Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
File:                     7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json)
Hash identifier:          1cYscEh8aOjqA779pMGQU5HRDxhGuG06T2ufXuSy4zk=
Subject key identifier:   BB:6C:3C:D7:87:22:A9:94:60:D3:FD:1D:D7:86:BE:F0:43:28:91:51
Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58
Certificate issuer:       /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58
Certificate serial:       0499
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
Manifest number:          048B
Signing time:             Sat 13 Jun 2026 00:03:56 +0000
Manifest this update:     Sat 13 Jun 2026 00:03:56 +0000
Manifest next update:     Sat 20 Jun 2026 00:03:56 +0000
Files and hashes:         1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: HZRB83PpYKFcKT0NxXkDk514bL+VwxE2dUy0fgPp+kw=)
                          2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cOZek2T+bNDJmdSxWR5ARqOZYYj4cniIid9SflDDcn8=)
                          3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: uD8GePRFSBxxXJ8AP7OzAcQNkEfD5CvwBitNqcupV10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl
                          rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58
        Validity
            Not Before: Jun 13 00:03:56 2026 GMT
            Not After : Jun 20 00:03:56 2026 GMT
        Subject: CN=6a2c9e6c-2171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:05:37:7f:f8:6f:8c:32:9c:f0:23:a6:ae:
                    50:f0:70:25:dd:a6:92:fd:c6:64:99:db:b1:07:24:
                    ca:24:21:66:55:93:1f:64:94:d0:b2:ee:6a:24:e7:
                    48:66:1b:1e:a8:4e:c1:45:ab:75:25:4f:ac:0c:93:
                    60:b6:0e:da:58:f7:a7:2d:c1:85:36:0d:ad:7c:48:
                    04:af:74:c9:9b:db:a8:59:05:99:c5:e8:f5:b2:45:
                    92:15:9c:ff:76:68:5c:17:68:24:5a:5a:38:a0:94:
                    bf:96:1d:b5:30:c7:05:3d:66:1b:9d:00:36:5d:d1:
                    24:86:01:f9:be:28:06:79:a3:57:29:9c:dd:47:d3:
                    a5:38:da:82:ea:92:63:db:b7:30:1e:9c:4e:e2:b4:
                    96:28:64:d3:c1:85:9a:43:42:f0:a0:9a:b3:27:4e:
                    a4:68:53:01:32:38:85:ac:6d:f6:78:dd:f4:fc:f2:
                    48:93:41:11:1c:0b:e0:54:42:63:54:1d:64:cd:5b:
                    56:c3:b1:92:4d:62:c6:95:a4:7e:77:7f:93:2a:e8:
                    e7:29:04:16:0d:94:a4:06:4f:a1:48:fd:ba:9a:ff:
                    b1:70:87:45:c9:80:68:48:fe:c9:bb:dd:91:b4:08:
                    3d:f3:5b:5b:57:54:65:1b:e2:e9:94:e6:b3:7b:9b:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6C:3C:D7:87:22:A9:94:60:D3:FD:1D:D7:86:BE:F0:43:28:91:51
            X509v3 Authority Key Identifier:
                keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ed:88:47:61:dc:26:a0:00:9b:be:2c:79:6b:c0:ef:d9:d1:
         99:f5:ac:a1:4c:65:02:d4:f9:6b:17:8f:0a:b7:92:57:c8:bf:
         aa:f3:67:6a:e0:15:e5:46:aa:ec:bf:27:18:8f:c2:83:79:a2:
         f0:0b:87:44:77:fd:c1:33:09:69:ff:79:b5:90:27:fb:db:10:
         9e:0e:9d:1e:67:13:41:4b:e2:27:d7:c8:7e:18:e0:0d:1e:68:
         de:cf:ee:00:d2:ea:bc:12:89:ea:75:e5:4c:96:7e:1a:b5:51:
         7d:70:51:fd:bd:be:c2:47:47:1e:12:ad:74:b7:a6:81:f8:f3:
         d5:28:01:7b:c0:0c:7f:36:83:51:03:58:f5:06:1a:2b:b1:29:
         6d:29:1e:b1:f3:5e:25:38:fb:4c:48:0b:6e:fa:d0:7d:7b:12:
         95:ec:8c:67:9c:0b:e8:da:95:5b:61:d7:f6:88:c6:7b:fa:91:
         b9:b8:5e:40:a8:6e:e8:57:3b:f5:a6:1d:7b:d9:16:3f:a3:67:
         97:cc:65:ca:44:fd:2e:a5:9e:42:c4:3a:3c:b6:43:ac:37:97:
         d9:13:03:2e:b2:c9:82:96:b9:e0:cd:3c:42:4d:b1:b4:1b:b3:
         ed:10:e7:cb:08:2b:16:ab:ea:03:2f:04:0f:98:a7:6e:3e:d6:
         54:1a:1f:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC
MjFFMTlBNTgwHhcNMjYwNjEzMDAwMzU2WhcNMjYwNjIwMDAwMzU2WjAYMRYwFAYD
VQQDEw02YTJjOWU2Yy0yMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtzYFN3/4b4wynPAjpq5Q8HAl3aaS/cZkmduxByTKJCFmVZMfZJTQsu5qJOdI
ZhseqE7BRat1JU+sDJNgtg7aWPenLcGFNg2tfEgEr3TJm9uoWQWZxej1skWSFZz/
dmhcF2gkWlo4oJS/lh21MMcFPWYbnQA2XdEkhgH5vigGeaNXKZzdR9OlONqC6pJj
27cwHpxO4rSWKGTTwYWaQ0LwoJqzJ06kaFMBMjiFrG32eN30/PJIk0ERHAvgVEJj
VB1kzVtWw7GSTWLGlaR+d3+TKujnKQQWDZSkBk+hSP26mv+xcIdFyYBoSP7Ju92R
tAg981tbV1RlG+LplOaze5vA5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLtsPNeH
IqmUYNP9HdeGvvBDKJFRMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB
N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs
OE9QbmY1TE1zZi15SGhtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAme2IR2HcJqAAm74seWvA79nRmfWsoUxlAtT5axePCreSV8i/qvNnauAV5Uaq
7L8nGI/Cg3mi8AuHRHf9wTMJaf95tZAn+9sQng6dHmcTQUviJ9fIfhjgDR5o3s/u
ANLqvBKJ6nXlTJZ+GrVRfXBR/b2+wkdHHhKtdLemgfjz1SgBe8AMfzaDUQNY9QYa
K7EpbSkesfNeJTj7TEgLbvrQfXsSleyMZ5wL6NqVW2HX9ojGe/qRubheQKhu6Fc7
9aYde9kWP6Nnl8xlykT9LqWeQsQ6PLZDrDeX2RMDLrLJgpa54M08Qk2xtBuz7RDn
ywgrFqvqAy8ED5inbj7WVBofWg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:50 2026 by rpki-client