Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
File:                     7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json)
Hash identifier:          xOsXfELFmZV1nl5X1vdYWDBJY2Si8tR7cDHmUaGS3sE=
Subject key identifier:   65:79:9D:CB:85:D3:1F:E9:F1:CE:7D:57:17:80:53:22:20:C1:F6:DB
Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
Certificate issuer:       /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
Certificate serial:       075E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
Manifest number:          0752
Signing time:             Tue 12 May 2026 21:47:48 +0000
Manifest this update:     Tue 12 May 2026 21:47:47 +0000
Manifest next update:     Tue 19 May 2026 21:47:47 +0000
Files and hashes:         1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: DymkmSOHo6BlQ7alKgOhxKB0bZ4Mm6p46Fz68pkiurM=)
                          2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: Y08aauLWlD/3KbKUWbhD8x6QFYVQbXZtknrvh7LrAZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl
                          rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1886 (0x75e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
        Validity
            Not Before: May 12 21:47:47 2026 GMT
            Not After : May 19 21:47:47 2026 GMT
        Subject: CN=6a03a003-9212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:db:26:d9:44:78:2a:8c:69:2a:84:56:b4:
                    f1:c1:78:83:a6:5e:26:87:cc:4d:b2:43:a5:09:02:
                    3d:0e:da:28:5e:68:07:a2:98:92:8b:45:ad:f4:1c:
                    b4:2a:66:31:36:c4:93:88:c7:6b:00:a2:3c:4e:1e:
                    bc:da:24:d1:8e:d3:d2:3e:7c:3f:6e:6e:40:a6:36:
                    0d:06:b8:e6:cc:3b:65:f2:07:d5:41:d7:8e:a8:10:
                    c2:31:1e:27:19:0c:11:c7:cd:14:b0:59:a3:b8:29:
                    1f:95:e2:78:6d:61:ab:b4:f7:84:ef:9f:02:56:64:
                    d7:79:6d:28:40:c4:b8:a7:0b:d1:4e:b6:81:97:e6:
                    44:83:3e:ef:0a:e9:57:6a:ce:66:7c:a4:82:30:48:
                    4c:d5:aa:fb:a1:23:c2:ea:af:c2:76:6d:c8:21:d7:
                    24:4d:8a:08:d2:9e:34:1e:7f:19:c2:87:26:6a:f2:
                    3c:34:9e:7f:f1:07:f4:e5:91:fa:f6:88:d9:2b:84:
                    bc:3c:f1:40:aa:bc:cb:20:9d:1a:7b:62:14:cf:81:
                    c6:95:f7:4c:b6:9b:4d:49:43:07:27:7e:2b:57:43:
                    dc:2e:e4:a7:2d:8a:52:a8:cf:6f:b7:ae:50:e9:92:
                    47:61:e9:30:e9:58:91:69:a4:c4:13:ba:f9:30:52:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:79:9D:CB:85:D3:1F:E9:F1:CE:7D:57:17:80:53:22:20:C1:F6:DB
            X509v3 Authority Key Identifier:
                keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:47:31:68:25:6c:b8:1e:93:8f:d0:6c:ed:0d:b1:1f:9e:89:
         36:e5:03:6c:92:c7:86:41:78:24:52:7c:21:55:57:eb:4c:69:
         c5:d9:ef:1c:34:40:4e:74:88:5f:33:f4:16:a5:ed:3e:c4:1b:
         82:bc:62:b7:0f:d2:a7:a8:dd:9f:93:1f:02:a0:8c:07:6b:f2:
         f0:9d:48:56:15:bd:08:f4:7b:a3:2f:ab:75:65:68:15:aa:1f:
         1d:c9:4d:a0:f0:d9:4b:81:e7:9c:60:8f:8a:73:27:58:b9:7d:
         bd:fb:29:7c:86:9f:a7:b1:b8:90:1c:cc:d5:99:1d:b3:72:af:
         e6:3d:ce:fe:3b:b0:eb:79:6b:a4:2a:98:f0:5b:ec:fb:93:5c:
         b2:ce:bd:00:f1:f4:ea:dd:b6:f1:40:bd:99:16:f3:c4:c8:1d:
         76:c5:a6:87:42:1e:40:28:f3:2f:8c:c0:cd:92:1b:72:1e:3b:
         40:56:18:5b:6e:dc:6f:30:9a:12:a2:40:5c:2e:e6:40:e7:94:
         05:4d:8b:b3:74:9d:01:cd:f7:b1:a7:f2:c0:ff:84:98:1c:ba:
         13:72:05:7c:f7:73:01:f6:84:b3:c4:31:3d:59:3b:4f:e4:6a:
         8d:d7:00:3c:1f:4f:9b:04:da:3c:ba:44:d9:6e:1e:9c:02:4a:
         02:f6:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:56 2026 by rpki-client