Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft
File:                     4WfcTVfF__boFwUeksBgF1urHR0.mft (raw, json)
Hash identifier:          x5l4p/mxOBq2qg26qqsZ0ewlZ7SvYdJSqMg1znc2CBQ=
Subject key identifier:   E1:F3:B6:67:D8:C0:32:AC:94:44:9C:3F:E1:49:02:16:0A:16:BE:A5
Authority key identifier: E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D
Certificate issuer:       /CN=A9147150/serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft
Manifest number:          7F
Signing time:             Wed 25 Mar 2026 06:56:08 +0000
Manifest this update:     Wed 25 Mar 2026 06:56:07 +0000
Manifest next update:     Wed 01 Apr 2026 06:56:07 +0000
Files and hashes:         1: 4WfcTVfF__boFwUeksBgF1urHR0.crl (hash: bSIxzQcINjskG0OxiXywoba5aR1nvNGvlGB9GfDeJ5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl
                          rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147150, serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D
        Validity
            Not Before: Mar 25 06:56:07 2026 GMT
            Not After : Apr  1 06:56:07 2026 GMT
        Subject: CN=69c38708-63f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4a:b2:b1:ea:c1:67:46:40:9d:23:39:5d:f1:
                    12:e4:de:f9:c2:d2:1b:d7:4d:6c:d2:f4:b7:7f:68:
                    f5:10:8a:c5:b3:78:54:7e:fc:46:88:07:6b:f8:39:
                    ab:65:ef:7b:4a:60:ef:ad:99:b5:fd:ee:89:df:c2:
                    2c:da:47:7b:0b:9e:96:b0:b8:c5:3d:1a:bf:d3:98:
                    ff:0b:63:6c:85:ce:86:70:68:d0:88:9a:8b:17:76:
                    88:ee:81:59:48:ac:8b:fd:1d:4f:66:cc:80:f0:80:
                    ac:69:7d:2d:87:af:b0:19:c9:f4:6a:c6:2f:09:62:
                    d2:ee:80:fc:fc:32:ce:08:7c:62:33:7d:d0:80:f1:
                    41:da:63:58:93:5c:30:ea:8e:6d:81:9c:b6:0b:51:
                    39:64:79:b8:a5:07:58:5b:9c:4c:ab:05:cd:26:a6:
                    b2:8f:f2:6a:52:ae:c9:76:e0:1e:38:fc:cc:f0:92:
                    42:d4:b6:e0:bc:43:a6:9a:df:bf:68:ab:25:7b:ea:
                    d1:e2:52:83:d7:d3:19:2f:d4:6d:e4:10:52:53:2c:
                    3b:59:74:b4:b4:53:fa:6d:93:fc:37:f4:1a:aa:42:
                    10:3a:a0:6d:56:cd:0a:74:6f:f7:f4:17:7e:12:b0:
                    09:d3:86:28:65:71:35:3f:b5:a7:34:e6:0e:46:60:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F3:B6:67:D8:C0:32:AC:94:44:9C:3F:E1:49:02:16:0A:16:BE:A5
            X509v3 Authority Key Identifier:
                keyid:E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:63:53:9f:c0:d6:c1:23:3b:32:c4:05:26:75:6a:b9:03:3d:
         c2:95:4a:66:29:76:45:c1:c0:91:5d:61:62:63:9d:e6:be:7f:
         1d:f7:8d:ad:c5:a9:f2:74:cf:76:df:ad:83:43:45:0c:85:81:
         52:7b:29:36:01:15:01:e8:fd:fd:99:4d:58:23:2f:d7:43:3b:
         b1:ad:a4:78:3d:9c:ce:bb:15:ba:e1:8b:89:51:b9:ba:65:dc:
         17:82:c2:c5:92:d5:9e:cb:a7:f9:52:88:8a:7a:84:bc:44:c9:
         17:18:73:dc:07:af:6a:72:84:28:70:01:28:c5:20:de:d5:ed:
         1a:22:b3:0e:a4:93:2c:58:7c:cc:d0:2b:1c:e1:7a:72:8a:6f:
         d9:bd:41:42:6b:c6:a5:d2:1a:ec:d4:c1:7f:ab:08:c4:1a:05:
         78:17:2b:b2:d3:50:53:1d:a8:f5:e4:61:cb:63:87:d5:f5:e0:
         46:0e:b3:62:21:8a:69:40:e9:01:c8:33:13:71:d7:58:9d:c7:
         6b:e3:bf:ef:db:1f:d2:a9:c7:e2:aa:fd:85:62:03:5f:54:0c:
         1e:78:5b:7a:ff:c7:ab:6a:16:43:f5:08:a5:f3:83:01:44:83:
         21:93:7e:a4:a1:46:24:25:60:59:f0:40:14:dd:5f:a9:0b:f3:
         1a:25:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:53 2026 by rpki-client