Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
File:                     CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json)
Hash identifier:          ZYUIIdMdM6xLWHkzjI2cK2XpSWiigy/APnP8a96zB28=
Subject key identifier:   33:F5:54:4B:62:C7:4A:90:F2:5C:65:FE:23:D8:32:24:5C:1D:D3:F7
Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
Certificate issuer:       /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
Manifest number:          0102
Signing time:             Wed 25 Mar 2026 05:24:54 +0000
Manifest this update:     Wed 25 Mar 2026 05:24:53 +0000
Manifest next update:     Wed 01 Apr 2026 05:24:53 +0000
Files and hashes:         1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: cSXgMlzzzmOXDGXn94eC7k4NSmoNfd7M7Dhe7ACYJAE=)
                          2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: kXIL4LSVHjTAmVfJOU7g+OrmcpQ5rxALmYlyD25Zr5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
        Validity
            Not Before: Mar 25 05:24:53 2026 GMT
            Not After : Apr  1 05:24:53 2026 GMT
        Subject: CN=69c371a6-3f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:a2:2e:9c:92:ab:92:f9:83:e0:b4:54:be:
                    37:14:fd:1c:8f:1c:b7:ef:e3:b3:05:cb:13:de:bd:
                    36:d3:e8:f8:dd:88:7a:54:ba:7a:1e:3d:fd:5e:9d:
                    54:7b:b8:1b:df:a4:89:10:1c:eb:e0:6e:d8:40:4d:
                    56:5a:56:39:df:0a:74:d0:df:17:e0:29:6a:b8:26:
                    53:de:19:46:09:5c:a6:af:fe:b3:48:07:0e:a2:68:
                    62:b0:f1:d9:c5:b2:c1:9d:47:e1:f8:75:4b:be:95:
                    8c:83:39:fe:22:6d:79:91:fe:a7:30:24:6a:58:0a:
                    90:6b:d6:8b:4f:06:ca:36:ac:2d:42:24:ef:e0:be:
                    fb:ef:3f:79:45:b0:08:1e:79:33:c2:90:71:da:75:
                    5c:77:22:e0:4c:0f:8e:dd:22:b2:d9:02:0a:ae:a9:
                    bb:9e:28:b0:d2:f6:77:65:90:1c:a4:e2:fa:a4:3c:
                    11:a7:53:b3:ca:55:36:0c:7b:06:5f:95:72:b0:3e:
                    86:81:a3:a6:3d:63:dc:82:28:5f:22:26:06:3c:39:
                    f8:1c:27:1e:8a:26:c7:64:bb:c6:19:9b:6f:79:c1:
                    cb:22:c0:f4:c4:35:2f:90:2a:b1:a8:f0:82:36:42:
                    b9:9f:a1:f2:67:fb:8c:cd:85:80:fd:59:2e:58:45:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F5:54:4B:62:C7:4A:90:F2:5C:65:FE:23:D8:32:24:5C:1D:D3:F7
            X509v3 Authority Key Identifier:
                keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4a:25:78:21:c4:f1:92:2c:b4:6e:cb:a4:34:e6:35:f1:bf:
         e7:b1:6d:8c:56:4d:10:1e:b4:11:a0:01:04:46:04:72:93:3e:
         5d:64:67:3f:b9:d7:c2:42:dd:9e:98:64:6d:8b:c1:6b:55:db:
         75:ee:a5:48:ee:6a:39:78:b8:00:ef:a8:5e:c7:67:a8:d2:16:
         12:85:b2:e4:af:e8:9a:77:23:90:bc:83:56:8a:10:c5:38:20:
         5a:b2:4f:20:ab:cf:d9:ba:08:49:e0:e1:a8:cf:2f:27:de:1a:
         2d:c4:ed:22:d3:ee:e4:4c:1f:ef:9c:a5:73:fb:f6:d5:dd:16:
         62:8f:bf:8e:ca:c2:df:6d:1a:80:aa:9b:1b:d0:bd:52:92:f7:
         97:51:48:02:de:7b:3b:2d:2b:34:03:8d:6b:dc:29:c8:e1:f6:
         b1:ad:7f:3b:a7:6e:f2:17:83:a6:d8:d8:52:b7:8a:98:59:bb:
         39:bc:87:6b:ee:6c:34:c6:36:2b:9e:d0:5a:10:fe:2f:33:95:
         8a:d6:06:fc:0c:1d:f7:dd:21:57:d3:29:6f:68:a6:9a:5a:5c:
         2f:f6:cf:6a:8d:99:ef:39:b3:14:10:e5:fe:9f:4e:00:d8:b6:
         3b:08:76:db:3d:d8:4f:3b:f9:3c:f4:c8:c9:1a:95:7d:ad:69:
         b2:9a:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:52:30 2026 by rpki-client