Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File:                     7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier:          JEZXcR/M+9Z9uRwlCWMgLF8SubK9HzbfFhim7Ga6X0w=
Subject key identifier:   07:4E:96:0C:88:61:A9:A4:1C:15:A6:D9:76:62:43:01:8F:CF:BC:C7
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer:       /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial:       0CA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number:          0C87
Signing time:             Tue 12 May 2026 18:38:22 +0000
Manifest this update:     Tue 12 May 2026 18:38:22 +0000
Manifest next update:     Tue 19 May 2026 18:38:22 +0000
Files and hashes:         1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: dnEBkPr6sZ7+qPW+nOHoQ4ZBNrhic/IJlhYDsxTMraI=)
                          2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: 4bnWRv5wJBsyx0TFBETKt2oLFJp/Xiza93KwZfpHk70=)
                          3: 627B1438281211EA881CC32DC4F9AE02.roa (hash: QuMcWQGwhElYLcNGEV8qqlAOlpLd+8u3fMjc2LDn80I=)
                          4: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Lb32CCKaZxPXJVtVTz41kWSGeP/mH1CszKT3y/ullaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
                          rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3233 (0xca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
        Validity
            Not Before: May 12 18:38:22 2026 GMT
            Not After : May 19 18:38:22 2026 GMT
        Subject: CN=6a03739e-15fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:91:b5:56:93:da:43:cb:03:bb:b1:77:ca:
                    34:ae:d3:17:5d:7b:f3:c9:3b:3e:2c:fd:04:df:b4:
                    95:e7:2f:6c:dc:83:ee:1a:17:4a:8b:89:a6:15:7c:
                    c7:64:26:27:b4:5f:25:0e:1d:59:11:c8:6c:0f:7b:
                    c5:c4:ef:b5:2f:c8:50:94:96:d0:a7:ee:a2:30:95:
                    34:4e:44:35:05:0f:2e:2f:64:65:5d:5e:d7:ff:66:
                    c6:9f:b2:6d:42:51:3d:61:e0:9d:f6:ac:26:56:b9:
                    50:2f:b8:9d:62:98:ee:f8:a9:c6:20:a7:20:3f:70:
                    d4:15:d8:db:dd:62:5c:0a:23:96:bb:ba:83:c8:a2:
                    24:78:60:8a:26:cd:e3:f5:e2:aa:50:40:8f:41:33:
                    97:32:57:a9:dd:1a:6c:87:cf:f2:29:80:58:8a:78:
                    d5:08:7b:8f:4f:3c:03:9c:40:68:93:23:5c:ae:81:
                    75:92:0a:80:54:94:1a:36:e3:63:be:a8:72:d1:06:
                    96:0a:8b:bc:34:f7:b3:57:4d:02:d6:54:b8:c3:79:
                    17:23:50:4f:fc:0c:ce:db:f0:fd:28:36:d7:3d:63:
                    cd:10:97:46:80:55:82:59:7b:90:8b:bb:54:f6:4d:
                    81:4c:15:ea:d3:aa:d1:b0:41:96:37:7a:02:b8:3f:
                    30:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4E:96:0C:88:61:A9:A4:1C:15:A6:D9:76:62:43:01:8F:CF:BC:C7
            X509v3 Authority Key Identifier:
                keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:23:61:23:3e:0e:8f:fd:04:ec:22:d5:69:d0:0b:f9:74:
         03:ad:b3:69:23:3f:81:8d:61:1a:b9:83:04:a8:7e:bc:75:c3:
         05:72:5d:95:d1:db:32:46:be:60:05:48:ad:a6:c6:a4:f1:09:
         fe:cc:34:df:14:4e:fd:56:18:98:18:c7:43:b4:4e:1e:96:03:
         90:a3:db:d7:e3:c9:75:a3:82:d0:8d:b4:0e:dc:ed:d2:bb:17:
         06:64:60:95:a3:2e:53:8b:3d:97:69:0c:c6:16:41:ba:99:c8:
         15:50:99:e2:1e:45:aa:ec:53:97:60:91:bc:f6:dd:76:20:bf:
         45:a1:49:59:b1:9b:3e:8d:c3:26:f7:31:0b:76:71:73:51:e4:
         ab:41:cb:82:7f:dd:57:07:b3:8e:af:4c:75:c2:e6:77:9d:07:
         76:1e:24:f7:f7:09:72:d2:53:e9:93:e2:3e:df:f1:28:3f:6e:
         0e:e9:cc:12:d2:03:2f:8a:b7:19:46:a4:5e:30:54:81:e5:df:
         85:a9:2b:40:c6:b9:4e:16:9d:3f:5f:81:f2:7f:0d:5c:2a:b8:
         bf:d2:63:94:57:ea:d8:0c:d9:2e:0a:28:fc:2e:06:7b:dd:db:
         8b:25:f4:dd:24:13:50:35:91:db:38:44:21:3b:e8:14:fd:ba:
         a1:5f:03:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:52 2026 by rpki-client