Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File:                     R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier:          O2Hu52JupnkGvyG29QAKb0KTCP2YCfTT9s3wuL3gJ6E=
Subject key identifier:   BD:87:A2:34:D3:70:75:DD:04:29:79:29:3C:55:BC:44:DC:06:6E:B3
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer:       /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number:          75
Signing time:             Mon 11 May 2026 07:55:41 +0000
Manifest this update:     Mon 11 May 2026 07:55:40 +0000
Manifest next update:     Mon 18 May 2026 07:55:40 +0000
Files and hashes:         1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: EQMfd0WIg3B8MrqFX8dGnkCxAr0ZJ/A8gIIb3vPEXmA=)
                          2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: 1KJtvHLYngoP+8r1UhG8albB+7arFBcFljE2p+6yMsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
                          rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
        Validity
            Not Before: May 11 07:55:40 2026 GMT
            Not After : May 18 07:55:40 2026 GMT
        Subject: CN=6a018b7d-4cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:b6:20:87:ff:76:13:e9:31:87:3c:0f:29:
                    ca:77:e2:e1:a9:1a:4e:d3:88:2b:f2:8a:63:cb:96:
                    6b:8f:4f:d6:f2:e1:b4:5e:e4:cd:d4:67:37:02:77:
                    93:9c:7e:e8:2b:92:38:28:2e:24:bc:b6:fb:9c:ea:
                    a1:64:78:5e:3b:77:b6:4c:87:c5:66:0f:49:e8:1c:
                    7e:5b:37:c2:40:a1:88:ce:b6:f1:2c:59:c5:7e:ff:
                    0e:3e:47:95:12:43:f6:de:da:cb:16:3f:f0:19:3b:
                    8b:25:4e:27:4c:db:7b:a4:10:7f:2c:e6:8f:33:3f:
                    f1:0d:b9:6c:a0:bc:54:5e:41:2d:ef:a9:7d:79:f6:
                    c9:e2:16:4e:d2:0c:cc:55:c4:ba:d4:2b:1e:81:2d:
                    2e:f8:29:69:a5:51:4c:40:33:ee:4c:61:34:4c:42:
                    d5:f4:7b:38:3c:d1:c4:38:38:0b:f4:37:52:76:c7:
                    f4:e9:83:df:1f:e4:d3:cf:bd:0d:ba:78:e2:f3:7e:
                    55:96:37:f9:26:04:15:a6:cc:de:49:45:c9:3c:5b:
                    ab:44:f9:60:12:39:ee:8c:a6:b5:15:b6:c5:16:6e:
                    47:31:54:43:79:97:1b:2b:61:c2:10:b7:92:64:25:
                    6c:4d:15:17:06:ea:d4:c1:e5:78:60:84:c5:cc:69:
                    b6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:87:A2:34:D3:70:75:DD:04:29:79:29:3C:55:BC:44:DC:06:6E:B3
            X509v3 Authority Key Identifier:
                keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:4e:58:ab:3d:2f:b4:6a:d9:a0:a5:99:3e:9c:21:fa:e4:4d:
         18:81:8d:cc:86:ae:44:26:4e:30:07:8b:c0:4f:19:b9:16:2e:
         7b:32:c1:00:96:27:a1:cb:46:45:58:af:eb:7f:4e:62:ab:6e:
         83:14:20:5c:8a:23:7b:41:37:2b:e4:6c:f0:5d:ef:c2:9e:2f:
         dc:f2:78:d1:eb:eb:7e:09:18:c9:17:82:2a:23:95:6f:eb:cd:
         90:36:e0:aa:fd:4d:44:86:51:9f:13:26:59:52:c4:b7:58:c4:
         e5:16:6d:3c:88:33:46:9d:0e:5b:d2:d3:6e:84:e6:8e:af:68:
         4b:12:bf:3d:47:52:f3:e5:43:85:1d:4e:51:20:f1:c5:9d:f1:
         dc:e8:7a:78:f9:3a:51:4b:a5:c0:a0:ca:7f:77:01:33:33:53:
         ed:cb:95:15:f4:49:d7:17:ed:50:0c:71:b7:6d:cf:27:88:ee:
         01:c3:a6:f3:1c:25:61:fd:9a:b5:77:e1:e0:07:91:91:4a:90:
         ec:27:a2:ab:02:b8:b8:70:63:a4:b1:e2:a7:0f:9c:99:ed:a0:
         04:f9:a2:73:54:5c:b7:21:90:26:15:1e:80:1d:73:40:41:3e:
         e1:a6:7e:59:26:1f:58:b6:d7:e2:9b:26:95:12:f5:45:49:86:
         05:ef:4f:ef
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
QjAwMDExMC8GA1UEBRMoNDdCODU0MzY4NUQzMDFGRUVGOTBDRDEyRTUxNThGNzQw
RDZCNkNCMTAeFw0yNjA1MTEwNzU1NDBaFw0yNjA1MTgwNzU1NDBaMBgxFjAUBgNV
BAMTDTZhMDE4YjdkLTRjZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnh7Ygh/92E+kxhzwPKcp34uGpGk7TiCvyimPLlmuPT9by4bRe5M3UZzcCd5Oc
fugrkjgoLiS8tvuc6qFkeF47d7ZMh8VmD0noHH5bN8JAoYjOtvEsWcV+/w4+R5US
Q/be2ssWP/AZO4slTidM23ukEH8s5o8zP/ENuWygvFReQS3vqX159sniFk7SDMxV
xLrUKx6BLS74KWmlUUxAM+5MYTRMQtX0ezg80cQ4OAv0N1J2x/Tpg98f5NPPvQ26
eOLzflWWN/kmBBWmzN5JRck8W6tE+WASOe6MprUVtsUWbkcxVEN5lxsrYcIQt5Jk
JWxNFRcG6tTB5XhghMXMabblAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvYeiNNNw
dd0EKXkpPFW8RNwGbrMwHwYDVR0jBBgwFoAUR7hUNoXTAf7vkM0S5RWPdA1rbLEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0VFQjgwOEI4OUQx
NzExRjBCNDJFRjAzNEM0RjlBRTAyL1I3aFVOb1hUQWY3dmtNMFM1UldQZEExcmJM
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUjdoVU5vWFRBZjd2a00wUzVSV1BkQTFyYkxFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC
MDAwL0VFQjgwOEI4OUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1I3aFVOb1hUQWY3
dmtNMFM1UldQZEExcmJMRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDUTlirPS+0atmgpZk+nCH65E0YgY3Mhq5EJk4wB4vATxm5Fi57MsEAliehy0ZF
WK/rf05iq26DFCBciiN7QTcr5GzwXe/Cni/c8njR6+t+CRjJF4IqI5Vv682QNuCq
/U1EhlGfEyZZUsS3WMTlFm08iDNGnQ5b0tNuhOaOr2hLEr89R1Lz5UOFHU5RIPHF
nfHc6Hp4+TpRS6XAoMp/dwEzM1Pty5UV9EnXF+1QDHG3bc8niO4Bw6bzHCVh/Zq1
d+HgB5GRSpDsJ6KrAri4cGOkseKnD5yZ7aAE+aJzVFy3IZAmFR6AHXNAQT7hpn5Z
Jh9YttfimyaVEvVFSYYF70/v
-----END CERTIFICATE-----
Generated at Wed May 13 09:46:08 2026 by rpki-client