Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File:                     M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier:          +cTCfbnKKTkhgWTJd0MkFTC+KLXdt1ewVSfMCNvIjUk=
Subject key identifier:   34:A8:92:C6:CA:9C:AD:58:2C:03:80:71:C3:54:28:E9:C3:EC:AF:5A
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer:       /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial:       0310
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number:          0307
Signing time:             Mon 11 May 2026 01:19:42 +0000
Manifest this update:     Mon 11 May 2026 01:19:41 +0000
Manifest next update:     Mon 18 May 2026 01:19:41 +0000
Files and hashes:         1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: jifbQJGm85JHK30a8VmYcUArpaHV9H/BfKieZtbc2dM=)
                          2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RE9FWoshhFwVBEKSS3waEgRjXTpLrxodiVIl1CwWm+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
                          rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784 (0x310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
        Validity
            Not Before: May 11 01:19:41 2026 GMT
            Not After : May 18 01:19:41 2026 GMT
        Subject: CN=6a012eae-a390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:1d:c1:01:9c:88:39:3b:39:47:2b:d5:97:
                    39:59:57:94:14:59:47:31:ce:90:18:ad:20:de:02:
                    c6:af:e8:08:3f:db:4a:93:5e:ad:cc:b4:73:d7:e4:
                    57:64:10:20:fd:d3:36:bd:ca:c0:ae:07:03:11:a6:
                    00:ba:9b:57:6a:16:b3:a9:dc:ea:2b:85:47:cb:32:
                    4a:f2:f3:03:75:88:db:e4:5c:8f:1a:b6:64:86:ff:
                    92:b0:07:e5:04:b1:7c:52:ce:47:08:28:e8:41:a5:
                    3a:1e:51:4e:c8:0e:0d:4b:f9:81:5e:99:5f:2d:57:
                    79:d0:f5:cd:0b:82:36:8f:66:72:50:ff:aa:08:03:
                    92:2b:dc:af:57:e9:e2:27:81:34:97:e8:12:1d:b3:
                    de:96:7a:5a:72:51:52:20:9c:76:a5:71:72:a1:4a:
                    d6:3e:f7:26:bc:55:26:ba:07:c2:62:3d:39:0b:a8:
                    30:dc:63:99:82:7d:e6:3d:ce:06:15:cd:20:c3:9b:
                    b3:aa:4f:0e:4b:d4:a5:56:4d:a6:5d:35:e6:63:4b:
                    bf:63:27:d0:03:f0:d0:07:7c:67:18:fb:6b:31:23:
                    58:de:32:14:f6:60:d1:fc:01:60:26:c5:c9:70:d2:
                    6f:9b:d4:95:07:f4:7d:e5:a0:50:4c:88:7e:af:f4:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A8:92:C6:CA:9C:AD:58:2C:03:80:71:C3:54:28:E9:C3:EC:AF:5A
            X509v3 Authority Key Identifier:
                keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:85:99:48:4a:6c:f4:5e:60:ef:af:bc:03:4a:62:1e:52:
         58:b7:01:74:18:d3:e2:00:91:ff:c1:2a:a2:12:a4:bb:98:10:
         05:98:2f:8f:d6:3c:a8:05:df:51:d1:bc:f0:33:f5:ac:c5:7e:
         8e:42:5f:ea:5b:d1:fd:20:03:3c:9f:5c:a5:87:a9:64:6e:ea:
         a8:22:69:64:ce:4f:30:bc:03:9c:7b:41:98:2e:1b:4a:19:5f:
         d0:a0:bd:11:10:aa:97:1b:d2:e4:d3:ef:c1:bd:6e:bb:8d:93:
         91:54:5b:73:12:08:79:4b:79:ad:b4:a8:e1:01:c1:49:a1:29:
         35:bc:b3:29:fb:69:70:b4:ea:c4:8f:93:d4:fa:3a:cf:4f:64:
         da:28:c8:2c:36:ef:e0:fd:00:6b:3c:bd:0c:be:c7:71:ac:10:
         f4:49:6c:65:a2:aa:be:53:ac:ab:58:77:2c:23:fa:42:27:56:
         aa:24:1e:09:80:21:d5:1a:35:66:aa:63:e3:ea:44:52:43:dd:
         50:3b:c7:5b:0e:bb:a6:7a:09:08:cc:02:7b:30:dd:01:a8:0b:
         7c:dd:cf:e6:3a:d4:d2:88:76:c3:58:34:a4:44:da:bd:4d:1c:
         92:d8:3d:39:b1:00:3d:fe:4e:3e:47:3b:b2:2f:ef:86:a1:54:
         0c:73:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:30 2026 by rpki-client