Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
File:                     7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json)
Hash identifier:          Y+5tUXCDwt0U+aWuqKM7BgzWaglWuGYi0uWUG6sE8aQ=
Subject key identifier:   81:BF:40:31:CF:7B:5C:02:83:93:2E:52:29:83:F1:62:A3:8A:78:B9
Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
Certificate issuer:       /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Certificate serial:       3527
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
Manifest number:          3527
Signing time:             Tue 24 Mar 2026 15:09:18 +0000
Manifest this update:     Tue 24 Mar 2026 15:09:17 +0000
Manifest next update:     Tue 31 Mar 2026 15:09:17 +0000
Files and hashes:         1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: oyG8IsylPKGfvIaDfKV4ITw7pWdmbUu4pMgv9Q2cA44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
                          rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13607 (0x3527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
        Validity
            Not Before: Mar 24 15:09:17 2026 GMT
            Not After : Mar 31 15:09:17 2026 GMT
        Subject: CN=69c2a91e-23d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:69:0a:06:d8:09:b6:11:24:a2:26:ed:69:
                    14:bb:09:30:b1:99:36:b0:f0:43:f7:94:3b:c9:c2:
                    a9:6d:60:05:c1:38:e8:4a:9d:f0:1b:0e:39:b3:18:
                    ba:7e:d9:50:95:59:0b:99:e1:9f:a8:b0:4c:de:ee:
                    82:8e:7e:e6:d1:fe:02:b2:fc:d8:c2:3b:db:b3:1e:
                    ca:f2:e6:be:01:89:e6:6c:84:88:d9:cf:2f:9f:99:
                    05:ac:dc:3f:9a:c2:a8:f0:59:2c:2c:47:d2:96:3c:
                    9a:c3:ff:a1:e1:3c:85:35:b1:8f:56:2c:08:09:e2:
                    85:04:81:95:46:68:c8:e5:aa:6f:8b:94:c5:87:d7:
                    93:27:17:b6:de:ba:c3:1e:a0:32:8e:01:24:0d:c6:
                    40:b1:34:58:98:c1:6d:0d:61:34:16:ff:1b:3c:79:
                    ec:1b:fe:ec:21:61:76:b6:a0:42:25:92:9e:44:5f:
                    81:3b:9e:cd:3d:c5:69:bf:aa:29:f9:19:11:4a:25:
                    b6:74:8c:38:7f:d6:26:22:22:68:7b:9a:fa:1f:a4:
                    f3:c2:d8:b8:d6:25:e8:f0:cf:59:c7:64:54:77:ed:
                    1b:ed:61:1a:d3:29:48:81:18:6a:2a:c5:fd:c9:54:
                    d6:2b:37:0e:12:8c:37:c0:6b:f8:1e:48:5a:43:28:
                    08:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BF:40:31:CF:7B:5C:02:83:93:2E:52:29:83:F1:62:A3:8A:78:B9
            X509v3 Authority Key Identifier:
                keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:46:cc:cc:ba:ab:33:4a:eb:3b:db:8e:c8:e0:e3:38:44:35:
         7e:11:aa:7a:f4:4e:13:f3:24:b5:99:c7:bf:0b:27:cf:ad:c6:
         d0:fc:7d:46:17:87:b7:f9:ca:f9:8f:9a:c1:e7:8a:e3:bc:bf:
         8e:3a:16:c1:de:f9:af:11:75:6e:b0:dc:cb:a9:b0:9c:dc:47:
         66:62:de:ab:5c:3a:99:98:44:c2:f2:e8:77:dd:60:90:87:20:
         6e:59:84:9d:55:5c:2b:13:90:ef:6c:14:70:95:24:78:ee:8e:
         29:ef:c6:cc:bd:47:19:e9:f6:60:db:69:29:17:76:0c:cd:3b:
         28:62:ba:96:71:bb:c7:6d:c0:fa:db:a4:38:e6:37:1d:83:00:
         4c:d1:6a:4f:1d:da:d5:18:02:6e:0b:e6:b9:da:c5:96:e0:62:
         f1:fb:0d:e1:c8:46:1a:2f:b2:45:00:4c:67:c8:51:11:bc:a0:
         dd:92:45:a9:54:5a:d8:df:2a:47:bd:59:f8:f6:e8:f4:20:e4:
         02:b4:12:16:db:11:19:31:ab:81:92:c8:89:89:1c:d4:04:ae:
         60:96:d3:19:fd:15:41:09:82:09:8f:a9:cc:20:3a:d1:28:f9:
         a7:8c:5b:73:bf:52:46:1a:b3:40:1a:f7:85:b4:1b:ef:e6:57:
         b0:88:8b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:12 2026 by rpki-client