Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
File:                     7dan-nQ2Pn9jFksaB04JvojSPDU.mft (raw, json)
Hash identifier:          SRXlCDiHMcWDtQ4HI8X6X1N2Wz01dEufrrh0nMWuWuU=
Subject key identifier:   73:8B:15:B7:72:BD:E0:07:4F:F8:82:54:D2:15:52:5A:25:93:F3:B0
Authority key identifier: ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
Certificate issuer:       /CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
Manifest number:          2070
Signing time:             Tue 24 Mar 2026 15:57:48 +0000
Manifest this update:     Tue 24 Mar 2026 15:57:48 +0000
Manifest next update:     Tue 31 Mar 2026 15:57:48 +0000
Files and hashes:         1: 7dan-nQ2Pn9jFksaB04JvojSPDU.crl (hash: ajFlfB32Zkz1veoer4CW7EnN+QOZsmuwNNOcQiLjOF8=)
                          2: 34545918BA0B11EE9FC74745C4F9AE02.roa (hash: Bd4fyJFT0/RGzv/UYSeU75j4WeITlTSc+IrzdI1knD8=)
                          3: 99596A0EB6C011EE857A8B6DC4F9AE02.roa (hash: 2lKTFTR17ouH78nETD+nc1OMaBr5xooA7XkTTU+AJ/4=)
                          4: 729C414EB69711EE8D11887CC4F9AE02.roa (hash: mkwtrtoISKf8CdyaIFecJHKE1E9ofVlo41Lk0KTM6Gc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
                          rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AB93, serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
        Validity
            Not Before: Mar 24 15:57:48 2026 GMT
            Not After : Mar 31 15:57:48 2026 GMT
        Subject: CN=69c2b47c-4f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:bb:a7:44:76:cc:49:bf:a2:74:65:29:81:
                    3c:d8:8f:81:10:4b:1a:af:90:44:5e:b0:da:9b:77:
                    65:f3:69:68:5e:20:e4:84:48:52:bb:1b:9e:9b:76:
                    b5:09:1a:6f:49:e6:47:d3:72:c7:2a:8b:9f:69:88:
                    f4:3b:36:f1:ef:97:fa:61:65:d7:cc:9f:f7:f3:b4:
                    b1:9a:e5:fa:fe:3d:7c:0b:92:3f:65:cb:b3:b1:ea:
                    c8:33:bb:c9:ac:01:21:c2:c4:5b:28:e7:23:47:16:
                    01:8a:eb:df:3c:9e:46:86:11:07:3f:ec:3c:10:ba:
                    33:84:5d:6f:67:99:b2:9f:fb:0c:9a:1e:97:2e:c6:
                    a8:b4:a5:44:84:1a:5c:73:d6:04:e4:a1:1b:84:a5:
                    eb:ab:20:f0:d8:62:e9:f9:bc:03:95:84:84:08:b2:
                    eb:1e:82:e7:bd:82:30:e0:d5:5d:83:ca:4f:01:59:
                    5e:c7:cc:ff:74:2f:00:db:91:04:c3:eb:32:94:e6:
                    5e:2a:e5:92:7b:51:8c:0d:c5:e4:bd:9f:e9:1c:3e:
                    cd:77:5e:d3:69:26:a7:13:86:73:13:59:e4:0e:f0:
                    b3:17:45:a5:96:e2:da:18:2a:19:d3:5d:ed:47:40:
                    a7:00:46:47:61:d1:c2:05:7b:40:43:d2:1e:26:7e:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8B:15:B7:72:BD:E0:07:4F:F8:82:54:D2:15:52:5A:25:93:F3:B0
            X509v3 Authority Key Identifier:
                keyid:ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:cd:41:45:6e:e0:e1:8b:49:44:fb:e6:9c:54:61:5a:c2:e7:
         00:5a:56:22:2c:c1:eb:fa:09:11:17:6e:ba:49:1e:9b:f9:30:
         7b:50:6f:b9:f0:73:1f:d1:46:bc:a8:6c:66:6d:79:5b:ac:e7:
         f4:00:7a:c3:fc:2e:f5:72:1c:f1:92:0c:46:54:3e:db:d1:f7:
         0d:f7:b2:e7:10:6e:13:f7:b8:3a:77:b7:51:b6:83:6c:ef:0a:
         9c:fd:01:f9:42:46:97:30:57:86:1e:a9:a1:70:c1:c0:1d:f1:
         36:7f:8f:e5:e6:5f:15:9a:21:d7:fa:ca:bd:38:db:34:25:45:
         ba:d4:5b:ff:55:7b:9e:53:de:44:a1:62:34:91:ad:e7:87:7e:
         0b:c9:e8:bf:b0:81:ea:e6:fb:5f:a0:77:2a:ed:c3:67:37:fc:
         9b:05:eb:6f:e8:28:8c:1c:b3:b9:e0:4a:58:51:57:b1:a5:93:
         b0:3c:aa:b8:b7:97:e0:9d:34:7b:ac:d2:fe:cb:c6:00:36:34:
         4c:23:ab:74:fc:44:97:0c:e6:bd:dc:5a:38:19:87:f9:95:ed:
         66:22:30:94:b3:18:65:7f:3f:63:db:9f:73:ed:7f:02:b1:5f:
         e6:8b:f9:6f:b7:57:c2:85:ff:3c:42:a9:c5:72:70:4b:2e:c5:
         c1:db:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:49:03 2026 by rpki-client