Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
File:                     m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft (raw, json)
Hash identifier:          xQ+Z8jaVJUu3GnrwJokoQZbDwtqWM0lq9+Uzb54L6S4=
Subject key identifier:   DB:1A:B8:67:B9:38:E3:B7:E1:C5:37:E1:34:D5:A6:0A:C4:D4:A5:01
Authority key identifier: 9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4
Certificate issuer:       /CN=A9164DAC/serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
Manifest number:          7B
Signing time:             Mon 11 May 2026 07:50:42 +0000
Manifest this update:     Mon 11 May 2026 07:50:42 +0000
Manifest next update:     Mon 18 May 2026 07:50:42 +0000
Files and hashes:         1: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl (hash: poS+jcefFyhZphL8eZL0B/e4/KGxqYNRp/pHFNs2wVs=)
                          2: A8AFC432909711F0BDFBAA86C4F9AE02.roa (hash: HNVWm0RLnw2hNl5QaR5nbjBl2U/eg22G7BQdjjjHRhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164DAC, serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4
        Validity
            Not Before: May 11 07:50:42 2026 GMT
            Not After : May 18 07:50:42 2026 GMT
        Subject: CN=6a018a52-c505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:9e:5c:3e:6e:b7:f0:be:11:b5:0a:64:53:
                    e7:b5:12:8e:8f:bb:11:08:95:ec:38:c8:bc:88:08:
                    37:dd:89:02:ec:7d:25:66:a9:fd:3f:93:0d:63:2a:
                    f3:da:71:bf:9c:8e:57:d6:3b:b0:f8:89:6a:e4:41:
                    62:af:89:6e:37:8b:8e:2a:b8:df:5a:7d:ec:8a:d8:
                    87:2e:5c:ce:b1:45:93:9b:b1:d5:c1:a4:2d:75:61:
                    6a:47:f7:7b:f2:d6:be:68:c0:2c:4f:30:f0:c2:07:
                    e7:b1:6d:03:6d:53:8f:89:83:e4:93:89:b5:70:4d:
                    04:69:5b:10:c2:5a:68:90:ad:d0:19:85:3e:36:d8:
                    54:d4:24:3a:79:73:8c:c0:41:4d:9b:9b:c3:bc:09:
                    b8:74:7e:ad:4e:5b:8d:1b:a5:a1:8f:39:f1:5e:41:
                    40:b7:4b:70:66:9e:06:fb:02:17:cb:6d:eb:c0:95:
                    bf:cb:e0:87:65:39:a2:eb:8d:cf:7e:fc:11:90:16:
                    3b:cb:0b:58:d4:ad:44:60:9a:67:91:52:33:0e:35:
                    07:cf:28:3d:7f:41:d3:f4:7f:af:be:4b:b7:b8:b0:
                    ba:53:31:4d:1d:0a:61:0f:b0:2a:c0:37:ad:25:cc:
                    3b:68:a5:63:5d:9d:ee:3c:26:2e:5a:a9:14:4e:0f:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1A:B8:67:B9:38:E3:B7:E1:C5:37:E1:34:D5:A6:0A:C4:D4:A5:01
            X509v3 Authority Key Identifier:
                keyid:9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:27:63:1f:b3:3a:8e:05:da:dc:4e:4b:f1:f2:ac:03:0b:db:
         ae:39:25:ed:13:28:90:71:be:cf:03:73:2c:ab:fe:fe:62:6b:
         22:1c:a9:cd:89:64:4a:d6:09:41:7f:ea:9e:45:db:db:60:a9:
         14:ec:90:14:ba:a0:5a:b4:ac:3c:26:26:8c:60:9c:11:d7:25:
         c2:88:37:e0:59:1f:da:ab:52:03:07:84:bd:69:08:cf:38:29:
         96:cd:a4:c7:7b:3f:5a:7d:97:28:22:35:49:b5:bc:ce:08:41:
         2e:06:be:1d:99:ad:dd:c1:10:81:6c:0b:40:57:1d:7e:46:ef:
         5c:e1:67:07:b3:48:88:0d:85:17:4e:8c:df:cb:1d:eb:09:b5:
         87:b1:19:77:4d:ba:75:0c:d6:48:ba:e7:06:d5:2b:35:b6:a1:
         31:81:fd:cf:25:27:73:5c:d9:ed:95:33:a3:47:18:da:32:61:
         be:97:7c:7b:3f:6a:8d:34:46:03:99:6a:6f:a6:f8:6a:06:ae:
         a1:82:4e:5c:df:43:9c:d0:69:96:70:ee:0d:e5:25:17:31:68:
         a4:2d:d8:d2:fc:29:1e:a2:64:0d:34:5e:c0:dd:3c:17:cb:3f:
         d5:03:eb:50:91:1e:a1:cf:80:53:83:f6:12:71:08:a7:ec:a5:
         bb:43:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:14 2026 by rpki-client