Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
File:                     _7jr91F1lPQetjZXPZajVwaXSbk.mft (raw, json)
Hash identifier:          1QFeE/v39hihmbdh++jn7JpAlg7XMVa8Uwk0bUNCuEM=
Subject key identifier:   18:3C:AD:B1:D5:EA:74:C6:D6:D7:73:E1:A3:46:FA:67:F5:18:12:3A
Authority key identifier: FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
Certificate issuer:       /CN=A9191136/serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
Manifest number:          76
Signing time:             Mon 11 May 2026 07:55:12 +0000
Manifest this update:     Mon 11 May 2026 07:55:12 +0000
Manifest next update:     Mon 18 May 2026 07:55:12 +0000
Files and hashes:         1: _7jr91F1lPQetjZXPZajVwaXSbk.crl (hash: zGdYUxlgstXHeTx6xDNZXAWM0QKLGGxfPew1Nr9nGtI=)
                          2: 97B512889AA911F08374FE83C4F9AE02.roa (hash: S1UvrempQuAJU92CzhHT6GIApLC8+2XtBw15QdJaVbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl
                          rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191136, serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
        Validity
            Not Before: May 11 07:55:12 2026 GMT
            Not After : May 18 07:55:12 2026 GMT
        Subject: CN=6a018b60-0d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:da:9a:7b:7e:c7:c5:a0:8c:83:23:a5:b2:47:
                    0a:2d:c2:2c:71:8f:54:87:ad:73:88:78:4e:c3:35:
                    78:44:dd:22:97:3d:21:22:51:83:8e:2b:19:52:63:
                    c0:e5:90:35:e4:44:66:02:0e:e6:54:6c:82:df:da:
                    dc:6d:e4:8f:12:66:6d:5d:56:83:88:27:f6:b9:51:
                    ef:5e:ca:39:4b:8d:6c:de:ae:d3:64:a2:49:36:ae:
                    a9:8c:7e:3d:14:ef:16:81:6e:3c:ea:66:56:ad:e1:
                    b5:39:79:00:c7:c0:96:22:64:17:a9:e0:2b:d3:0d:
                    2d:cd:30:f8:2d:fd:7d:dd:78:7b:6e:ce:b4:e0:3b:
                    ae:a4:26:33:63:5e:b3:44:64:fd:bb:ae:bb:14:33:
                    95:fb:1e:30:f3:bd:30:f4:67:36:ca:77:c1:71:0a:
                    a7:50:f6:14:60:0e:cd:ee:60:26:f0:ee:fb:91:20:
                    5a:77:56:d3:54:64:f7:8c:af:1b:79:d3:32:05:c0:
                    09:13:27:96:82:b9:99:7a:e8:81:b4:d0:89:50:70:
                    e7:f6:91:4a:13:e0:f3:37:4f:89:c7:73:6b:6e:a0:
                    fc:c1:96:f8:2e:1c:34:42:60:2e:1d:d9:c0:f5:10:
                    65:d8:e9:17:cb:90:01:e6:c0:09:e1:5e:c3:a4:0d:
                    43:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:AD:B1:D5:EA:74:C6:D6:D7:73:E1:A3:46:FA:67:F5:18:12:3A
            X509v3 Authority Key Identifier:
                keyid:FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:17:5e:bb:ad:ca:30:5e:3d:f7:e5:94:33:cf:14:9f:2f:8f:
         51:d1:8e:86:a6:d2:e9:f2:41:39:52:b0:37:c5:f3:da:f2:99:
         a1:66:09:dd:73:6a:4f:98:62:c1:05:19:13:c7:4e:04:98:5d:
         74:96:ae:67:c8:e7:c7:2d:4e:c1:0c:51:2c:11:ab:79:17:41:
         97:77:eb:2e:0b:07:a4:6a:70:c7:b9:a8:f9:7a:da:a2:cd:34:
         f3:e8:19:4f:00:74:b0:c2:35:13:c9:08:9e:42:3e:4e:55:72:
         1b:08:01:5d:bc:84:76:14:b1:9a:ae:c5:fa:a3:af:59:5d:43:
         30:e5:97:30:3b:53:9d:46:25:72:b5:a4:84:3d:65:c3:a1:0f:
         1f:83:4b:9c:a8:63:d2:db:2a:dc:d8:4b:ce:ef:1e:17:9a:3b:
         f8:68:55:97:21:dd:32:b6:80:e7:4c:27:8a:c9:1a:29:32:eb:
         c2:85:b8:87:76:9b:bb:b8:8a:00:56:e1:93:b6:f1:21:ed:b0:
         88:b1:b6:c9:cc:62:da:c4:a2:28:8a:2a:3f:60:7e:94:7b:a6:
         84:e4:5b:f3:92:88:e3:a0:77:9b:6f:1a:33:41:7c:01:4d:2c:
         f8:c6:ba:e6:2e:f9:47:7e:45:60:fd:40:72:11:a5:dc:41:23:
         c5:78:99:79
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MTEzNjExMC8GA1UEBRMoRkZCOEVCRjc1MTc1OTRGNDFFQjYzNjU3M0Q5NkEzNTcw
Njk3NDlCOTAeFw0yNjA1MTEwNzU1MTJaFw0yNjA1MTgwNzU1MTJaMBgxFjAUBgNV
BAMTDTZhMDE4YjYwLTBkOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCU2pp7fsfFoIyDI6WyRwotwixxj1SHrXOIeE7DNXhE3SKXPSEiUYOOKxlSY8Dl
kDXkRGYCDuZUbILf2txt5I8SZm1dVoOIJ/a5Ue9eyjlLjWzertNkokk2rqmMfj0U
7xaBbjzqZlat4bU5eQDHwJYiZBep4CvTDS3NMPgt/X3deHtuzrTgO66kJjNjXrNE
ZP27rrsUM5X7HjDzvTD0ZzbKd8FxCqdQ9hRgDs3uYCbw7vuRIFp3VtNUZPeMrxt5
0zIFwAkTJ5aCuZl66IG00IlQcOf2kUoT4PM3T4nHc2tuoPzBlvguHDRCYC4d2cD1
EGXY6RfLkAHmwAnhXsOkDUM/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGDytsdXq
dMbW13Pho0b6Z/UYEjowHwYDVR0jBBgwFoAU/7jr91F1lPQetjZXPZajVwaXSbkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMTM2LzAzQzQyODdBOUFB
OTExRjA5NUFBMDQ4MEM0RjlBRTAyL183anI5MUYxbFBRZXRqWlhQWmFqVndhWFNi
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvXzdqcjkxRjFsUFFldGpaWFBaYWpWd2FYU2JrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx
MTM2LzAzQzQyODdBOUFBOTExRjA5NUFBMDQ4MEM0RjlBRTAyL183anI5MUYxbFBR
ZXRqWlhQWmFqVndhWFNiay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCxF167rcowXj335ZQzzxSfL49R0Y6GptLp8kE5UrA3xfPa8pmhZgndc2pPmGLB
BRkTx04EmF10lq5nyOfHLU7BDFEsEat5F0GXd+suCwekanDHuaj5etqizTTz6BlP
AHSwwjUTyQieQj5OVXIbCAFdvIR2FLGarsX6o69ZXUMw5ZcwO1OdRiVytaSEPWXD
oQ8fg0ucqGPS2yrc2EvO7x4Xmjv4aFWXId0ytoDnTCeKyRopMuvChbiHdpu7uIoA
VuGTtvEh7bCIsbbJzGLaxKIoiio/YH6Ue6aE5FvzkojjoHebbxozQXwBTSz4xrrm
LvlHfkVg/UByEaXcQSPFeJl5
-----END CERTIFICATE-----
Generated at Wed May 13 10:28:21 2026 by rpki-client