Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
File:                     iR7Yuqwsc70TrcqhoWqvANIkqHc.mft (raw, json)
Hash identifier:          XrXmnbNHlgVCi5Mx8Wvsj5Le9sBCGEH6DIctk4Xfp0I=
Subject key identifier:   A6:51:23:84:E0:4A:54:89:9D:2E:05:9D:DC:32:BC:72:53:82:E6:5E
Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
Certificate issuer:       /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
Manifest number:          0118
Signing time:             Mon 11 May 2026 06:03:02 +0000
Manifest this update:     Mon 11 May 2026 06:03:02 +0000
Manifest next update:     Mon 18 May 2026 06:03:02 +0000
Files and hashes:         1: iR7Yuqwsc70TrcqhoWqvANIkqHc.crl (hash: yuS8Cb55zGeq0OS33dDR/KzVN9Vppz9uni+y1sLBZ9M=)
                          2: F7078BC4B73511EF8537DE81C4F9AE02.roa (hash: dcnfcfiViSeBV+zFTXFLZ3LN0enm0ZKeSScFAnyxpAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
                          rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91394E7, serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
        Validity
            Not Before: May 11 06:03:02 2026 GMT
            Not After : May 18 06:03:02 2026 GMT
        Subject: CN=6a017116-8075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:6a:32:be:6a:42:14:69:9e:9b:b9:ab:60:
                    3e:f5:93:9d:b7:f7:ee:9e:8c:a9:3b:70:a9:84:7d:
                    a0:ca:ce:21:c0:9c:7a:7e:9a:bf:29:ca:15:58:66:
                    de:bc:95:90:69:5c:12:df:5b:a0:81:10:28:c4:ee:
                    14:44:b8:cd:0a:e6:18:d6:36:76:d5:83:79:5f:10:
                    d3:55:7b:fc:e0:11:fd:32:1c:99:93:69:42:9e:66:
                    38:8f:00:35:04:b6:36:e3:9c:2d:a3:52:48:33:48:
                    42:e8:99:36:e4:d1:a0:77:a0:be:ed:e4:f1:2e:3a:
                    98:91:5e:09:ae:d8:4b:f6:f9:83:3c:76:b0:f0:8a:
                    0e:a5:d6:e0:64:a5:0a:80:d4:5f:3f:6c:c8:35:78:
                    20:7f:95:69:84:7d:3a:02:81:76:63:17:3a:9f:60:
                    91:06:c7:2b:a1:8c:3e:9c:c3:ff:84:ee:ac:8c:e9:
                    9f:16:81:b2:af:e1:0b:f2:37:1c:74:c8:96:11:c4:
                    39:4f:a3:5a:af:45:32:04:74:24:64:49:42:29:ec:
                    65:26:32:b6:71:fa:f9:e2:cf:7d:7d:96:db:bf:21:
                    bb:58:2d:04:c6:80:5a:c1:02:32:09:f4:0d:32:80:
                    8a:ab:5e:e2:01:17:f5:4f:63:88:34:6c:4a:28:98:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:51:23:84:E0:4A:54:89:9D:2E:05:9D:DC:32:BC:72:53:82:E6:5E
            X509v3 Authority Key Identifier:
                keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:e7:55:e7:3b:97:4f:55:8d:89:e6:26:31:39:f0:f4:3c:
         4f:24:47:32:59:41:66:62:15:09:d5:41:01:2c:7a:7d:dc:6c:
         00:e4:4c:85:b8:1e:69:78:fe:00:03:1b:3e:4a:67:53:4a:fc:
         97:34:3c:d6:8f:a1:6b:2d:9a:8a:40:07:af:19:e7:2e:40:35:
         1a:65:5c:80:96:75:cd:a2:34:f7:68:b6:e6:13:cb:3b:58:e0:
         e6:48:b1:fa:ff:b4:f3:97:82:54:7c:b7:da:50:46:66:87:e9:
         9d:82:84:61:63:a5:42:42:d6:d2:c7:e8:16:e1:7b:58:20:cc:
         e2:7b:e1:5b:0c:9b:bf:df:52:5d:e1:82:31:39:47:e6:24:05:
         aa:87:b6:0c:5c:7e:3e:3a:5f:e4:f3:17:b1:90:9d:d4:ef:ea:
         fd:0c:15:7b:5c:79:f2:b9:46:28:46:a3:59:18:66:1e:f5:0d:
         f4:58:25:58:d1:f6:0b:1b:58:e0:dc:89:59:3a:85:c9:bd:86:
         cd:0d:4e:5f:51:72:ef:8b:1a:ec:bf:18:ef:f2:f1:8d:33:b6:
         23:19:c4:5e:ee:31:c4:3f:20:e8:d5:80:f6:7e:b0:a4:6e:6c:
         f7:3d:40:a8:e8:93:5d:e3:dc:7c:11:24:f8:53:c9:73:03:3d:
         77:49:56:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:59 2026 by rpki-client