Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File:                     l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier:          j88gfr4aRImGU5BRxkKjqgIRwyBpMJgx46IHBvfZ56o=
Subject key identifier:   33:E3:ED:99:35:28:3D:6F:AA:2C:2A:CE:CE:5F:FB:63:C3:DD:0E:73
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer:       /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number:          ED
Signing time:             Wed 25 Mar 2026 05:37:19 +0000
Manifest this update:     Wed 25 Mar 2026 05:37:18 +0000
Manifest next update:     Wed 01 Apr 2026 05:37:18 +0000
Files and hashes:         1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: DJ0kJgfeNU8swHoW1WOIDmXksr6v85nraj2hd4D/woE=)
                          2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
                          rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
        Validity
            Not Before: Mar 25 05:37:18 2026 GMT
            Not After : Apr  1 05:37:18 2026 GMT
        Subject: CN=69c3748f-735a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:dd:36:d8:aa:8c:55:a8:6d:a4:05:0e:4c:
                    39:57:b9:c6:43:19:c3:69:b5:0b:a0:c1:80:e1:46:
                    e6:96:3a:0f:53:c2:04:74:52:86:20:c3:b8:d5:53:
                    74:e9:4b:8d:cf:aa:c7:96:2d:f9:9d:23:1c:7c:6f:
                    7e:5d:f6:68:78:5b:2b:a5:2d:47:b5:18:ad:74:6c:
                    2e:76:b2:18:f7:8f:6e:da:a7:5b:ae:9a:85:80:f4:
                    a4:4c:fb:35:7e:7c:c7:01:ad:11:53:14:f8:68:69:
                    25:b6:e0:38:6a:e6:12:fe:32:36:6b:15:f8:f6:70:
                    2b:08:47:1a:dd:ea:01:d3:e1:4e:90:43:e0:cf:43:
                    6f:52:8b:e4:93:b9:78:f2:b3:7d:33:66:b9:11:8a:
                    fa:08:c3:de:3a:3b:3d:e4:81:cc:fe:cd:92:c7:bc:
                    1a:d6:4f:97:ee:b8:2a:6d:b8:72:b0:6e:61:46:fd:
                    96:91:49:3f:9f:be:ce:a0:60:76:5b:8a:31:35:4c:
                    a4:54:82:26:a2:52:e3:8e:6a:e8:3c:cc:6d:42:fb:
                    ed:52:0f:e6:61:df:bb:31:84:fd:70:ca:bb:52:d7:
                    12:7f:31:dc:af:91:75:1a:d7:47:77:32:c0:60:80:
                    90:03:70:a0:2a:bb:0f:35:46:21:b7:78:5e:67:ea:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E3:ED:99:35:28:3D:6F:AA:2C:2A:CE:CE:5F:FB:63:C3:DD:0E:73
            X509v3 Authority Key Identifier:
                keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1b:4f:9a:b3:ce:78:01:b7:c2:9c:63:68:06:38:ec:b7:ea:
         b3:ce:97:cc:f7:6f:60:ad:d1:30:6f:1c:c5:f9:14:17:08:50:
         f2:15:b7:59:fe:71:d2:3d:7d:c7:ad:0c:a5:1f:3f:da:e2:9a:
         31:21:f4:72:7b:6b:c9:6a:00:c7:4a:ab:d5:f9:b5:bb:c5:21:
         ee:b2:cc:46:20:f2:af:77:0f:46:24:10:f3:32:40:19:a4:e1:
         96:29:25:18:5e:f5:10:9e:ee:68:eb:cf:78:c5:3b:78:78:ad:
         b9:0d:e3:d1:b6:c3:2e:1b:e6:ca:76:f0:20:89:fe:bb:ca:6b:
         3b:53:df:15:c7:2a:9c:e3:1d:da:97:98:73:ad:13:fb:23:c4:
         cf:23:bc:e2:93:8c:35:9c:24:d0:50:96:72:e5:7d:95:c1:8c:
         0e:6a:5b:b9:35:ea:f9:f5:c5:c1:5d:36:a0:45:f9:d5:10:ed:
         d6:00:41:10:e6:38:c1:cd:40:fb:3b:9e:29:f5:a9:b9:6c:40:
         57:ea:4e:3b:eb:6c:f4:ec:d4:64:6b:df:85:50:e2:19:92:62:
         18:b6:f0:28:f0:f3:cb:93:23:35:02:71:95:d9:5e:6a:1a:ea:
         37:51:a3:28:3a:2f:27:0a:0b:5c:bc:02:19:3e:c9:4f:80:f8:
         79:00:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:01 2026 by rpki-client