Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
File:                     I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json)
Hash identifier:          O2yKE1s+KGPQcJYQjeORj8n3VueYGCHiEYWDrVWKvuM=
Subject key identifier:   CA:B3:E1:E6:79:BD:65:20:A4:FF:92:10:DD:F8:45:DF:A0:E3:00:00
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Certificate issuer:       /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial:       0764
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
Manifest number:          0758
Signing time:             Tue 12 May 2026 21:46:46 +0000
Manifest this update:     Tue 12 May 2026 21:46:46 +0000
Manifest next update:     Tue 19 May 2026 21:46:46 +0000
Files and hashes:         1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: UxqZnKlrfw49i+rxsrRQhYY8thH8xe0EqXOJQ7WylCw=)
                          2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: CuU/s3UKS9k04hjKJm9gWDdp3yaB5Ydqq+bcVnMC/ag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
                          rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
        Validity
            Not Before: May 12 21:46:46 2026 GMT
            Not After : May 19 21:46:46 2026 GMT
        Subject: CN=6a039fc6-06a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:4f:67:13:64:5a:5e:f5:f8:ff:2c:19:8a:
                    f8:37:58:82:11:87:d3:83:a2:6b:65:cd:37:3f:bd:
                    16:44:e3:8c:c3:09:e6:c5:d9:ea:41:16:ce:a9:c2:
                    62:cd:7b:83:a0:3f:1e:09:93:79:34:4d:aa:7b:e2:
                    6e:25:36:91:63:2f:02:dd:91:ac:51:46:94:b2:e7:
                    47:ab:d3:88:3a:be:e7:fe:b9:1c:47:a5:62:62:2a:
                    f0:cb:e8:4b:ac:1e:ee:a0:28:70:ce:9b:5a:b1:b8:
                    1b:54:a1:8e:45:48:e2:19:93:db:7a:eb:d9:44:37:
                    52:a8:e6:30:31:0f:4f:05:2b:59:e6:58:64:b1:33:
                    a4:89:b6:97:42:e9:f4:a3:b7:ac:6c:c6:d9:8f:9b:
                    9e:eb:64:5d:b2:00:6f:ab:ef:ce:af:9d:1a:ee:b0:
                    78:e7:b7:0f:3d:57:d7:4b:ab:81:9d:4f:cc:53:15:
                    f7:ba:4c:b4:ed:ca:da:8f:71:49:ed:fb:2b:b1:35:
                    1c:3d:9d:e8:f6:f3:b9:70:ef:e5:6d:40:4a:4c:29:
                    a6:91:d1:16:10:b5:ff:85:38:17:50:04:09:31:85:
                    a3:e6:16:ad:26:6b:e6:a8:0f:29:fe:73:8e:aa:2b:
                    38:a3:6a:77:39:24:92:2c:7a:4e:0b:22:09:5c:e0:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B3:E1:E6:79:BD:65:20:A4:FF:92:10:DD:F8:45:DF:A0:E3:00:00
            X509v3 Authority Key Identifier:
                keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c8:8e:db:5f:b9:6d:6d:bb:31:7a:f7:d6:a1:ab:58:42:60:
         61:36:9a:a3:19:33:3f:17:2e:25:7b:37:4a:e3:de:d2:8c:17:
         f1:65:a4:f5:87:24:2c:66:17:74:cc:4a:16:2d:18:db:15:6f:
         d4:d8:df:5d:e1:28:74:e9:91:24:97:6e:da:15:59:09:c7:c3:
         cf:47:18:3d:cf:4b:53:74:6a:89:91:9a:98:c1:4f:c6:5b:ab:
         a6:e3:96:cd:04:01:00:ea:1a:17:f1:dc:df:90:ad:ea:95:9e:
         e2:e0:c6:33:f7:70:7a:15:7d:1b:d7:ea:9b:ee:62:d6:ae:49:
         c2:26:60:2d:88:47:29:53:a5:87:8a:3c:fb:9d:06:e5:ea:a2:
         76:3a:8b:78:eb:04:10:5b:98:8b:f6:e8:b5:03:a7:69:c2:7e:
         83:4f:6d:f3:17:0a:44:2e:64:72:d7:c5:f6:9c:77:43:01:66:
         dc:1c:31:f8:c1:81:7f:e8:15:44:44:96:de:70:a3:29:21:b0:
         0b:e4:03:5a:2c:33:aa:ec:c9:ba:0c:a6:26:c6:cb:3b:62:a6:
         da:2a:03:ff:d4:8e:5b:6e:a1:4c:ec:0d:4e:b2:0e:b6:b4:15:
         14:3d:84:33:91:8b:a6:c5:d6:05:35:4a:eb:fd:ba:f2:69:67:
         76:86:8d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:58 2026 by rpki-client