Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
File:                     7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json)
Hash identifier:          gTp5VDGLMHSc+OQ0u1CBMa6BQBFthU3RFv4cZy8H/tE=
Subject key identifier:   6E:13:4F:D4:F1:96:C6:0D:C3:C6:CA:87:EC:15:58:F7:3D:8B:D3:83
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Certificate issuer:       /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial:       0CFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
Manifest number:          0CEF
Signing time:             Sat 18 Apr 2026 18:10:13 +0000
Manifest this update:     Sat 18 Apr 2026 18:10:12 +0000
Manifest next update:     Sat 25 Apr 2026 18:10:12 +0000
Files and hashes:         1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: Bc5SwRVpSqHDssiqa84xL/0hSuBt8g75tqyRMZLEi4g=)
                          2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: YTtkDc7LdxWurMFpFmPW6K963HgmXdSoLXjMrXv0k5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
                          rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 18:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3324 (0xcfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
        Validity
            Not Before: Apr 18 18:10:12 2026 GMT
            Not After : Apr 25 18:10:12 2026 GMT
        Subject: CN=69e3c905-3006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:e2:e5:82:a9:b0:c6:e1:49:e9:42:18:b0:
                    44:9c:9d:65:42:58:db:6e:5e:b2:41:18:54:ef:61:
                    73:29:91:b8:d2:97:7e:46:ae:3f:00:2b:8c:fe:fd:
                    aa:49:78:ad:df:eb:0b:c7:3e:44:7c:30:26:a9:e3:
                    a6:87:c6:da:75:1c:94:69:51:83:d8:c0:f7:96:30:
                    a4:5c:87:49:15:49:85:00:d7:09:70:1d:cb:b4:2f:
                    a8:c1:49:54:87:54:e3:7c:5f:36:9f:70:9a:cf:0d:
                    69:d7:f7:bd:9b:67:2e:49:0c:6f:83:bd:fa:ce:2c:
                    b4:95:12:03:2f:22:38:b5:8a:5c:18:fe:3f:52:9d:
                    76:e6:2e:a8:cb:cd:07:ac:94:1b:19:e2:8b:e5:73:
                    b5:bc:fb:ff:f9:58:39:75:11:1e:5c:1f:ba:3a:ad:
                    ce:57:80:07:ec:a0:17:01:ae:53:8a:93:48:0b:73:
                    21:c7:18:ae:4d:14:52:97:5a:fe:ef:53:96:c9:d3:
                    b5:f4:ca:b2:8f:b6:c6:79:52:57:3d:c0:e9:36:8c:
                    ec:33:a9:47:67:b4:66:24:7b:a4:cf:6d:6c:22:5d:
                    8c:e5:eb:ee:c0:6b:4e:1d:83:2f:84:c4:5c:02:86:
                    b5:c5:3a:b0:85:83:4b:6b:b4:5b:71:74:8d:3c:0d:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:13:4F:D4:F1:96:C6:0D:C3:C6:CA:87:EC:15:58:F7:3D:8B:D3:83
            X509v3 Authority Key Identifier:
                keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:22:41:31:d9:30:05:b2:2b:1e:8b:f3:8c:e1:59:96:29:04:
         a6:45:c7:27:7f:67:c4:cc:9c:99:ab:4f:11:42:c2:c1:ab:ef:
         01:fc:f7:bb:49:a8:28:ae:a5:40:ec:01:2b:0c:35:bc:34:c6:
         69:a0:f9:67:0c:00:32:fe:59:2f:6a:e6:5f:a7:62:02:c4:3a:
         5c:9c:fc:c0:90:69:04:29:b6:2e:bc:07:b4:58:3c:2a:4e:f4:
         b0:f0:5a:2e:a5:2e:fd:bd:95:48:07:e7:3a:4d:cd:1d:5e:2d:
         21:0d:15:f1:68:a5:24:e7:63:f8:6e:9e:6c:5c:85:e5:c7:0e:
         e9:dc:5d:17:7c:2d:cd:9c:b9:3b:f1:74:39:8f:50:6d:34:5c:
         5e:d3:9d:66:6c:a6:86:2b:2f:5f:55:05:ab:6d:c1:05:2f:a3:
         62:fe:09:80:4e:53:43:9e:d7:aa:02:8c:b5:09:4f:79:15:f6:
         a3:05:ca:86:ce:e2:75:93:73:e9:0a:74:20:22:7c:0b:4f:26:
         8a:9d:15:fb:1d:9a:ab:28:f7:c0:f2:5e:ec:7c:fc:f3:91:55:
         8d:26:9c:bf:a9:f3:9f:f4:59:1c:37:46:ab:f1:01:61:d3:5e:
         53:ad:7c:c3:c5:f7:a3:59:1d:28:7e:52:c8:44:37:5f:d4:a3:
         fa:a2:1a:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND
ODg2MUVGOTcwHhcNMjYwNDE4MTgxMDEyWhcNMjYwNDI1MTgxMDEyWjAYMRYwFAYD
VQQDEw02OWUzYzkwNS0zMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoLzi5YKpsMbhSelCGLBEnJ1lQljbbl6yQRhU72FzKZG40pd+Rq4/ACuM/v2q
SXit3+sLxz5EfDAmqeOmh8badRyUaVGD2MD3ljCkXIdJFUmFANcJcB3LtC+owUlU
h1TjfF82n3Cazw1p1/e9m2cuSQxvg736ziy0lRIDLyI4tYpcGP4/Up125i6oy80H
rJQbGeKL5XO1vPv/+Vg5dREeXB+6Oq3OV4AH7KAXAa5TipNIC3MhxxiuTRRSl1r+
71OWydO19Mqyj7bGeVJXPcDpNozsM6lHZ7RmJHukz21sIl2M5evuwGtOHYMvhMRc
Aoa1xTqwhYNLa7RbcXSNPA3ZwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4TT9Tx
lsYNw8bKh+wVWPc9i9ODMB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1
RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3
NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF
YmREVm9ad2FGLVBJaGg3NWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeyJBMdkwBbIrHovzjOFZlikEpkXHJ39nxMycmatPEULCwavvAfz3u0moKK6l
QOwBKww1vDTGaaD5ZwwAMv5ZL2rmX6diAsQ6XJz8wJBpBCm2LrwHtFg8Kk70sPBa
LqUu/b2VSAfnOk3NHV4tIQ0V8WilJOdj+G6ebFyF5ccO6dxdF3wtzZy5O/F0OY9Q
bTRcXtOdZmymhisvX1UFq23BBS+jYv4JgE5TQ57XqgKMtQlPeRX2owXKhs7idZNz
6Qp0ICJ8C08mip0V+x2aqyj3wPJe7Hz885FVjSacv6nzn/RZHDdGq/EBYdNeU618
w8X3o1kdKH5SyEQ3X9Sj+qIaBg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:42 2026 by rpki-client