Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
File:                     w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json)
Hash identifier:          80NKNbXSwEDQAwhjYaMULahxSwYDGGGPiCGg46ryHRM=
Subject key identifier:   FB:C6:54:57:C3:A5:65:48:95:6C:FE:1E:A9:72:0D:E9:FA:4E:97:49
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Certificate issuer:       /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial:       1A79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
Manifest number:          1A6D
Signing time:             Tue 12 May 2026 16:20:31 +0000
Manifest this update:     Tue 12 May 2026 16:20:31 +0000
Manifest next update:     Tue 19 May 2026 16:20:31 +0000
Files and hashes:         1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: K9CGLGZY17pI6bfKlkxRNfSclfptariQbCn1/xHmm1o=)
                          2: 885DA760AA8811E799348329C4F9AE02.roa (hash: OgMqHQ2yVMx+7d3BSt5zC2aY7l1q21WR4K+bA1B1tR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
                          rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6777 (0x1a79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
        Validity
            Not Before: May 12 16:20:31 2026 GMT
            Not After : May 19 16:20:31 2026 GMT
        Subject: CN=6a03534f-c844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:b7:30:f7:81:56:f9:e6:f7:d9:fc:f7:c0:
                    63:62:49:f4:72:4c:82:24:ae:53:f1:4c:74:6e:c7:
                    a6:94:0c:f4:4a:04:0d:c3:b4:59:be:e4:26:c7:37:
                    14:fe:90:2f:d6:11:11:2c:1b:82:27:2c:ee:28:8a:
                    3b:60:a1:b1:71:01:55:ed:1c:dd:d3:c7:ce:6f:07:
                    4c:cf:b3:ff:f8:e4:8d:02:09:97:93:96:d4:b8:76:
                    b4:5f:24:c1:bf:05:23:e3:57:35:8f:da:e3:38:ef:
                    6b:db:1a:28:93:b5:13:0b:f6:5a:bc:2b:97:a0:f9:
                    61:8c:ce:bb:e7:e9:14:8b:eb:4f:9c:de:78:5c:eb:
                    0c:34:5a:70:63:55:31:b1:5e:2c:94:71:34:73:f9:
                    74:23:9f:08:72:d0:f9:2e:da:ac:b4:72:05:91:2d:
                    29:2c:b3:0d:0a:50:66:e9:20:16:0c:a3:91:42:36:
                    79:dd:6e:c3:f4:0e:6d:ee:9c:8b:57:56:a9:fa:20:
                    8a:5e:4d:ad:b0:6b:03:98:a3:d4:dc:b5:07:99:fe:
                    4c:25:c4:6f:f6:36:fa:dc:a9:e7:ef:36:44:cd:5c:
                    4b:1d:8a:f9:e0:02:e6:1c:9d:2c:43:30:02:27:02:
                    09:a9:8f:ac:5c:e6:60:1e:5a:db:d7:6b:6a:85:97:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C6:54:57:C3:A5:65:48:95:6C:FE:1E:A9:72:0D:E9:FA:4E:97:49
            X509v3 Authority Key Identifier:
                keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:b7:9e:e3:65:1f:32:b1:fe:8d:12:c4:3a:27:c4:bd:d2:4e:
         8b:d4:26:fe:0e:24:2d:25:d8:c6:d5:2e:cc:61:50:15:16:14:
         e9:9d:ac:ca:59:f6:b6:c0:bb:21:31:6a:64:fa:02:9a:2b:e1:
         27:3b:ae:2d:17:be:16:5f:e4:eb:ed:ac:66:30:8a:57:f4:06:
         18:f6:a6:6d:2b:8e:07:75:2d:ec:97:e6:b5:2d:e2:ec:5f:b1:
         8d:4b:ac:a5:4f:e5:d5:b2:15:78:bd:1e:00:54:1d:82:cf:63:
         4f:df:2e:e0:d1:6b:14:f0:c9:f6:61:4f:9a:98:27:f5:00:eb:
         d4:6f:f3:4e:70:88:8a:6f:40:2a:4a:e1:66:0d:af:c1:7d:dc:
         12:9e:91:18:bd:29:cf:59:5b:7d:70:13:61:08:69:67:38:55:
         2f:5f:1d:6b:fe:f3:c1:84:12:2d:f6:16:46:57:82:72:aa:fd:
         cb:49:58:4c:80:42:d0:18:15:8d:7c:dc:88:53:79:56:5d:c3:
         2d:61:79:51:0c:4b:1f:e5:b9:4f:d6:44:3d:a8:95:be:cb:db:
         9b:b8:fd:f0:3c:ae:0d:eb:51:c8:77:92:c2:2b:c6:1d:17:10:
         c0:e4:ea:1f:57:90:e4:fc:9f:be:87:ed:3d:07:4c:9c:ab:59:
         66:df:56:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD
OTI4QkExNzMwHhcNMjYwNTEyMTYyMDMxWhcNMjYwNTE5MTYyMDMxWjAYMRYwFAYD
VQQDEw02YTAzNTM0Zi1jODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5S3MPeBVvnm99n898BjYkn0ckyCJK5T8Ux0bsemlAz0SgQNw7RZvuQmxzcU
/pAv1hERLBuCJyzuKIo7YKGxcQFV7Rzd08fObwdMz7P/+OSNAgmXk5bUuHa0XyTB
vwUj41c1j9rjOO9r2xook7UTC/ZavCuXoPlhjM675+kUi+tPnN54XOsMNFpwY1Ux
sV4slHE0c/l0I58IctD5LtqstHIFkS0pLLMNClBm6SAWDKORQjZ53W7D9A5t7pyL
V1ap+iCKXk2tsGsDmKPU3LUHmf5MJcRv9jb63Knn7zZEzVxLHYr54ALmHJ0sQzAC
JwIJqY+sXOZgHlrb12tqhZdWtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvGVFfD
pWVIlWz+HqlyDen6TpdJMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw
MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ
NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzbee42UfMrH+jRLEOifEvdJOi9Qm/g4kLSXYxtUuzGFQFRYU6Z2syln2tsC7
ITFqZPoCmivhJzuuLRe+Fl/k6+2sZjCKV/QGGPambSuOB3Ut7JfmtS3i7F+xjUus
pU/l1bIVeL0eAFQdgs9jT98u4NFrFPDJ9mFPmpgn9QDr1G/zTnCIim9AKkrhZg2v
wX3cEp6RGL0pz1lbfXATYQhpZzhVL18da/7zwYQSLfYWRleCcqr9y0lYTIBC0BgV
jXzciFN5Vl3DLWF5UQxLH+W5T9ZEPaiVvsvbm7j98DyuDetRyHeSwivGHRcQwOTq
H1eQ5PyfvoftPQdMnKtZZt9WQQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:12:51 2026 by rpki-client