Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.mft
File:                     7Wzqam0rBCFF_hLTKEPt_mfoono.mft (raw, json)
Hash identifier:          vRLo4h72Qgk86NCe0wC7q1yk8q5Y4oAvj/zcA5pKpMo=
Subject key identifier:   6A:7C:00:8B:F7:84:94:A0:9A:D1:89:5A:26:52:03:10:12:43:09:84
Authority key identifier: ED:6C:EA:6A:6D:2B:04:21:45:FE:12:D3:28:43:ED:FE:67:E8:A2:7A
Certificate issuer:       /CN=A9135EE5/serialNumber=ED6CEA6A6D2B042145FE12D32843EDFE67E8A27A
Certificate serial:       07BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.mft
Manifest number:          07AD
Signing time:             Tue 24 Mar 2026 21:13:22 +0000
Manifest this update:     Tue 24 Mar 2026 21:13:21 +0000
Manifest next update:     Tue 31 Mar 2026 21:13:21 +0000
Files and hashes:         1: 7Wzqam0rBCFF_hLTKEPt_mfoono.crl (hash: MPdx/oYBwPC0F6ipQUBWRy1MKUb/00gmC0n+NLXfE6c=)
                          2: 2E24C52846AF11EBA761792FC4F9AE02.roa (hash: GbdP365MBEEMO1MSE2BePvZktaes/gnixrVxi9aT14c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.crl
                          rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1983 (0x7bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135EE5, serialNumber=ED6CEA6A6D2B042145FE12D32843EDFE67E8A27A
        Validity
            Not Before: Mar 24 21:13:21 2026 GMT
            Not After : Mar 31 21:13:21 2026 GMT
        Subject: CN=69c2fe72-7ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:ae:fa:af:c9:82:48:a5:7d:7f:6e:74:0d:
                    01:1b:ba:61:f5:40:f8:44:17:ed:36:28:b5:bc:c7:
                    1a:a6:2f:e6:bb:7b:bf:0e:d8:ca:90:3f:e7:42:6b:
                    ca:aa:73:9e:7b:13:b6:c9:82:08:8f:b6:19:df:59:
                    21:f0:1e:98:f8:19:e3:ff:66:e1:d9:a6:9a:77:2f:
                    39:1d:0e:0b:cb:2d:3a:42:29:07:7e:fd:0a:6d:46:
                    20:42:5f:32:7c:2b:f2:7e:22:62:82:35:ff:a1:b3:
                    a2:19:6e:f2:b4:6b:a9:a7:79:61:95:03:c1:b8:30:
                    3e:77:da:cc:31:d7:62:93:89:d4:c2:d6:74:39:4f:
                    f3:16:20:5e:c3:ad:6a:55:49:c8:0d:2c:ec:19:0c:
                    54:3b:11:33:f5:5a:bd:d2:d6:18:09:c9:fc:93:41:
                    bb:60:71:6c:0a:02:c0:d8:9e:7f:b3:27:db:35:34:
                    43:3a:9e:c3:1b:55:aa:e6:cf:3a:9e:7d:90:03:13:
                    56:21:d4:36:b1:66:40:69:85:db:06:ef:ba:14:83:
                    90:25:74:65:05:a3:a7:4e:1c:1a:6d:2d:33:61:8e:
                    04:8d:4d:8a:c8:e9:13:ac:4b:18:cb:30:8c:e4:1d:
                    fc:3b:92:98:9c:98:87:a2:c5:47:c8:45:40:7a:64:
                    4e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7C:00:8B:F7:84:94:A0:9A:D1:89:5A:26:52:03:10:12:43:09:84
            X509v3 Authority Key Identifier:
                keyid:ED:6C:EA:6A:6D:2B:04:21:45:FE:12:D3:28:43:ED:FE:67:E8:A2:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:3e:14:e1:05:cb:c6:c4:5e:85:30:35:17:81:fa:6b:54:
         90:5e:1d:63:fd:5e:7d:7b:58:c7:e8:51:88:98:80:30:1d:f8:
         82:90:77:71:1e:52:b2:23:31:04:b9:0c:46:ad:5f:9d:21:93:
         04:f0:73:a8:43:ad:df:08:0f:60:c7:c2:4d:9f:e9:03:39:34:
         2d:c4:47:ef:a8:73:e7:7d:3f:d9:12:88:dd:22:a0:62:d7:f3:
         ab:dd:7d:22:68:e1:d8:50:69:e5:29:54:8e:86:d6:28:3b:0d:
         e3:bc:d6:e6:73:79:f7:a2:f9:0b:c3:31:00:87:8a:67:ab:59:
         c0:8b:1d:bf:66:15:62:90:a6:a6:16:3a:fd:88:83:7a:ba:0a:
         2a:15:9e:b1:0c:5e:be:ab:7a:5f:62:47:85:c0:f1:a6:e5:83:
         c3:c0:0d:f3:a4:64:49:ee:cc:4c:61:8e:a6:18:18:d2:29:8b:
         19:ef:54:fc:e4:67:0b:2c:b4:03:d4:72:66:ee:99:f9:9b:a3:
         8c:78:1a:86:48:9c:5d:fb:0e:c5:d4:ae:9c:06:2f:c7:68:81:
         3b:f1:c8:a4:5d:49:b8:d2:70:bd:73:a4:14:6f:f9:2c:f2:84:
         80:08:4a:b7:e5:8c:32:f4:c8:1b:6c:d5:8b:46:7b:82:01:e6:
         82:37:6a:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVFRTUxMTAvBgNVBAUTKEVENkNFQTZBNkQyQjA0MjE0NUZFMTJEMzI4NDNFREZF
NjdFOEEyN0EwHhcNMjYwMzI0MjExMzIxWhcNMjYwMzMxMjExMzIxWjAYMRYwFAYD
VQQDEw02OWMyZmU3Mi03ZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsHau+q/JgkilfX9udA0BG7ph9UD4RBftNii1vMcapi/mu3u/DtjKkD/nQmvK
qnOeexO2yYIIj7YZ31kh8B6Y+Bnj/2bh2aaady85HQ4Lyy06QikHfv0KbUYgQl8y
fCvyfiJigjX/obOiGW7ytGupp3lhlQPBuDA+d9rMMddik4nUwtZ0OU/zFiBew61q
VUnIDSzsGQxUOxEz9Vq90tYYCcn8k0G7YHFsCgLA2J5/syfbNTRDOp7DG1Wq5s86
nn2QAxNWIdQ2sWZAaYXbBu+6FIOQJXRlBaOnThwabS0zYY4EjU2KyOkTrEsYyzCM
5B38O5KYnJiHosVHyEVAemROtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGp8AIv3
hJSgmtGJWiZSAxASQwmEMB8GA1UdIwQYMBaAFO1s6mptKwQhRf4S0yhD7f5n6KJ6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVFNS84N0VENUEyRTQw
M0UxMUVCQUY0QTQ2NUVDNEY5QUUwMi83V3pxYW0wckJDRkZfaExUS0VQdF9tZm9v
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdXenFhbTByQkNGRl9oTFRLRVB0X21mb29uby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUVFNS84N0VENUEyRTQwM0UxMUVCQUY0QTQ2NUVDNEY5QUUwMi83V3pxYW0wckJD
RkZfaExUS0VQdF9tZm9vbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjV0+FOEFy8bEXoUwNReB+mtUkF4dY/1efXtYx+hRiJiAMB34gpB3cR5SsiMx
BLkMRq1fnSGTBPBzqEOt3wgPYMfCTZ/pAzk0LcRH76hz530/2RKI3SKgYtfzq919
Imjh2FBp5SlUjobWKDsN47zW5nN596L5C8MxAIeKZ6tZwIsdv2YVYpCmphY6/YiD
eroKKhWesQxevqt6X2JHhcDxpuWDw8AN86RkSe7MTGGOphgY0imLGe9U/ORnCyy0
A9RyZu6Z+ZujjHgahkicXfsOxdSunAYvx2iBO/HIpF1JuNJwvXOkFG/5LPKEgAhK
t+WMMvTIG2zVi0Z7ggHmgjdq4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:58 2026 by rpki-client