Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
File:                     7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json)
Hash identifier:          73n5xgtb/eJGVjwbolOoy7U2S4XiU4tIDVgOjgBHeVM=
Subject key identifier:   0A:03:E4:26:C3:4D:7A:68:D8:62:5E:9C:43:D0:15:4D:F7:EB:72:50
Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
Certificate issuer:       /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
Manifest number:          01ED
Signing time:             Wed 13 May 2026 03:23:18 +0000
Manifest this update:     Wed 13 May 2026 03:23:17 +0000
Manifest next update:     Wed 20 May 2026 03:23:17 +0000
Files and hashes:         1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: LXh0tSQjaoRi5rG8YKBsxSvf5GaSBz1+HdMTFbmXLuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
                          rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
        Validity
            Not Before: May 13 03:23:17 2026 GMT
            Not After : May 20 03:23:17 2026 GMT
        Subject: CN=6a03eea6-f38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b2:cc:96:2e:b0:d4:ef:60:4b:6a:77:84:44:
                    d2:14:9d:82:ef:f7:77:5c:4f:4e:bb:56:e5:1f:55:
                    0c:c6:76:36:f9:90:38:0a:35:37:93:4d:a7:ed:7c:
                    05:ba:5a:34:f9:6d:9e:e4:6f:1d:06:eb:96:1b:13:
                    5f:30:2a:d7:88:65:30:63:86:ac:34:a2:21:29:45:
                    24:d8:d6:e1:69:8e:c0:6e:cd:8b:f7:82:82:2a:8e:
                    c6:4c:dd:d4:75:64:5d:6b:b8:6d:e4:f2:f0:55:90:
                    ea:81:4d:96:b0:2c:f9:41:ed:12:e6:f8:25:c8:15:
                    a8:6c:8b:bd:4b:6f:0f:a0:6c:1e:e7:8c:f4:e9:c7:
                    a9:b4:c2:5b:6b:da:d6:d4:d2:8a:b4:46:96:63:c0:
                    bf:73:94:45:8a:a6:85:f6:e5:cd:64:7d:8b:6c:f2:
                    78:89:b3:10:75:28:43:cc:16:7a:dc:b8:c1:a2:6b:
                    19:cb:6a:d3:15:12:43:2d:e9:95:9e:2f:bf:06:e2:
                    eb:2d:fd:de:93:85:08:41:53:5a:d6:22:87:b8:7a:
                    90:59:e6:7f:0a:68:98:39:f7:f9:8e:b4:74:d9:13:
                    e3:37:95:a3:2c:1a:a6:a0:6b:ee:82:8a:c5:95:e0:
                    0a:8a:f8:dd:a8:a5:79:a9:4d:13:0b:51:03:d8:40:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:03:E4:26:C3:4D:7A:68:D8:62:5E:9C:43:D0:15:4D:F7:EB:72:50
            X509v3 Authority Key Identifier:
                keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:51:41:2b:e9:d7:b4:3a:d4:9f:86:a0:46:bc:29:d4:ae:9e:
         4c:a2:24:05:01:e9:36:89:73:b4:94:b5:69:4e:dd:bf:7b:d5:
         2e:64:60:f9:23:44:aa:34:16:9f:34:20:b3:06:89:8c:29:8b:
         f4:98:90:75:da:3b:76:24:07:76:ca:37:37:45:e0:8b:2e:05:
         db:da:33:49:2e:6f:17:b9:4e:0a:7e:cc:7a:f8:db:9a:80:94:
         a0:96:5a:57:4d:45:ae:5e:f1:3a:a0:dc:4a:e6:bd:c2:15:57:
         4b:b9:f7:3c:49:89:14:df:0f:94:51:f0:6b:7b:2f:f0:70:0c:
         88:89:d0:05:93:3f:29:e0:b7:20:8c:58:59:35:9f:cb:ed:91:
         88:65:81:af:3c:e1:fd:76:38:db:ed:e4:6c:ae:61:c6:5a:d0:
         8d:bf:50:0c:b4:65:52:7b:2f:23:6d:4e:6b:1e:f2:97:82:33:
         de:ea:e6:68:5b:1b:00:7a:83:dc:b3:64:89:c1:45:57:79:a7:
         11:a8:73:b9:9e:d7:28:77:a1:cc:57:73:9e:f5:00:1f:21:1c:
         c8:f3:2d:6f:0f:f0:c0:a7:3e:23:d1:08:fb:54:7c:23:58:81:
         e1:61:df:7c:40:91:31:af:84:e4:2b:79:4b:a1:47:c1:80:cc:
         d6:94:71:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB
MEVCRDdENEIwHhcNMjYwNTEzMDMyMzE3WhcNMjYwNTIwMDMyMzE3WjAYMRYwFAYD
VQQDEw02YTAzZWVhNi1mMzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwrLMli6w1O9gS2p3hETSFJ2C7/d3XE9Ou1blH1UMxnY2+ZA4CjU3k02n7XwF
ulo0+W2e5G8dBuuWGxNfMCrXiGUwY4asNKIhKUUk2NbhaY7Abs2L94KCKo7GTN3U
dWRda7ht5PLwVZDqgU2WsCz5Qe0S5vglyBWobIu9S28PoGwe54z06ceptMJba9rW
1NKKtEaWY8C/c5RFiqaF9uXNZH2LbPJ4ibMQdShDzBZ63LjBomsZy2rTFRJDLemV
ni+/BuLrLf3ek4UIQVNa1iKHuHqQWeZ/CmiYOff5jrR02RPjN5WjLBqmoGvugorF
leAKivjdqKV5qU0TC1ED2EBi3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoD5CbD
TXpo2GJenEPQFU3363JQMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD
NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ
VU44Tnl5MG5hV3VnNjlmVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqFFBK+nXtDrUn4agRrwp1K6eTKIkBQHpNolztJS1aU7dv3vVLmRg+SNEqjQW
nzQgswaJjCmL9JiQddo7diQHdso3N0Xgiy4F29ozSS5vF7lOCn7MevjbmoCUoJZa
V01Frl7xOqDcSua9whVXS7n3PEmJFN8PlFHwa3sv8HAMiInQBZM/KeC3IIxYWTWf
y+2RiGWBrzzh/XY42+3kbK5hxlrQjb9QDLRlUnsvI21Oax7yl4Iz3urmaFsbAHqD
3LNkicFFV3mnEahzuZ7XKHehzFdznvUAHyEcyPMtbw/wwKc+I9EI+1R8I1iB4WHf
fECRMa+E5Ct5S6FHwYDM1pRxPg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:30:59 2026 by rpki-client