Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
File:                     7enmnD0KkdKXM8a3AvPMSL7dzuk.mft (raw, json)
Hash identifier:          RO+5SzHzA5eZxYwPgD1Jbdt3/Ck+uCJUkVejVfpUJzI=
Subject key identifier:   B3:32:58:94:39:93:01:CE:62:CB:8D:9E:41:14:70:8D:42:6A:CA:A1
Authority key identifier: ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
Certificate issuer:       /CN=A9193869/serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
Manifest number:          65
Signing time:             Mon 11 May 2026 08:07:17 +0000
Manifest this update:     Mon 11 May 2026 08:07:17 +0000
Manifest next update:     Mon 18 May 2026 08:07:17 +0000
Files and hashes:         1: 7enmnD0KkdKXM8a3AvPMSL7dzuk.crl (hash: j3lB0upjYlCOcaC8tC7ZjbMyJLyEPO3J5N4cz4ubNcM=)
                          2: 00C05CEAB7D511F0AE891D43C4F9AE02.roa (hash: kvQNF7TaPuCVQY6DNWwT5gPRwcZV8e8e+6EbmMvjSpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
                          rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193869, serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
        Validity
            Not Before: May 11 08:07:17 2026 GMT
            Not After : May 18 08:07:17 2026 GMT
        Subject: CN=6a018e35-7117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:65:4f:f0:8e:16:03:86:f2:49:14:a3:6e:
                    d4:48:13:3c:18:d6:fc:70:c3:96:b6:37:83:59:87:
                    49:43:e8:c3:6e:6c:3f:6e:51:68:0b:9c:b7:2c:ec:
                    15:41:5d:32:44:bc:c6:c0:04:e5:fb:ac:12:f1:12:
                    8c:a9:e4:f8:0a:02:47:d6:15:7c:ce:04:1f:ec:05:
                    be:11:28:ae:44:9c:bf:2c:7e:da:82:af:58:c9:75:
                    60:0d:8f:5d:80:61:e5:b1:5b:5d:c6:44:e5:98:ef:
                    5c:ca:cf:28:0a:e2:fa:77:33:75:0d:4d:f6:58:8f:
                    48:eb:e7:fa:e0:8f:50:44:7a:ca:15:34:f1:41:3e:
                    1f:f2:c6:92:06:20:fd:f6:0c:18:f0:72:e9:cd:43:
                    f0:5e:a9:5c:64:12:9c:22:8b:4a:19:88:7b:ed:c7:
                    08:7c:0e:1a:a9:1b:bd:75:97:a9:24:45:37:f3:72:
                    b2:20:5a:db:11:fb:fa:e8:73:f1:7c:14:44:dc:ea:
                    7c:d3:9d:24:45:44:3e:6b:46:f6:df:15:6a:f9:8d:
                    41:31:18:8a:6d:ab:79:1b:a2:9d:fa:58:83:ee:b0:
                    06:8f:56:a6:b4:98:33:ac:3b:a1:b7:62:5c:76:dc:
                    68:cd:ae:30:2a:20:4b:bb:7f:18:7b:05:23:84:af:
                    8a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:32:58:94:39:93:01:CE:62:CB:8D:9E:41:14:70:8D:42:6A:CA:A1
            X509v3 Authority Key Identifier:
                keyid:ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:91:de:3b:02:57:78:2d:1c:f6:ef:0d:fe:5c:85:04:ab:70:
         10:ec:26:ef:8c:5f:8c:e0:3b:d8:80:a3:fb:73:64:c2:86:5d:
         b8:7d:b1:b5:e9:43:37:c7:c5:38:61:75:8c:d1:c8:46:b9:58:
         8c:a4:46:76:33:12:45:2e:fa:78:15:52:a6:a6:3d:f0:46:2c:
         78:0a:97:00:9d:ca:83:bf:17:bf:c0:37:09:f4:73:11:9a:cf:
         e6:c3:dd:d8:f2:8f:2c:c0:ad:49:dc:23:8e:69:a5:7b:1d:7d:
         c8:a5:3a:df:cb:f6:f1:ec:26:de:3e:12:27:2b:99:50:bf:d6:
         6e:47:df:88:7a:ee:d9:4c:e6:37:99:47:a4:fb:cf:83:7f:8d:
         5e:15:cc:53:2e:30:22:53:af:21:cc:1f:b9:6d:62:b1:43:6b:
         0e:da:75:09:f7:2f:e2:8d:27:bd:f3:4b:8f:1c:5c:14:e2:a6:
         a5:e7:d5:64:1a:54:aa:30:d7:ff:9e:81:88:2a:d6:12:82:d2:
         32:b3:b1:d1:72:8e:db:74:56:9d:f2:76:0a:75:af:7a:ef:c6:
         93:ac:26:a9:22:1b:39:07:a0:b5:64:1e:a2:b1:a2:61:5c:63:
         99:46:0e:26:a4:21:45:46:f9:8e:0f:40:e7:90:15:ea:44:e7:
         9c:76:60:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:40 2026 by rpki-client