Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
File:                     7c3wYKYQK_rQbrqNaDHShI0dvec.mft (raw, json)
Hash identifier:          Z/Okiw+WiZweyyM24y/4ccTT1IQBZ9KeDNdCUjqLMBs=
Subject key identifier:   83:3A:8A:D3:3F:CB:C9:72:9C:B4:4F:01:0B:FA:49:A0:78:FB:C9:52
Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7
Certificate issuer:       /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
Certificate serial:       0843
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
Manifest number:          0837
Signing time:             Tue 12 May 2026 21:03:25 +0000
Manifest this update:     Tue 12 May 2026 21:03:24 +0000
Manifest next update:     Tue 19 May 2026 21:03:24 +0000
Files and hashes:         1: 7c3wYKYQK_rQbrqNaDHShI0dvec.crl (hash: 7xpWKAdAL4x3wo8gY0eQxzF+/vFgn3pQ+2qa5XJ8EYI=)
                          2: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (hash: qj4PHPZisxG0dfdLOUhyrYEa0m9LiBiscBAm285+1gc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl
                          rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D483A, serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
        Validity
            Not Before: May 12 21:03:24 2026 GMT
            Not After : May 19 21:03:24 2026 GMT
        Subject: CN=6a03959c-d084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:80:76:b4:87:7f:35:ed:99:55:56:a7:fe:
                    39:97:16:49:9e:6c:9a:72:fc:15:5c:0c:6f:3f:59:
                    73:70:31:23:0d:dd:1f:9b:5a:63:8c:5a:4a:80:ce:
                    79:34:23:e6:01:70:6d:7d:55:92:a4:3f:40:e1:0e:
                    55:eb:38:6e:8a:3e:cb:03:03:30:48:81:91:a8:82:
                    89:20:4a:19:51:30:2f:8a:71:fd:8d:d0:b3:a3:cf:
                    0c:64:05:6c:47:4d:f3:ab:bb:61:38:99:c7:ec:be:
                    74:40:da:55:86:99:5e:7e:f3:37:e2:14:84:be:ce:
                    3b:8a:b3:70:6c:42:fe:29:0a:72:ee:e9:84:86:e8:
                    a1:c0:df:7a:1c:c1:99:bf:50:27:34:ef:9e:52:15:
                    30:b6:8d:58:51:73:e3:1d:bb:c0:ab:c3:a4:7c:90:
                    f6:5d:12:5a:6e:03:71:01:7c:8a:95:62:67:55:9f:
                    60:18:32:40:00:32:b7:48:6c:1a:e7:65:e6:e4:6c:
                    7e:a4:6c:86:97:cd:12:7f:31:46:c0:c7:8f:99:46:
                    08:39:98:25:a6:b5:c4:c1:bc:2f:c2:92:60:36:e4:
                    fd:3a:fe:80:3f:62:ff:ec:74:32:35:2c:ca:cd:d8:
                    46:41:31:40:41:0d:cb:3d:5b:f2:f2:d3:02:c8:10:
                    17:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3A:8A:D3:3F:CB:C9:72:9C:B4:4F:01:0B:FA:49:A0:78:FB:C9:52
            X509v3 Authority Key Identifier:
                keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:cc:15:8c:d7:ee:bc:1e:40:0a:0b:3c:71:88:60:8f:17:
         61:de:f4:c5:78:4b:76:11:de:8d:70:65:ee:75:82:4b:1d:76:
         57:0c:88:ea:f0:17:b6:e2:41:a2:6c:eb:3b:a0:bb:ad:00:85:
         2e:6d:c2:39:09:34:39:e1:c1:ea:ac:2a:aa:93:aa:e0:73:48:
         f2:50:ae:f3:9c:2c:03:1a:d0:c5:a4:c9:c0:6d:8a:bd:fc:5a:
         80:de:26:c7:ba:6b:d6:d4:2b:a7:87:89:b4:30:c5:51:f4:61:
         a1:0d:b3:87:6d:dd:bc:e6:e4:be:97:16:2b:61:82:47:d8:82:
         38:0d:96:aa:7e:e4:ee:e6:10:5c:6d:81:56:64:78:e6:7a:fd:
         ed:67:b6:85:ab:56:5b:81:f5:25:fd:f0:38:85:8b:b1:27:52:
         eb:6f:ad:45:2a:eb:2e:6d:87:00:c1:16:79:51:a1:eb:98:11:
         25:42:94:68:52:f2:2a:f1:5a:30:f3:c3:74:d7:7b:9d:55:57:
         e8:f5:54:53:fd:3f:49:f2:6e:eb:6a:b3:d6:e1:6b:bc:18:bc:
         9e:57:30:22:76:9d:d1:c9:69:3b:52:bb:d7:79:44:82:ec:aa:
         5b:71:79:b9:ea:42:d6:fd:b6:f9:2a:54:4a:13:03:92:de:dc:
         af:3b:21:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ4M0ExMTAvBgNVBAUTKEVEQ0RGMDYwQTYxMDJCRkFEMDZFQkE4RDY4MzFEMjg0
OEQxREJERTcwHhcNMjYwNTEyMjEwMzI0WhcNMjYwNTE5MjEwMzI0WjAYMRYwFAYD
VQQDEw02YTAzOTU5Yy1kMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp62AdrSHfzXtmVVWp/45lxZJnmyacvwVXAxvP1lzcDEjDd0fm1pjjFpKgM55
NCPmAXBtfVWSpD9A4Q5V6zhuij7LAwMwSIGRqIKJIEoZUTAvinH9jdCzo88MZAVs
R03zq7thOJnH7L50QNpVhplefvM34hSEvs47irNwbEL+KQpy7umEhuihwN96HMGZ
v1AnNO+eUhUwto1YUXPjHbvAq8OkfJD2XRJabgNxAXyKlWJnVZ9gGDJAADK3SGwa
52Xm5Gx+pGyGl80SfzFGwMePmUYIOZglprXEwbwvwpJgNuT9Ov6AP2L/7HQyNSzK
zdhGQTFAQQ3LPVvy8tMCyBAXdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIM6itM/
y8lynLRPAQv6SaB4+8lSMB8GA1UdIwQYMBaAFO3N8GCmECv60G66jWgx0oSNHb3n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzQS8wNzAxQjM0QTEy
RDIxMUVCOTI5MkQ2M0ZDNEY5QUUwMi83YzN3WUtZUUtfclFicnFOYURIU2hJMGR2
ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdjM3dZS1lRS19yUWJycU5hREhTaEkwZHZlYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDgzQS8wNzAxQjM0QTEyRDIxMUVCOTI5MkQ2M0ZDNEY5QUUwMi83YzN3WUtZUUtf
clFicnFOYURIU2hJMGR2ZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZDzMFYzX7rweQAoLPHGIYI8XYd70xXhLdhHejXBl7nWCSx12VwyI6vAXtuJB
omzrO6C7rQCFLm3COQk0OeHB6qwqqpOq4HNI8lCu85wsAxrQxaTJwG2KvfxagN4m
x7pr1tQrp4eJtDDFUfRhoQ2zh23dvObkvpcWK2GCR9iCOA2Wqn7k7uYQXG2BVmR4
5nr97We2hatWW4H1Jf3wOIWLsSdS62+tRSrrLm2HAMEWeVGh65gRJUKUaFLyKvFa
MPPDdNd7nVVX6PVUU/0/SfJu62qz1uFrvBi8nlcwInad0clpO1K713lEguyqW3F5
uepC1v22+SpUShMDkt7crzsh1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:08 2026 by rpki-client