Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.mft
File:                     7PupMcCC4HxZLjgIJiZPyxAadJQ.mft (raw, json)
Hash identifier:          1yi1GfUUev03MyIiaoxl9Zjfjz95PL4ju6X6HxI20VY=
Subject key identifier:   EE:E6:18:42:74:2C:1E:C6:10:5B:DA:1D:57:FA:2A:44:1F:6D:2E:61
Authority key identifier: EC:FB:A9:31:C0:82:E0:7C:59:2E:38:08:26:26:4F:CB:10:1A:74:94
Certificate issuer:       /CN=A912E3B6/serialNumber=ECFBA931C082E07C592E380826264FCB101A7494
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7PupMcCC4HxZLjgIJiZPyxAadJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.mft
Manifest number:          08
Signing time:             Wed 25 Mar 2026 08:21:23 +0000
Manifest this update:     Wed 25 Mar 2026 08:21:22 +0000
Manifest next update:     Wed 01 Apr 2026 08:21:22 +0000
Files and hashes:         1: 7PupMcCC4HxZLjgIJiZPyxAadJQ.crl (hash: 3qa3QRQsFCFmBsZs2zvFbAG5mtZCBOQFztaCH900dc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.crl
                          rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7PupMcCC4HxZLjgIJiZPyxAadJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E3B6, serialNumber=ECFBA931C082E07C592E380826264FCB101A7494
        Validity
            Not Before: Mar 25 08:21:22 2026 GMT
            Not After : Apr  1 08:21:22 2026 GMT
        Subject: CN=69c39b02-15ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:16:13:58:65:be:8e:a5:a3:d1:35:64:fb:
                    0f:57:77:3e:8d:12:9f:6b:84:38:cc:3b:17:7c:20:
                    8c:3c:fe:9d:78:98:4a:19:79:f0:1b:f8:24:c3:b5:
                    27:25:17:3d:f2:3c:0d:44:bb:ff:31:d3:c7:e6:5f:
                    73:48:16:20:14:31:7f:44:e7:9d:d7:02:e4:43:78:
                    ae:41:7b:34:38:06:d5:de:34:14:52:03:41:c4:e9:
                    10:16:e1:b5:76:99:ac:d6:50:0e:1a:ad:82:f2:1b:
                    62:23:b2:77:92:b6:80:aa:02:4b:74:46:40:ad:a1:
                    6e:2e:e9:c6:37:c2:5c:ee:0e:02:48:b6:99:b9:7b:
                    83:e7:a7:55:b3:11:c4:05:68:5e:2b:93:6b:55:85:
                    7a:1e:7a:fe:9c:61:50:58:65:37:55:66:e0:b0:4c:
                    b3:24:2e:b9:03:7a:20:0b:45:60:d2:7a:0d:48:e4:
                    36:36:43:3e:e2:15:64:d6:5a:7f:70:af:5b:7e:c6:
                    a7:c7:11:df:3a:6a:24:2a:96:12:93:49:4d:d3:19:
                    e8:12:60:71:19:a2:e7:98:0f:f3:f0:03:8e:62:d2:
                    e8:b2:28:3f:dc:df:3f:5b:b8:ad:26:62:f4:13:5f:
                    67:78:c2:0d:62:54:25:6b:0f:6c:a6:78:87:70:0e:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E6:18:42:74:2C:1E:C6:10:5B:DA:1D:57:FA:2A:44:1F:6D:2E:61
            X509v3 Authority Key Identifier:
                keyid:EC:FB:A9:31:C0:82:E0:7C:59:2E:38:08:26:26:4F:CB:10:1A:74:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7PupMcCC4HxZLjgIJiZPyxAadJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:55:c1:e7:91:8d:4e:81:4a:7d:3a:78:2b:36:fd:24:24:
         0f:1e:3c:f9:d2:28:18:48:cf:cc:29:f6:91:ca:b4:07:d2:75:
         88:1f:ad:6a:bd:b8:ba:2e:48:0e:91:95:e6:70:19:87:a1:e1:
         bd:8f:ba:8c:66:88:82:d8:15:7a:68:77:c0:ca:d5:7c:46:85:
         28:44:2f:37:72:eb:b4:45:db:2a:cd:5a:8d:7f:a9:f3:61:21:
         b7:43:ac:18:94:5d:ba:69:9d:9e:19:14:1d:e3:f8:a6:79:35:
         81:fc:fa:e7:06:86:71:db:fc:1c:98:ab:25:26:03:32:50:8a:
         98:b6:7f:35:93:cf:0b:45:b3:b0:c8:0e:1b:fe:86:89:57:40:
         62:4b:eb:69:b1:1d:67:54:ec:b1:2f:8d:a8:65:3d:15:f2:8c:
         56:8d:c1:bd:94:aa:99:dd:28:a7:01:da:dc:c7:4f:58:85:87:
         07:79:97:44:10:b0:88:ea:5e:5f:75:ad:cd:79:e7:d9:cb:46:
         f9:f4:10:cc:4f:75:ad:17:af:9a:f5:70:7a:1d:db:98:54:b9:
         5f:c7:39:a0:d3:a0:03:6b:54:35:ad:c3:bf:6c:56:4f:17:33:
         7b:00:74:fa:ca:1f:67:7d:9f:1b:a8:c9:9f:90:c9:5d:30:1a:
         1d:60:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:52 2026 by rpki-client