Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
File:                     x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json)
Hash identifier:          pSGRC7YtpnBAhEpnVgluXo4OoGgi3C2oscbNVsG286I=
Subject key identifier:   B3:52:16:CB:3C:B3:BC:A3:D3:FB:F6:D7:6D:F8:FA:5D:8C:A9:6C:CA
Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
Certificate issuer:       /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Certificate serial:       178B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
Manifest number:          1759
Signing time:             Tue 24 Mar 2026 16:31:32 +0000
Manifest this update:     Tue 24 Mar 2026 16:31:32 +0000
Manifest next update:     Tue 31 Mar 2026 16:31:32 +0000
Files and hashes:         1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: 1JlPI0evVzWMPzl/cB6V6wMUqF/cVekqS85TpMVjj9Q=)
                          2: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: WA8xCRlxR3rKk8ClNGxGNEmsKJNt1HuKBEMk6slXSYM=)
                          3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: hPIaiMSBFYLOvrueCE00fDgAwAADdWAf1f9rpZpgG+w=)
                          4: 211910241E9E11F1A28347ED0E3D8C67.roa (hash: ZSTWW9qrTYokmi90xJvxyauGPHUOECGBx3bhI8hlBGM=)
                          5: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: puJkWVITf2df7u3Qj+93ztEl+0qqlVGDPJp1OeHAKxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6027 (0x178b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
        Validity
            Not Before: Mar 24 16:31:32 2026 GMT
            Not After : Mar 31 16:31:32 2026 GMT
        Subject: CN=69c2bc64-1a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:7d:f5:a5:77:e3:4f:b1:c8:9a:bb:78:2f:
                    39:0c:3c:fb:45:14:f5:91:8b:b5:ae:f9:58:6a:d0:
                    20:a0:ba:fd:1d:b6:ab:51:1f:3b:1c:d1:1b:50:ee:
                    9e:76:17:c7:00:0b:45:23:8d:37:05:21:ef:09:86:
                    72:a8:f2:d2:72:b7:90:25:a0:0c:12:98:03:97:62:
                    c8:9b:96:93:80:9b:c0:bd:96:2d:32:5d:4e:22:33:
                    d2:2f:75:19:d6:39:05:e1:28:c8:30:c3:92:10:cf:
                    ea:09:45:af:79:a3:19:e1:ac:e3:ef:37:dd:c7:44:
                    96:01:59:e2:da:c3:9e:ba:36:fe:fd:15:d7:bd:bc:
                    2e:dd:65:59:3a:10:ac:a4:97:9a:0b:35:30:43:f8:
                    72:b4:d6:8a:78:7b:eb:6b:13:fc:9d:b7:87:b9:44:
                    66:9a:74:e5:87:6e:40:22:b5:c2:07:50:02:b2:eb:
                    aa:30:82:54:c4:53:8c:29:fc:62:1c:a2:a0:db:55:
                    be:13:b7:34:44:5b:29:7a:df:e9:e8:cf:87:72:6b:
                    e7:53:08:83:89:86:48:fe:a3:8c:55:8c:8f:89:84:
                    76:17:58:1d:56:52:77:aa:fc:08:ce:b1:1a:f1:d6:
                    eb:f5:95:71:77:2a:0a:25:fa:5f:1b:01:62:21:07:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:52:16:CB:3C:B3:BC:A3:D3:FB:F6:D7:6D:F8:FA:5D:8C:A9:6C:CA
            X509v3 Authority Key Identifier:
                keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:bd:cb:32:98:8e:98:bd:c7:aa:d9:71:dc:57:83:de:9b:
         5c:33:77:0b:d6:38:f0:ef:52:3a:ee:0e:09:fd:e3:25:11:9a:
         4f:80:f8:e9:ef:a7:bf:61:5f:97:5c:98:e8:df:4c:22:6c:26:
         be:57:21:08:45:77:b5:22:82:0b:4b:44:ba:32:06:cf:eb:ff:
         ca:69:d5:0e:4e:9b:97:f0:13:ad:20:2b:11:e9:f6:bb:c8:c3:
         2b:17:e6:43:e7:b5:c1:91:b9:b5:e4:e5:5f:2d:64:c8:10:7f:
         a9:fd:4b:61:85:b0:fc:18:11:c7:17:a2:b5:f9:a7:b8:c7:6c:
         ca:62:e6:fb:83:99:46:c7:78:4d:61:27:98:25:8b:1a:37:5b:
         bc:34:58:24:cc:33:b3:f1:60:8c:bf:b3:20:c5:2a:3f:fc:1f:
         e1:d4:14:7b:be:84:38:1e:81:39:e2:2c:fe:43:99:c8:95:83:
         1e:4e:4a:57:9f:a4:b2:85:79:7b:28:f1:16:34:1e:ca:2c:bf:
         fe:13:0f:a1:4b:3f:a5:3f:86:cd:96:93:a1:39:ca:ba:ef:92:
         ec:6d:89:fc:97:57:54:5b:b6:2e:bf:73:b6:1e:d1:bf:a3:63:
         d2:b1:39:56:3c:e6:79:61:68:e3:a6:b1:30:e1:d2:04:21:81:
         ee:62:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:33 2026 by rpki-client