Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
File:                     7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json)
Hash identifier:          g70/Mzic1QkyxNdfrShAO3bi5ri3rbJSz/Pp7UR9g0w=
Subject key identifier:   63:63:2D:24:D9:E3:AC:4E:47:59:F0:EE:3A:47:D9:5E:16:08:F9:FB
Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00
Certificate issuer:       /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
Certificate serial:       0874
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
Manifest number:          086B
Signing time:             Thu 26 Mar 2026 20:34:58 +0000
Manifest this update:     Thu 26 Mar 2026 20:34:58 +0000
Manifest next update:     Thu 02 Apr 2026 20:34:58 +0000
Files and hashes:         1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: dzjc8hY3nb7lcgsqcu04RTVHSJOIpWhwfTNUwLL/1UE=)
                          2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: Sm8cDlO+Bn4wmHjiuhnBl2Ebz4v6i98Fbv6/A7UD98o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl
                          rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164 (0x874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136D8B, serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
        Validity
            Not Before: Mar 26 20:34:58 2026 GMT
            Not After : Apr  2 20:34:58 2026 GMT
        Subject: CN=69c59872-ec04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:da:f7:6e:29:5c:04:08:07:01:46:61:c3:36:
                    8a:e2:58:ff:44:b4:e9:dd:50:51:45:94:77:e0:b2:
                    19:88:5b:9e:92:12:4c:5c:43:65:12:71:1e:0c:c4:
                    e5:c9:09:a0:6f:a5:a5:ef:be:cf:a9:d1:09:d9:67:
                    e0:03:12:53:cf:5b:8a:e7:c2:70:43:84:46:17:0d:
                    28:87:dc:8b:e4:8e:39:5a:c4:e5:d1:f5:a8:60:6b:
                    de:16:c4:93:13:cb:26:fb:38:b5:d7:2e:71:2c:8a:
                    f0:78:d0:70:f0:fa:df:a8:fc:2b:eb:0f:d1:8d:0e:
                    09:cb:e5:20:2d:e8:97:2e:f0:f1:3b:06:6d:e0:16:
                    aa:12:af:52:a4:96:a1:c4:ba:8c:30:2d:db:27:88:
                    99:7a:d4:b3:f0:ed:c1:bb:f4:ef:b0:e8:2f:1e:e4:
                    53:03:1a:0c:7b:02:1a:90:6b:d5:0e:89:47:c3:33:
                    bc:76:92:e5:a2:57:18:c8:36:70:8e:67:43:4e:73:
                    4a:4a:63:87:38:23:ac:4e:0a:26:cc:25:a1:96:76:
                    c4:43:14:f7:10:08:ad:64:4e:16:5a:af:b4:71:91:
                    f3:68:90:4f:5f:31:35:bc:66:b6:da:15:c9:09:bd:
                    fd:cc:91:82:d8:46:65:b3:4a:bf:af:77:0b:58:6a:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:63:2D:24:D9:E3:AC:4E:47:59:F0:EE:3A:47:D9:5E:16:08:F9:FB
            X509v3 Authority Key Identifier:
                keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:62:15:e5:49:72:37:26:a4:88:9c:be:c4:eb:b6:d7:b5:04:
         20:c7:9c:2c:fb:07:2c:17:13:bc:29:4d:3e:75:af:e1:09:3c:
         4c:9c:5e:f6:7f:c7:fe:6c:d7:e7:3b:bd:35:38:ba:86:ca:6c:
         f0:b7:a2:03:75:4f:f9:a7:7c:fa:39:7c:4c:31:27:1b:44:17:
         31:78:4b:91:d4:1c:08:1f:d5:d9:3d:73:58:9e:92:8f:0a:3c:
         10:21:ec:d6:c4:c6:2f:f8:87:e1:a8:5b:71:32:08:ac:b4:bd:
         00:21:65:c5:c3:68:3f:b5:c8:4b:83:f6:d4:7f:48:8d:43:6d:
         a9:7f:72:06:d9:a8:59:72:94:71:09:b4:cb:d9:77:2a:aa:70:
         59:c6:14:a4:96:77:d0:46:45:fc:31:32:3c:30:77:84:1b:6c:
         e1:8f:81:b6:a7:43:18:00:93:52:dc:41:29:7c:eb:98:da:69:
         d9:98:5b:79:ff:7c:e9:0b:79:f4:5b:7c:6b:0a:0d:13:74:f7:
         f7:9e:87:eb:25:4a:bf:d0:ef:7b:87:f7:8b:2b:75:0d:80:8a:
         13:c8:44:af:c0:da:f2:af:1a:a6:e1:b1:5a:09:fd:85:1f:9e:
         36:3b:d8:16:cf:85:bb:3e:87:41:fc:00:8c:a7:6e:93:bd:4d:
         f4:fd:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:33:56 2026 by rpki-client