Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File:                     78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier:          /3HWwqooIHt2IFHVn68/ezu27ollsN40D9w+D7lRtoM=
Subject key identifier:   43:D3:E3:0E:98:FB:C4:7A:05:4E:D9:02:A0:6B:C5:7C:46:0D:44:CB
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer:       /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number:          0155
Signing time:             Wed 25 Mar 2026 04:17:20 +0000
Manifest this update:     Wed 25 Mar 2026 04:17:19 +0000
Manifest next update:     Wed 01 Apr 2026 04:17:19 +0000
Files and hashes:         1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: TYZqzI+KTe68DKP54QlQlPvi9j7IukKbgATRJM5FIdA=)
                          2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: pCBDSY/5hIjT1Z07yVjRD8C3EOR5A+vR6s3eWtHwcNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
                          rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
        Validity
            Not Before: Mar 25 04:17:19 2026 GMT
            Not After : Apr  1 04:17:19 2026 GMT
        Subject: CN=69c361d0-87cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:8e:93:4d:76:5e:5d:fa:b2:a5:c8:6b:a3:
                    9f:7d:3a:f3:0e:6f:db:b4:3d:a4:ce:1c:30:56:f2:
                    09:c0:b7:a6:1f:6a:01:d1:e0:3d:c1:d4:d7:8d:88:
                    21:9d:93:71:9f:49:b7:a1:db:ae:60:2f:74:6f:37:
                    47:e8:7a:6c:82:a1:fa:c0:0d:89:b4:f4:ec:85:aa:
                    25:de:9e:97:63:2b:5c:08:2f:97:30:93:e7:e6:51:
                    8a:a8:65:6a:05:f3:43:00:24:0a:ec:66:40:b9:79:
                    5f:8c:93:a7:c4:e4:0f:8e:3c:be:46:34:7e:c9:87:
                    4c:9d:24:c3:a3:2b:04:f6:47:c5:0f:95:f1:86:7c:
                    39:07:42:fc:78:1f:b5:b0:91:5e:62:b0:83:d1:95:
                    9e:d6:bb:98:34:c6:c6:52:36:42:73:e2:49:11:4d:
                    c8:27:87:ad:0f:18:fa:88:54:51:ec:71:dd:9a:a5:
                    4f:c0:6a:26:d7:aa:eb:ff:29:55:1a:0f:f5:01:36:
                    9c:5b:4c:83:b4:14:4c:43:a5:d3:4b:cb:d2:a9:a7:
                    70:17:cc:90:ae:6a:88:c0:a7:2d:db:02:e6:7f:91:
                    66:9f:3d:7d:04:47:7d:c2:fe:4d:63:83:bb:de:45:
                    73:c0:fa:53:9d:da:80:94:26:db:a0:d4:c2:62:f8:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D3:E3:0E:98:FB:C4:7A:05:4E:D9:02:A0:6B:C5:7C:46:0D:44:CB
            X509v3 Authority Key Identifier:
                keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:6c:ac:38:ac:fa:ce:63:d4:26:39:c4:f8:05:42:08:cd:6d:
         7f:63:f0:de:2c:d7:aa:11:54:65:ac:29:55:56:c3:93:ef:52:
         84:77:31:c0:67:ba:0d:d3:ad:a5:5b:67:99:d0:1d:7a:e8:a4:
         bf:ab:ed:16:6b:64:41:df:a6:52:4f:61:f5:5f:07:4f:57:47:
         54:ad:f3:eb:1e:8e:70:a9:64:44:b0:90:81:50:d6:a8:98:74:
         56:f0:44:49:3d:ea:ea:68:60:06:71:d7:b8:41:f7:af:a3:c5:
         48:be:95:69:0d:ed:72:67:db:82:3d:9b:92:0d:da:d4:19:26:
         fc:17:93:bb:f1:30:7b:30:68:38:81:49:1b:7c:4f:32:d1:38:
         04:48:1f:6b:2d:b7:29:7f:2b:3f:a6:84:07:4b:16:55:6c:87:
         85:a4:c6:f2:c7:e6:9e:37:e3:16:0d:b6:3e:07:bc:9d:50:3b:
         e9:3a:34:ad:bb:a7:40:b9:02:0d:d1:66:e5:d8:91:42:25:4f:
         88:03:62:b7:77:33:84:10:d0:94:ef:bc:ed:3b:10:c4:22:df:
         b2:2a:56:34:0a:6d:95:41:de:74:c0:42:ea:e4:4f:e4:11:69:
         85:0a:7a:14:ca:07:1b:26:b3:01:6e:6e:ea:46:a6:9a:55:76:
         c6:82:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:14 2026 by rpki-client