Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
File:                     S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json)
Hash identifier:          z5Pw0kd5MQnqHUV2bq9X5xUv9FcazGPo0ci9AEA9Ugw=
Subject key identifier:   7E:6D:F9:98:DB:6D:DC:07:E3:FB:2D:5B:D1:5B:62:30:11:B9:13:EC
Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
Certificate issuer:       /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
Manifest number:          79
Signing time:             Mon 11 May 2026 07:54:06 +0000
Manifest this update:     Mon 11 May 2026 07:54:05 +0000
Manifest next update:     Mon 18 May 2026 07:54:05 +0000
Files and hashes:         1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: 6vs/bdseiJf5oco0lbkjT4KWVhqpZc8p1+xczl5sY2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
        Validity
            Not Before: May 11 07:54:05 2026 GMT
            Not After : May 18 07:54:05 2026 GMT
        Subject: CN=6a018b1e-26d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7a:ca:0f:ec:f8:eb:64:50:cc:d2:08:64:99:
                    f1:ac:83:4a:ac:79:02:4f:dd:19:04:0d:43:bb:f2:
                    ab:0d:50:c1:d6:22:28:d3:a6:fa:29:a0:59:d4:3f:
                    3a:0c:6a:ab:ae:e0:b3:ba:78:83:d8:10:03:8a:ef:
                    f6:02:a2:ac:72:a4:86:c1:65:45:da:04:58:f0:92:
                    98:21:2c:9a:7e:3e:13:6e:df:c4:5c:af:58:89:b5:
                    73:fa:28:71:b4:6a:42:d9:74:41:da:57:17:da:71:
                    6d:30:a1:88:2e:6d:b3:e3:44:6a:5d:70:69:e9:d5:
                    d8:83:7e:e5:1a:17:51:54:7a:12:0d:fe:0b:3c:2b:
                    fa:dc:e4:e9:de:7a:5b:8d:d8:c1:10:ee:8a:96:96:
                    25:91:92:eb:36:3c:92:cd:f1:be:6e:ea:3b:da:62:
                    b9:76:f8:a2:11:a9:4b:ca:10:0d:4d:84:b8:31:7d:
                    a6:0c:86:4b:4f:f3:4a:af:44:44:72:89:3a:56:6d:
                    2d:cc:e4:d3:4f:fe:4f:07:a5:4f:f9:fc:13:94:9c:
                    c6:79:b2:63:3d:83:07:48:6c:2d:d5:6f:3a:8c:b3:
                    60:4c:6e:d5:34:51:72:58:4e:bd:b1:79:78:9d:cb:
                    29:d6:59:98:38:3e:28:18:33:41:13:91:72:9d:02:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:F9:98:DB:6D:DC:07:E3:FB:2D:5B:D1:5B:62:30:11:B9:13:EC
            X509v3 Authority Key Identifier:
                keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f2:69:fb:db:df:57:59:66:5f:b8:e8:85:92:54:7b:0f:f0:
         2f:18:ff:df:73:d9:8d:95:00:b9:6a:b0:3e:4d:ad:48:b8:5f:
         a0:54:33:bb:17:df:45:81:34:d9:45:d0:42:98:d3:61:a7:cc:
         69:23:19:9a:98:5c:e5:f0:38:0d:1e:7c:16:b5:c8:39:91:0d:
         55:dd:3c:52:15:4a:32:53:0b:7f:60:b3:dd:dd:79:74:ff:e1:
         10:17:40:fc:df:ec:f9:3f:0f:42:14:bb:a0:9f:e1:ec:47:6b:
         90:10:a3:ea:3f:b8:b2:9d:04:29:bb:9a:79:c9:10:e7:70:b7:
         99:70:b0:3d:79:3a:d1:e5:f2:9a:22:9e:5c:23:01:3a:39:27:
         7c:d2:5e:4f:77:b2:cf:63:34:dc:46:e2:8b:36:04:13:78:77:
         af:bc:8b:e1:58:42:9f:88:e7:fd:9d:71:8d:52:98:24:9d:dd:
         19:de:8f:70:b5:b0:a2:9e:2f:62:cb:9c:6b:be:c3:19:63:ea:
         ab:4e:78:c6:4d:01:c9:16:1b:05:49:0a:04:b7:15:79:84:48:
         43:98:70:18:d2:31:83:02:40:c1:42:fc:f7:0e:c8:bf:0f:99:
         dd:18:93:fb:e2:b1:0b:ff:5f:4a:db:8c:d6:9f:d4:5f:9d:e4:
         55:bf:86:e6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RjQzMTExMC8GA1UEBRMoNEJCNTM1MjM5NDhFQzZBQzk5MTNCMkQ1MDlDMUQ3QjI5
NDZEOUU5MjAeFw0yNjA1MTEwNzU0MDVaFw0yNjA1MTgwNzU0MDVaMBgxFjAUBgNV
BAMTDTZhMDE4YjFlLTI2ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJesoP7PjrZFDM0ghkmfGsg0qseQJP3RkEDUO78qsNUMHWIijTpvopoFnUPzoM
aquu4LO6eIPYEAOK7/YCoqxypIbBZUXaBFjwkpghLJp+PhNu38Rcr1iJtXP6KHG0
akLZdEHaVxfacW0woYgubbPjRGpdcGnp1diDfuUaF1FUehIN/gs8K/rc5OneeluN
2MEQ7oqWliWRkus2PJLN8b5u6jvaYrl2+KIRqUvKEA1NhLgxfaYMhktP80qvRERy
iTpWbS3M5NNP/k8HpU/5/BOUnMZ5smM9gwdIbC3VbzqMs2BMbtU0UXJYTr2xeXid
yynWWZg4PigYM0ETkXKdAhVdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfm35mNtt
3Afj+y1b0VtiMBG5E+wwHwYDVR0jBBgwFoAUS7U1I5SOxqyZE7LVCcHXspRtnpIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNDMxL0ZGN0QxOERBOTkx
ODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5WkU3TFZDY0hYc3BSdG5w
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUzdVMUk1U094cXlaRTdMVkNjSFhzcFJ0bnBJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG
NDMxL0ZGN0QxOERBOTkxODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5
WkU3TFZDY0hYc3BSdG5wSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBX8mn7299XWWZfuOiFklR7D/AvGP/fc9mNlQC5arA+Ta1IuF+gVDO7F99FgTTZ
RdBCmNNhp8xpIxmamFzl8DgNHnwWtcg5kQ1V3TxSFUoyUwt/YLPd3Xl0/+EQF0D8
3+z5Pw9CFLugn+HsR2uQEKPqP7iynQQpu5p5yRDncLeZcLA9eTrR5fKaIp5cIwE6
OSd80l5Pd7LPYzTcRuKLNgQTeHevvIvhWEKfiOf9nXGNUpgknd0Z3o9wtbCini9i
y5xrvsMZY+qrTnjGTQHJFhsFSQoEtxV5hEhDmHAY0jGDAkDBQvz3Dsi/D5ndGJP7
4rEL/19K24zWn9RfneRVv4bm
-----END CERTIFICATE-----
Generated at Wed May 13 02:43:50 2026 by rpki-client