Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
File:                     7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json)
Hash identifier:          rBP/4Igfj3kqq9y0vU1oiIcAGzloqBbCSQ5RWPT4g2I=
Subject key identifier:   0F:DC:F1:01:9F:CB:6D:57:EC:62:B7:C0:0E:6E:CF:4E:A9:F0:96:E6
Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
Certificate issuer:       /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
Manifest number:          0134
Signing time:             Mon 11 May 2026 05:40:04 +0000
Manifest this update:     Mon 11 May 2026 05:40:04 +0000
Manifest next update:     Mon 18 May 2026 05:40:04 +0000
Files and hashes:         1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: Hj3Ivy2AlFwTp70Dyp3jI2XRBfDCYxXX18gEXIrscOM=)
                          2: A647525E853B11EFB513D149C4F9AE02.roa (hash: 8/z43AfGGthVBc9cfR73JH6jugiVT0aL27yCo3q+XYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
                          rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
        Validity
            Not Before: May 11 05:40:04 2026 GMT
            Not After : May 18 05:40:04 2026 GMT
        Subject: CN=6a016bb4-2477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:b7:f5:ec:e3:c6:18:cd:98:5e:31:60:63:
                    dd:e6:e0:40:ed:ca:84:dc:3f:3d:aa:c3:1d:fd:c8:
                    2a:3b:9e:7b:40:eb:e3:e5:7c:b4:aa:9c:b2:a1:d6:
                    2a:3c:75:c1:d0:50:37:fe:ca:43:b4:bd:6a:f8:56:
                    db:63:7b:04:c8:7b:76:e1:4e:50:12:70:27:96:91:
                    6f:4f:ae:97:19:1e:bb:00:16:4a:31:fc:18:75:5c:
                    d5:c9:61:8a:a1:63:0d:88:67:f9:20:ce:32:31:79:
                    06:db:ba:64:21:37:cd:58:61:5d:9e:8d:a3:3c:6b:
                    53:7a:bd:d9:d7:ac:a4:4c:48:27:af:a4:7f:71:6d:
                    ba:7f:32:82:10:cc:30:6d:99:01:10:cb:ba:eb:c0:
                    d0:3b:3d:8b:f4:63:19:92:07:c7:3c:a5:50:6b:28:
                    16:8b:d4:8e:41:52:33:5b:18:27:6f:45:fd:3b:25:
                    38:2e:87:19:39:7f:38:56:7c:a3:22:d1:80:b5:fe:
                    78:f5:0c:0f:59:c8:a2:f7:78:b2:18:72:7c:18:6b:
                    25:96:43:6d:7d:d6:fd:5b:1e:bd:87:b9:df:6e:10:
                    d9:65:9a:0b:dc:40:02:34:d3:7c:01:15:18:52:b7:
                    5a:ad:45:73:63:52:f8:d6:14:95:df:68:68:84:59:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DC:F1:01:9F:CB:6D:57:EC:62:B7:C0:0E:6E:CF:4E:A9:F0:96:E6
            X509v3 Authority Key Identifier:
                keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:07:e2:c6:81:5a:1d:ed:af:42:10:64:87:82:93:0d:fa:8b:
         a8:eb:93:8a:9f:ca:34:79:a7:00:7d:c6:3e:90:b3:c5:04:f5:
         e5:42:44:d2:37:43:ee:0e:5c:35:00:74:fa:c7:e6:74:87:6e:
         28:38:99:a6:5c:fb:a4:ca:8b:a5:a0:e5:de:cb:b0:35:56:67:
         5b:3f:b7:44:86:bb:a6:c9:61:e6:19:a7:13:c2:75:c0:16:ce:
         d2:9c:a2:40:ac:9d:a3:7b:79:cb:d4:0a:38:5d:3b:26:b3:8f:
         a4:19:93:89:08:d2:aa:d3:04:ce:d4:b1:45:97:00:c5:5f:3a:
         56:39:fe:f2:a1:a6:bc:4e:6e:a7:05:83:5a:47:e8:8b:71:99:
         62:89:c9:3e:8f:5e:00:1d:0c:b5:bb:e1:c5:3b:55:7d:ad:54:
         60:71:21:1f:c4:86:a2:63:b1:1e:c1:f1:86:49:c0:09:03:30:
         9a:45:ed:c1:a6:05:8d:45:d5:34:36:7a:69:37:fb:30:e7:b2:
         b1:8c:44:48:21:b5:6a:f8:94:13:2e:1c:e6:17:ab:46:b7:9b:
         60:9e:00:30:89:8f:38:35:e6:6a:7b:d4:4a:c5:3b:10:57:77:
         65:de:34:bb:52:ff:53:e4:33:ee:74:b1:f2:95:bf:11:db:a3:
         41:75:07:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF
N0MxRTEyOEIwHhcNMjYwNTExMDU0MDA0WhcNMjYwNTE4MDU0MDA0WjAYMRYwFAYD
VQQDEw02YTAxNmJiNC0yNDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnl639ezjxhjNmF4xYGPd5uBA7cqE3D89qsMd/cgqO557QOvj5Xy0qpyyodYq
PHXB0FA3/spDtL1q+FbbY3sEyHt24U5QEnAnlpFvT66XGR67ABZKMfwYdVzVyWGK
oWMNiGf5IM4yMXkG27pkITfNWGFdno2jPGtTer3Z16ykTEgnr6R/cW26fzKCEMww
bZkBEMu668DQOz2L9GMZkgfHPKVQaygWi9SOQVIzWxgnb0X9OyU4LocZOX84Vnyj
ItGAtf549QwPWcii93iyGHJ8GGsllkNtfdb9Wx69h7nfbhDZZZoL3EACNNN8ARUY
UrdarUVzY1L41hSV32hohFlXeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/c8QGf
y21X7GK3wA5uz06p8JbmMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1
M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz
OGR1LVJnMjlCT19ud2VFb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYgfixoFaHe2vQhBkh4KTDfqLqOuTip/KNHmnAH3GPpCzxQT15UJE0jdD7g5c
NQB0+sfmdIduKDiZplz7pMqLpaDl3suwNVZnWz+3RIa7pslh5hmnE8J1wBbO0pyi
QKydo3t5y9QKOF07JrOPpBmTiQjSqtMEztSxRZcAxV86Vjn+8qGmvE5upwWDWkfo
i3GZYonJPo9eAB0MtbvhxTtVfa1UYHEhH8SGomOxHsHxhknACQMwmkXtwaYFjUXV
NDZ6aTf7MOeysYxESCG1aviUEy4c5herRrebYJ4AMImPODXmanvUSsU7EFd3Zd40
u1L/U+Qz7nSx8pW/EdujQXUHAA==
-----END CERTIFICATE-----
Generated at Tue May 12 23:38:52 2026 by rpki-client