Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
File:                     baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json)
Hash identifier:          PvGjdecVuJZqQOdokcuk85xyZMqFtBrVfOBBTOV9HQw=
Subject key identifier:   60:CC:2A:79:CC:10:2A:20:82:C4:B6:F7:96:06:97:03:34:3E:DA:73
Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
Certificate issuer:       /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Certificate serial:       0804
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
Manifest number:          07F7
Signing time:             Tue 12 May 2026 21:21:15 +0000
Manifest this update:     Tue 12 May 2026 21:21:15 +0000
Manifest next update:     Tue 19 May 2026 21:21:15 +0000
Files and hashes:         1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: Zt/LiJz6dQFNvz12ii/Z1nNPWXDuEaGlKnELvQaZzbs=)
                          2: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: /ee3Z/RejGv34651CFjDfo357/BI2yYheaPQiVddGg4=)
                          3: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: +Ytbh6uS9SueVTTFSqsYD08Z5VmVPcYhz5ek3giGdE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
                          rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
        Validity
            Not Before: May 12 21:21:15 2026 GMT
            Not After : May 19 21:21:15 2026 GMT
        Subject: CN=6a0399cb-f947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:f0:14:32:fa:86:af:39:43:9d:b8:bd:83:
                    c1:5d:2d:86:58:37:7c:3d:4b:e2:a3:ad:3f:46:ff:
                    1d:a6:45:47:d0:a1:f6:a1:15:fc:d5:ac:45:9e:94:
                    e8:a3:9f:35:b5:75:a5:56:50:38:2b:5f:6d:cf:de:
                    f5:bf:07:ab:77:11:77:3d:e8:a1:ec:f5:d1:c9:37:
                    84:0f:11:94:75:ab:6b:e3:d8:f8:c9:ab:c8:b9:61:
                    f9:30:e2:c5:72:0a:04:54:92:68:e3:e5:2d:93:c3:
                    c9:fe:2f:b7:df:94:7d:91:d9:48:41:5a:85:fc:39:
                    6b:e4:b7:c4:aa:28:5a:b3:59:b3:b2:33:81:6e:da:
                    ee:5b:83:a7:38:17:76:60:e3:b2:5b:cd:c6:b3:99:
                    db:ec:9c:8c:6d:17:8b:d4:16:5a:4e:78:11:37:a7:
                    49:22:5f:ea:be:57:79:50:c6:cb:84:c9:3b:b0:95:
                    8f:ad:5f:df:34:99:d1:14:f3:5f:a4:d2:2b:00:53:
                    00:f9:bc:00:7d:42:3b:a5:6f:4b:84:7e:5d:1c:59:
                    7a:c7:e3:00:85:31:9a:44:b7:84:e1:30:e3:de:6c:
                    0e:91:85:2e:fe:b8:bd:aa:d9:19:03:0f:0b:9b:5b:
                    03:e0:42:76:c0:40:6c:55:72:ae:cd:7d:48:72:08:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:2A:79:CC:10:2A:20:82:C4:B6:F7:96:06:97:03:34:3E:DA:73
            X509v3 Authority Key Identifier:
                keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:bc:91:95:c9:93:68:9b:b3:78:a2:d8:2f:9b:61:f0:5e:57:
         89:2a:38:6b:42:2b:23:0f:8a:0c:58:d5:5e:13:d7:c5:dd:41:
         cb:4d:b0:de:1f:db:75:48:92:8e:5f:b8:14:7b:f5:9c:88:b1:
         21:2c:b8:32:e0:bf:40:e9:a6:ec:97:d0:f3:ac:93:be:4d:5b:
         72:3b:01:08:48:cc:ca:62:58:c3:ab:da:2c:e8:ef:25:c3:86:
         2e:ec:8d:21:ae:81:6e:06:9c:40:4b:1d:5c:ed:56:5c:df:5e:
         90:bb:1e:83:00:fb:a1:b5:e5:f7:30:8d:14:ae:ce:a5:cc:5d:
         15:1d:88:04:29:86:58:76:ce:81:05:ec:64:f8:8d:3f:03:74:
         67:76:f0:35:7c:f9:b2:61:a3:6c:b1:63:d5:3e:05:b2:59:71:
         8c:38:49:1c:87:80:17:36:2a:0a:d8:8f:5f:12:a8:d0:58:42:
         29:fe:4d:bc:af:d9:6d:92:1d:45:73:0d:ca:54:45:d9:b1:39:
         de:83:da:42:14:64:3d:e6:40:d0:be:03:2a:15:b3:be:43:6a:
         d6:d8:86:c4:5f:45:f2:ce:f3:77:14:25:fb:64:98:92:e6:d4:
         8f:48:8c:40:ae:7b:5f:99:97:b0:16:52:2f:f5:cb:60:15:fb:
         d5:e8:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:28 2026 by rpki-client