Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File:                     7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier:          SR8rUy5ZICPCZcQvZwixW+SPgenPoSEhMm7DC9K0QW0=
Subject key identifier:   0B:B9:7A:79:18:D0:AA:4D:E7:CE:BA:CD:E6:6B:0A:88:5B:91:07:83
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer:       /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number:          0113
Signing time:             Mon 11 May 2026 06:03:52 +0000
Manifest this update:     Mon 11 May 2026 06:03:51 +0000
Manifest next update:     Mon 18 May 2026 06:03:51 +0000
Files and hashes:         1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: KSJecpzS/PAE9h6JkKbLe2Te6d3QyW8PtW+BvqaP8Sg=)
                          2: C41B6A98396E11F1992DA1BA96833773.roa (hash: BPXuBuSemYn/E+9Uo6D+b9G7/Ig6Oc1u1YHeb89/AEQ=)
                          3: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: WDWRrI/KRtPcAbR2bWOuMpgztLrYoQZ12yzCIYDgRAs=)
                          4: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 1MNrxKgQIdnkp7DGKWCKsge4/v205nBecHy5tmcmZDU=)
                          5: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: hENFINj2b9wOIFxjK3nr2DrkTGbz4MTQ9pqxVPQHBxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
        Validity
            Not Before: May 11 06:03:51 2026 GMT
            Not After : May 18 06:03:51 2026 GMT
        Subject: CN=6a017148-87bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:ef:a9:11:65:eb:fb:6a:22:3d:85:25:76:
                    fb:15:2f:d9:66:3f:43:43:fd:f2:5a:e9:4e:f9:00:
                    86:ad:65:75:09:9c:77:fc:56:9a:f1:67:05:bf:a3:
                    e3:f1:29:fe:e2:7d:c2:8b:e3:9e:f2:57:35:09:77:
                    da:a6:ec:1c:aa:c2:21:f0:26:06:c6:d8:b1:37:e4:
                    4a:bb:94:58:a7:10:82:a1:33:8c:9b:36:50:e9:96:
                    0f:12:cc:b1:32:27:0f:94:ec:67:78:f7:b8:83:c7:
                    94:53:df:f1:ed:96:03:e7:a9:ac:1b:36:b2:b6:0e:
                    13:98:42:ee:6b:be:3e:2e:55:2d:cf:32:42:65:09:
                    03:6e:b8:23:ac:e6:6d:25:fe:bf:5e:e4:ca:b4:d0:
                    bf:21:b3:2e:75:2a:1b:c0:4c:e0:78:12:93:e3:b9:
                    2c:35:b8:1d:51:9f:72:b8:8a:99:5e:68:d5:d2:ee:
                    a9:0a:01:61:e7:4a:de:e7:e7:e6:d3:e3:36:be:a2:
                    62:8b:dc:ed:cd:16:02:a6:8b:0f:02:2b:9b:b2:4c:
                    25:c1:ab:fa:5f:8e:fd:a7:43:4b:be:c6:0d:a6:e7:
                    cd:f3:f5:47:91:cf:6f:37:0e:62:9f:04:a5:43:f0:
                    c4:d8:47:b3:7b:29:fe:89:8b:de:91:e1:6e:13:0f:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B9:7A:79:18:D0:AA:4D:E7:CE:BA:CD:E6:6B:0A:88:5B:91:07:83
            X509v3 Authority Key Identifier:
                keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:31:de:67:0a:70:24:1c:5b:47:db:33:e9:97:8e:53:3a:7f:
         d9:c3:6b:e1:1c:e3:15:42:30:29:4d:52:99:0a:9d:c6:c0:2e:
         72:80:c1:b5:7e:c2:a4:ce:45:32:cd:8b:33:34:db:60:21:91:
         74:36:68:73:a6:af:7c:e2:8f:82:32:1c:6b:03:39:7b:f0:4a:
         22:63:c1:d9:7b:f6:80:7c:a5:cb:f5:1e:6e:32:a8:e4:ba:14:
         80:13:34:b3:0d:57:20:5b:69:f2:48:7f:92:3a:0f:03:a2:ca:
         57:bd:8f:67:82:17:1e:2e:e7:c8:de:48:68:06:2f:2d:fd:bc:
         4c:1b:83:9a:c5:eb:ec:aa:ef:6a:f0:ad:43:2a:75:ee:bb:bb:
         cd:30:e4:99:25:93:de:43:74:6f:a1:79:31:f5:f7:63:e7:80:
         3d:18:4f:7d:e3:9f:10:81:90:27:32:0b:a1:fe:31:e2:24:f2:
         14:a2:f0:dc:fa:b9:44:ea:a6:a8:c8:25:fe:9a:2f:d0:8f:56:
         9b:52:43:d3:ab:c2:f5:c3:b2:69:e6:f2:59:8d:9d:34:4c:bc:
         2d:c3:7d:c7:73:2b:60:cb:fb:d1:c8:96:0c:7e:d9:74:f7:f0:
         d6:c8:4a:6d:2d:29:ed:83:b3:0d:02:6b:f2:9c:52:55:47:d9:
         a5:de:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:46 2026 by rpki-client