Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
File:                     R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft (raw, json)
Hash identifier:          sGBVJHV8Y1IjHAlSMuDL9dRc+XJOLuBHVJ+aRhafVe4=
Subject key identifier:   6A:80:3D:1F:ED:8D:22:02:22:B5:22:7F:1C:C6:9D:A7:A2:FA:53:D8
Authority key identifier: 47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
Certificate issuer:       /CN=A91676C8/serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
Manifest number:          16
Signing time:             Wed 13 May 2026 09:19:29 +0000
Manifest this update:     Wed 13 May 2026 09:19:28 +0000
Manifest next update:     Wed 20 May 2026 09:19:28 +0000
Files and hashes:         1: R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl (hash: 82vzTBETvAPkXQxZ+wfMUtQRqxdG6+elR3+PDxHsvpo=)
                          2: 37D59058463A11F1B0300B15B1833773.roa (hash: zkd8cnuE5ZeeK9/qXH2yfVJdPNCk0HxLARMnjMSdtkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl
                          rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676C8, serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
        Validity
            Not Before: May 13 09:19:28 2026 GMT
            Not After : May 20 09:19:28 2026 GMT
        Subject: CN=6a044220-6aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e4:c4:28:32:bc:7a:82:12:63:05:fd:fc:7c:
                    58:ed:af:b0:60:b6:3b:7f:42:12:6a:f8:47:55:7e:
                    b4:fd:f9:42:96:fe:f0:1f:59:65:fc:da:13:9b:fe:
                    da:ea:be:54:7a:03:8e:b6:ce:e4:a9:32:1d:54:b6:
                    2f:82:fb:c1:30:44:02:1c:59:69:24:41:4a:48:89:
                    22:9b:b9:22:48:5c:70:0b:69:d0:a3:42:c7:64:73:
                    b6:08:05:7e:4e:de:0c:f1:99:69:6d:e1:34:c8:fe:
                    d6:10:3f:ad:59:4c:61:65:76:9a:58:d9:a9:85:37:
                    cc:21:33:a6:e8:a8:0e:3a:ef:46:58:c0:40:15:d1:
                    10:64:76:6a:d6:02:1d:8c:2c:f1:2d:c1:43:a3:c5:
                    d3:8f:33:0e:e0:27:93:89:01:9d:8c:98:ec:ee:67:
                    23:40:2c:21:16:2c:d2:00:e3:59:c5:33:00:8c:1a:
                    fe:bb:bd:91:88:b7:17:19:dc:14:da:91:5e:7d:75:
                    36:49:71:bd:a8:a2:1b:b6:8c:83:96:bd:6e:df:36:
                    a7:dc:82:3c:8e:49:06:a6:18:69:fe:ec:bf:ea:b5:
                    a9:de:15:65:2c:fc:a6:f5:00:c9:90:9d:fd:4c:3f:
                    8a:33:19:c0:94:1c:e4:2b:b9:c0:2e:d3:18:c1:b2:
                    10:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:80:3D:1F:ED:8D:22:02:22:B5:22:7F:1C:C6:9D:A7:A2:FA:53:D8
            X509v3 Authority Key Identifier:
                keyid:47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5f:31:1d:8c:c4:5e:22:7c:a0:bf:87:2e:bb:cf:64:6f:90:
         d0:47:ed:d7:08:b6:62:0c:32:92:9a:05:5f:ea:f3:f4:17:c7:
         2d:21:01:cb:9d:3c:40:ce:1f:ad:0b:42:16:0e:75:b3:92:33:
         56:f5:14:ba:67:7c:70:ec:46:ed:9a:e9:16:7c:cf:fd:b5:bd:
         bd:85:65:73:73:1c:45:5f:b1:10:d3:1c:a9:ab:a1:93:0e:ea:
         40:25:12:3d:f8:2d:af:91:b5:03:47:fe:5a:21:2b:0d:73:ea:
         4f:53:81:de:2d:9d:38:11:04:89:f2:e1:fb:b9:06:13:aa:35:
         2c:f6:b6:30:57:22:30:fd:35:5b:97:65:fb:9d:35:e9:cc:3e:
         c2:a4:c4:80:3b:0f:d9:99:36:01:e1:0a:59:4c:35:79:09:07:
         06:2e:68:01:6e:37:54:53:0e:55:5c:aa:1f:f5:0b:60:fd:3f:
         ac:a8:60:30:9f:62:e9:09:56:e1:c8:e4:16:e4:cd:a4:e6:14:
         35:41:7d:5b:86:bf:db:4f:55:e2:2c:f1:37:10:4d:35:c8:fa:
         c0:d9:76:c5:c3:8c:cf:95:3b:04:42:ad:72:a7:0f:e9:1e:de:
         62:89:a0:68:bd:1b:8d:6f:39:c0:47:be:12:47:82:6e:a1:5c:
         48:f2:10:67
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NzZDODExMC8GA1UEBRMoNDdCNUIxRjMwQzZCQkRCQjExNjUxQ0M2QTA3OEZFQTc3
MjM3QTJFMjAeFw0yNjA1MTMwOTE5MjhaFw0yNjA1MjAwOTE5MjhaMBgxFjAUBgNV
BAMTDTZhMDQ0MjIwLTZhZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCX5MQoMrx6ghJjBf38fFjtr7Bgtjt/QhJq+EdVfrT9+UKW/vAfWWX82hOb/trq
vlR6A462zuSpMh1Uti+C+8EwRAIcWWkkQUpIiSKbuSJIXHALadCjQsdkc7YIBX5O
3gzxmWlt4TTI/tYQP61ZTGFldppY2amFN8whM6boqA4670ZYwEAV0RBkdmrWAh2M
LPEtwUOjxdOPMw7gJ5OJAZ2MmOzuZyNALCEWLNIA41nFMwCMGv67vZGItxcZ3BTa
kV59dTZJcb2oohu2jIOWvW7fNqfcgjyOSQamGGn+7L/qtaneFWUs/Kb1AMmQnf1M
P4ozGcCUHOQrucAu0xjBshDJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaoA9H+2N
IgIitSJ/HMadp6L6U9gwHwYDVR0jBBgwFoAUR7Wx8wxrvbsRZRzGoHj+p3I3ouIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NkM4LzJGOUIwMjI2NDRB
MzExRjFCREU5MEEzRkIxODMzNzczL1I3V3g4d3hydmJzUlpSekdvSGotcDNJM291
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUjdXeDh3eHJ2YnNSWlJ6R29Iai1wM0kzb3VJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3
NkM4LzJGOUIwMjI2NDRBMzExRjFCREU5MEEzRkIxODMzNzczL1I3V3g4d3hydmJz
UlpSekdvSGotcDNJM291SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCoXzEdjMReInygv4cuu89kb5DQR+3XCLZiDDKSmgVf6vP0F8ctIQHLnTxAzh+t
C0IWDnWzkjNW9RS6Z3xw7EbtmukWfM/9tb29hWVzcxxFX7EQ0xypq6GTDupAJRI9
+C2vkbUDR/5aISsNc+pPU4HeLZ04EQSJ8uH7uQYTqjUs9rYwVyIw/TVbl2X7nTXp
zD7CpMSAOw/ZmTYB4QpZTDV5CQcGLmgBbjdUUw5VXKof9Qtg/T+sqGAwn2LpCVbh
yOQW5M2k5hQ1QX1bhr/bT1XiLPE3EE01yPrA2XbFw4zPlTsEQq1ypw/pHt5iiaBo
vRuNbznAR74SR4JuoVxI8hBn
-----END CERTIFICATE-----
Generated at Wed May 13 12:05:56 2026 by rpki-client