBsqWFN0s0znuUVLcI2IIqA1kJ6r1UMV4XQbINfUkUY6vNSWVS3
GtAjIXgKiDNjyWs3CUS6ZWlpN9rmCa3G5LLxszksGpSZxXyU2bcsvYf2/7xGfQ7y
Do9XGcqUi6d2fla2TLqW8gxA+VK5bhidW/HO2uNEt+Uuz5w/tjnuTksXY6/+lidT
R9LfDAWA34aosKNc3cPvZhhP6XDHF3A4eF1y4HVKRiBWyTaajZd5XlAQqK4vxPYw
0C60eXKkZLDNNGf0ZZansurbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxmQ85Yi2
+KyWeDqNRp/BxUwpV7gwHwYDVR0jBBgwFoAU7MPmdFTShIom3CPMPAlfFY8XQoQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5NDYxLzc0NjlFNEI2NERD
MzExRjE4NTE1MUI5N0FFODMzNzczLzdNUG1kRlRTaElvbTNDUE1QQWxmRlk4WFFv
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN01QbWRGVFNoSW9tM0NQTVBBbGZGWThYUW9RLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5
NDYxLzc0NjlFNEI2NERDMzExRjE4NTE1MUI5N0FFODMzNzczLzdNUG1kRlRTaElv
bTNDUE1QQWxmRlk4WFFvUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAAxL8Ei6SgKyu8OHBaKutc35tEEJKJlQfAjGh9OcdIfw1AiiBBqnmxIooGEjbn
WJ76F3mrpiNihw2S6jyJGPz/zv178H2uIpIJ8haa/VdxNrzwmwG8qoK3aLarAb5J
qkkIELvvAXyzWYw7H/HwkgR94HZ2Qdmu1WSAqsSCMArHJglY0+QCWCPFTl5tatpa
/1bM637LexfSa/eLgtBsyi7HhG6Xc7qNw0TpXcY9FF+iH89Z8CKNv/1FgFCxZjni
Jf26dW/zy4aNU+bT38AZlPV0XjtXIe5QiXN6Pt6qaJio/D3yeVlsf3hLm7e4jF1T
L6gds3BMbsi1/YXDOFO0HfBN
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:58 2026 by rpki-client