Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
File:                     r7pNwfpFiSSQIyMcb-7j96cdpA4.mft (raw, json)
Hash identifier:          bjykR3ZyuMrlUSDbheWhhHkFG4jsYMA6bWD3LTi2V3Y=
Subject key identifier:   E0:52:6A:02:7F:85:EB:C0:2D:3D:F5:51:08:C5:F3:CF:1C:3E:0B:BD
Authority key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E
Certificate issuer:       /CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
Manifest number:          020F
Signing time:             Wed 13 May 2026 03:02:35 +0000
Manifest this update:     Wed 13 May 2026 03:02:35 +0000
Manifest next update:     Wed 20 May 2026 03:02:35 +0000
Files and hashes:         1: r7pNwfpFiSSQIyMcb-7j96cdpA4.crl (hash: jELifwloa/BW1WYyQwKdGmBV/qI/KWN4ZNGby3+jw+c=)
                          2: 91F274442F2B11EE928A2881C4F9AE02.roa (hash: X895YdwXZ2+tj88QqzkjWe9/KA3nvJCRuf7kshHrxEU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl
                          rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B663, serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E
        Validity
            Not Before: May 13 03:02:35 2026 GMT
            Not After : May 20 03:02:35 2026 GMT
        Subject: CN=6a03e9cb-0f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:1d:46:c6:e4:af:69:e9:59:d6:1f:7e:fc:
                    97:a6:e6:72:c7:7a:5f:3f:d3:32:ff:05:b2:b2:c2:
                    60:b9:8c:66:9a:b8:93:d7:c0:77:99:13:53:c5:c6:
                    fd:34:0c:62:a0:13:f3:53:a5:84:f7:fe:15:ef:71:
                    86:22:79:9f:21:28:d3:0d:39:f1:e4:aa:c5:ee:07:
                    27:1d:4e:79:ab:e7:ab:8d:d1:b4:52:b9:16:52:59:
                    18:c4:ad:9e:c7:8f:51:ee:d5:b5:59:65:d8:71:50:
                    11:13:cc:15:a3:de:62:65:8a:97:5d:d9:0f:ad:14:
                    ad:e4:86:2c:f9:27:76:53:08:e6:c7:00:d4:4b:d8:
                    4b:43:f2:d3:f2:f5:e8:61:59:21:ef:e0:eb:f6:ce:
                    70:8c:6c:3c:89:c2:61:b5:b6:9f:8e:b1:8e:90:44:
                    6a:f9:ec:48:ba:d5:d3:bb:92:67:ae:a8:2d:15:f2:
                    cc:53:b4:38:2c:59:f2:84:40:a1:13:88:7f:6a:28:
                    3b:cf:73:b8:6a:9e:e8:ec:a4:88:6a:cd:36:e3:c0:
                    d9:f2:b6:c1:4f:6e:2b:c4:23:97:f4:40:a6:f2:22:
                    1f:f4:d1:3f:9c:80:14:48:de:40:59:f5:ab:c8:4b:
                    40:74:73:cd:e7:9d:c4:7a:5b:b2:93:12:c7:53:ac:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:52:6A:02:7F:85:EB:C0:2D:3D:F5:51:08:C5:F3:CF:1C:3E:0B:BD
            X509v3 Authority Key Identifier:
                keyid:AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7a:52:1e:c4:dd:b3:ea:5c:4f:11:3f:27:bd:78:3d:e5:90:
         5b:c5:03:c9:eb:32:b7:63:16:62:3f:86:00:6f:73:23:5c:ef:
         cb:6f:ac:9c:5f:e3:ea:0e:b1:10:9f:8c:72:e5:02:36:b7:b7:
         0c:bc:c8:7c:b9:93:dc:ae:8a:32:71:23:b0:c9:2b:22:2a:e5:
         54:18:ee:1f:43:fd:95:9e:5a:11:84:8d:1b:0c:3d:52:1a:d9:
         49:55:15:02:42:79:71:1d:55:30:61:5d:e4:2e:eb:4d:e7:18:
         3f:58:2a:38:aa:ef:9e:a2:26:23:2c:2a:06:b6:81:d4:69:c9:
         fe:21:ec:57:3e:47:d8:44:89:4b:f3:c5:ea:03:84:0d:e0:28:
         83:45:02:a3:e4:d4:20:87:6e:f9:f0:88:32:aa:90:a6:99:6b:
         ed:b5:17:18:ba:98:1f:52:9b:5e:60:aa:2d:76:d2:d6:b6:05:
         0f:a2:41:08:13:b5:1d:3f:09:16:20:c6:20:5c:de:cf:14:64:
         c0:08:96:53:24:8c:d9:c8:51:b1:32:17:5c:e9:b8:45:df:e8:
         66:94:a5:6b:b6:c5:35:3d:99:15:5b:b8:c6:ed:81:59:0c:55:
         56:bc:64:2a:31:0d:e8:af:d1:65:44:dd:e2:f1:36:b5:ea:4f:
         3b:ed:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:40 2026 by rpki-client