Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
File:                     CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json)
Hash identifier:          qNmBEBXciMs3H4CWvJk+KVP067As5N9Oqybc2bjM5L0=
Subject key identifier:   9F:97:74:A7:C4:16:76:28:1F:CA:9A:64:1F:A9:3C:FC:F4:DA:94:8D
Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99
Certificate issuer:       /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
Manifest number:          79
Signing time:             Wed 13 May 2026 07:51:31 +0000
Manifest this update:     Wed 13 May 2026 07:51:31 +0000
Manifest next update:     Wed 20 May 2026 07:51:31 +0000
Files and hashes:         1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: v7a6hAxKQN6e/VAg+POiGgwHCTyxuaBXBqgrdVXJdbU=)
                          2: EC6B1EDAC3F811F0BE50C87AC4F9AE02.roa (hash: o62XZo2Qz1zImJWSvpxTK0mWq5l9UluAleNSitVqKg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
        Validity
            Not Before: May 13 07:51:31 2026 GMT
            Not After : May 20 07:51:31 2026 GMT
        Subject: CN=6a042d83-5143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:76:17:02:36:0a:6c:7d:f6:fe:0d:ab:4f:
                    bd:ad:d4:07:b2:44:21:b9:23:d1:93:d3:b1:bd:3d:
                    32:a3:9e:9f:1a:f9:32:4e:9a:9d:61:f7:82:8b:f5:
                    b9:1d:61:b2:29:44:f8:d2:b9:07:bf:58:9a:d7:bf:
                    97:9b:ad:fb:ed:31:0a:8c:be:ef:75:6f:1b:b0:cd:
                    c2:40:9f:38:e5:2c:00:1c:c4:74:42:29:01:3d:1e:
                    46:28:a0:85:a0:43:12:63:d3:35:01:08:45:6f:aa:
                    6d:36:e3:e0:1d:f6:67:df:05:b7:85:de:c3:6d:59:
                    ba:37:bd:c6:34:2a:a4:47:7e:07:1a:b3:c0:11:62:
                    8d:8a:48:c1:5a:3d:1c:eb:c0:da:11:3c:8d:27:64:
                    37:1d:7c:47:fa:df:c5:38:7c:a8:8f:e4:f3:c2:2c:
                    38:bb:46:c4:c3:39:7d:6b:8d:0a:a7:4d:c5:9e:e4:
                    10:b7:c8:a1:a9:f8:ed:a7:9d:1a:e4:1e:0d:99:67:
                    63:2c:0e:65:d9:79:21:1c:e3:5d:a5:cf:40:af:08:
                    06:4b:74:d4:89:80:a5:96:81:3f:5e:5c:f4:cc:7a:
                    af:aa:59:36:a9:c4:1b:aa:c7:88:49:0a:60:3a:0d:
                    af:f1:36:f8:f0:8b:95:cd:b8:b0:fa:15:00:66:e4:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:97:74:A7:C4:16:76:28:1F:CA:9A:64:1F:A9:3C:FC:F4:DA:94:8D
            X509v3 Authority Key Identifier:
                keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c9:f9:91:45:9c:ff:a3:71:8c:22:76:d0:8f:60:d8:bd:5b:
         29:64:72:8f:91:c7:34:5a:5b:4e:65:9c:c8:72:a6:8e:1b:30:
         9b:91:0e:49:e9:c2:72:34:42:45:ef:74:89:99:65:fa:de:06:
         3f:99:22:3e:be:08:a7:9b:89:57:d0:0e:ee:c3:17:9e:c6:51:
         f4:78:d9:3d:2b:b9:ea:9f:a1:2a:cb:c6:1c:55:91:68:86:b0:
         71:2b:ab:bd:24:8e:2f:31:bd:cb:b1:1a:11:82:0f:8b:a4:fd:
         b1:f2:f5:8b:12:3a:3e:35:54:79:f7:03:42:08:ba:87:d3:82:
         0e:30:81:72:8f:46:14:ed:20:63:e9:94:e2:76:8f:15:cd:e9:
         aa:81:86:f3:b4:a1:4c:7b:3a:ce:12:24:d6:b4:a0:ee:23:c6:
         01:f1:ce:9e:c7:52:ce:33:78:76:47:17:49:8a:7b:43:f4:f4:
         1d:1f:f3:64:eb:f9:18:55:d0:e5:f3:bf:26:1c:1e:e4:01:db:
         6a:16:23:7e:8a:1e:d3:92:11:12:d8:34:d8:78:b2:64:0f:80:
         a5:70:45:b7:7b:e4:dc:4a:d6:9b:ff:60:29:32:4b:56:0b:4e:
         b7:5c:cf:ad:78:a3:0e:70:0a:ac:d9:b5:86:e7:6b:39:91:c6:
         e8:c4:19:94
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RkEzNTExMC8GA1UEBRMoMDk1OEQ3QzdCNTc1NjdEOTY1RTE0ODA0ODE1MkUyQjQ3
OEZDNDM5OTAeFw0yNjA1MTMwNzUxMzFaFw0yNjA1MjAwNzUxMzFaMBgxFjAUBgNV
BAMTDTZhMDQyZDgzLTUxNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVzXYXAjYKbH32/g2rT72t1AeyRCG5I9GT07G9PTKjnp8a+TJOmp1h94KL9bkd
YbIpRPjSuQe/WJrXv5ebrfvtMQqMvu91bxuwzcJAnzjlLAAcxHRCKQE9HkYooIWg
QxJj0zUBCEVvqm024+Ad9mffBbeF3sNtWbo3vcY0KqRHfgcas8ARYo2KSMFaPRzr
wNoRPI0nZDcdfEf638U4fKiP5PPCLDi7RsTDOX1rjQqnTcWe5BC3yKGp+O2nnRrk
Hg2ZZ2MsDmXZeSEc412lz0CvCAZLdNSJgKWWgT9eXPTMeq+qWTapxBuqx4hJCmA6
Da/xNvjwi5XNuLD6FQBm5FhBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUn5d0p8QW
digfyppkH6k8/PTalI0wHwYDVR0jBBgwFoAUCVjXx7V1Z9ll4UgEgVLitHj8Q5kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGQTM1LzVFNDAzNERFOThC
OTExRjBCOTk2MEIyMEM0RjlBRTAyL0NWalh4N1YxWjlsbDRVZ0VnVkxpdEhqOFE1
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ1ZqWHg3VjFaOWxsNFVnRWdWTGl0SGo4UTVrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG
QTM1LzVFNDAzNERFOThCOTExRjBCOTk2MEIyMEM0RjlBRTAyL0NWalh4N1YxWjls
bDRVZ0VnVkxpdEhqOFE1ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCUyfmRRZz/o3GMInbQj2DYvVspZHKPkcc0WltOZZzIcqaOGzCbkQ5J6cJyNEJF
73SJmWX63gY/mSI+vginm4lX0A7uwxeexlH0eNk9K7nqn6Eqy8YcVZFohrBxK6u9
JI4vMb3LsRoRgg+LpP2x8vWLEjo+NVR59wNCCLqH04IOMIFyj0YU7SBj6ZTido8V
zemqgYbztKFMezrOEiTWtKDuI8YB8c6ex1LOM3h2RxdJintD9PQdH/Nk6/kYVdDl
878mHB7kAdtqFiN+ih7TkhES2DTYeLJkD4ClcEW3e+TcStab/2ApMktWC063XM+t
eKMOcAqs2bWG52s5kcboxBmU
-----END CERTIFICATE-----
Generated at Wed May 13 12:23:55 2026 by rpki-client