Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
File:                     7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json)
Hash identifier:          2PdIaXW77YVR6IbsXdkdqUefZQDrBOknO5+RGjBNGKM=
Subject key identifier:   17:A2:40:ED:4E:45:AC:64:DB:98:60:83:01:54:D5:E3:88:45:8F:20
Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00
Certificate issuer:       /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
Certificate serial:       089C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
Manifest number:          0893
Signing time:             Fri 12 Jun 2026 20:38:49 +0000
Manifest this update:     Fri 12 Jun 2026 20:38:49 +0000
Manifest next update:     Fri 19 Jun 2026 20:38:49 +0000
Files and hashes:         1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: Wio5p3owzcFOszvcLTFllQjOi6Kw5wkTPH/YK4FkLtM=)
                          2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: Sm8cDlO+Bn4wmHjiuhnBl2Ebz4v6i98Fbv6/A7UD98o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl
                          rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136D8B, serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
        Validity
            Not Before: Jun 12 20:38:49 2026 GMT
            Not After : Jun 19 20:38:49 2026 GMT
        Subject: CN=6a2c6e59-b1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:c3:6c:ed:56:b0:2b:61:39:2f:07:29:ea:
                    5a:db:ff:5a:bf:b8:e9:de:a8:9a:53:73:9f:21:e2:
                    e5:c7:29:fd:ee:1c:9a:42:12:2f:92:7f:6b:8e:4e:
                    63:30:dd:33:6a:04:e3:ae:46:24:cc:ad:11:32:3a:
                    dc:00:10:66:b7:86:1d:47:13:8c:1a:f9:aa:17:9e:
                    07:70:a9:dd:dc:70:14:d4:9c:6e:3b:04:a2:c8:2b:
                    bc:6c:1b:ed:e9:f2:4d:95:15:c2:57:a8:65:82:ab:
                    f4:85:26:80:e1:ae:dc:f3:eb:d7:d6:1a:b8:f0:31:
                    c2:ca:9a:37:fe:af:17:e2:5b:e9:3c:6c:33:5a:26:
                    65:9c:43:fc:0c:b3:a3:4f:d2:65:41:5c:4e:a7:0f:
                    4e:c2:76:97:9c:ac:44:57:31:a0:c5:ee:2a:42:f5:
                    d6:40:a6:68:c4:84:af:46:7e:d9:ed:54:ab:0b:dc:
                    59:c1:92:43:28:2d:45:58:3c:ca:72:fe:33:23:22:
                    88:ca:36:cf:55:fa:2b:a3:9d:09:70:54:5c:21:fa:
                    6e:63:0a:46:b4:04:70:ca:be:75:bd:14:94:b0:42:
                    71:51:71:08:11:f4:77:ad:dd:7b:62:a2:d9:93:ef:
                    04:b8:28:4a:81:03:37:c2:f4:67:df:5f:f6:ef:1d:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A2:40:ED:4E:45:AC:64:DB:98:60:83:01:54:D5:E3:88:45:8F:20
            X509v3 Authority Key Identifier:
                keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:2b:47:65:30:7d:38:2b:ca:b7:1d:79:f5:02:f3:f5:24:06:
         d8:7a:3f:95:3d:e9:cc:2e:47:3c:ca:5a:65:53:5f:22:34:ec:
         a0:9f:15:a5:a9:49:0f:54:35:82:15:b8:d1:1e:6d:45:96:c9:
         0c:1d:ec:32:88:57:1c:c6:51:1b:27:e7:7c:f0:fb:0e:02:16:
         72:ee:76:e9:a0:1a:04:4b:d4:ab:b4:25:c0:39:af:8a:06:e8:
         3b:d5:bf:23:27:79:2c:17:fa:6a:6b:18:76:d5:6d:02:d7:03:
         da:74:ba:92:0b:59:2b:fa:ec:5e:07:a4:32:ab:80:5d:49:fa:
         a4:1e:29:a9:1e:59:8d:6e:4e:bc:be:ec:9e:24:0d:9f:d4:e8:
         15:81:9a:88:55:40:2d:aa:a2:60:03:ad:d6:c1:c1:34:64:eb:
         06:02:df:68:85:99:62:8f:27:14:f9:00:2f:32:30:50:fd:7c:
         4a:e2:d2:c3:af:ad:e0:14:e0:24:01:ab:39:19:ee:d9:6c:e6:
         1a:0d:03:1b:ea:0c:a8:c2:7e:f3:46:e3:dd:81:6d:39:37:35:
         30:c9:3e:33:ce:14:9e:1a:de:fc:6c:fa:9f:b3:6d:ca:b5:6e:
         36:df:d2:fd:9e:bf:e3:05:6c:80:39:67:b5:2c:6b:26:e2:c9:
         aa:cc:81:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZEOEIxMTAvBgNVBAUTKEVGMUE5NkQxMTJERTE2MjJCMTFDOEM3RTk0QUVCMDQw
RURENkFCMDAwHhcNMjYwNjEyMjAzODQ5WhcNMjYwNjE5MjAzODQ5WjAYMRYwFAYD
VQQDEw02YTJjNmU1OS1iMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt7HDbO1WsCthOS8HKepa2/9av7jp3qiaU3OfIeLlxyn97hyaQhIvkn9rjk5j
MN0zagTjrkYkzK0RMjrcABBmt4YdRxOMGvmqF54HcKnd3HAU1JxuOwSiyCu8bBvt
6fJNlRXCV6hlgqv0hSaA4a7c8+vX1hq48DHCypo3/q8X4lvpPGwzWiZlnEP8DLOj
T9JlQVxOpw9OwnaXnKxEVzGgxe4qQvXWQKZoxISvRn7Z7VSrC9xZwZJDKC1FWDzK
cv4zIyKIyjbPVforo50JcFRcIfpuYwpGtARwyr51vRSUsEJxUXEIEfR3rd17YqLZ
k+8EuChKgQM3wvRn31/27x3eLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeiQO1O
Raxk25hggwFU1eOIRY8gMB8GA1UdIwQYMBaAFO8altES3hYisRyMfpSusEDt1qsA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ4Qi9EMDBBQTg1Q0Y0
MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZpS3hISXgtbEs2d1FPM1dx
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzd4cVcwUkxlRmlLeEhJeC1sSzZ3UU8zV3F3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkQ4Qi9EMDBBQTg1Q0Y0MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZp
S3hISXgtbEs2d1FPM1dxd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArStHZTB9OCvKtx159QLz9SQG2Ho/lT3pzC5HPMpaZVNfIjTsoJ8VpalJD1Q1
ghW40R5tRZbJDB3sMohXHMZRGyfnfPD7DgIWcu526aAaBEvUq7QlwDmvigboO9W/
Iyd5LBf6amsYdtVtAtcD2nS6kgtZK/rsXgekMquAXUn6pB4pqR5ZjW5OvL7sniQN
n9ToFYGaiFVALaqiYAOt1sHBNGTrBgLfaIWZYo8nFPkALzIwUP18SuLSw6+t4BTg
JAGrORnu2WzmGg0DG+oMqMJ+80bj3YFtOTc1MMk+M84Unhre/Gz6n7NtyrVuNt/S
/Z6/4wVsgDlntSxrJuLJqsyByw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:09:32 2026 by rpki-client