Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
File:                     7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft (raw, json)
Hash identifier:          LjWXiWlmLbK8zJd8FrlMytXiehGlVKAYuk01GE8dNco=
Subject key identifier:   EF:C9:2E:BA:6F:FA:EA:B1:60:36:4C:38:65:8B:FB:E3:DA:D0:C3:2F
Authority key identifier: ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3
Certificate issuer:       /CN=A9152787/serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
Manifest number:          010D
Signing time:             Wed 25 Mar 2026 05:11:43 +0000
Manifest this update:     Wed 25 Mar 2026 05:11:42 +0000
Manifest next update:     Wed 01 Apr 2026 05:11:42 +0000
Files and hashes:         1: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl (hash: l13iHLYtFuuEZizO6HhttIsmWn7+tbkPt5FEvmyseOY=)
                          2: 45D37CC28F8111EFB699FB63C4F9AE02.roa (hash: OMf3bH3yxhVkJLXPWPpo+JeDue+AzlqHbjI50Pp8r90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl
                          rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152787, serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3
        Validity
            Not Before: Mar 25 05:11:42 2026 GMT
            Not After : Apr  1 05:11:42 2026 GMT
        Subject: CN=69c36e8f-2a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:5c:5e:0f:3c:c4:ca:6e:b4:ea:8e:77:97:
                    00:04:d6:45:67:e2:db:7c:db:60:8b:93:10:92:fc:
                    e7:dd:37:d6:30:73:6c:9f:ca:5e:ba:5b:9a:29:7f:
                    e1:9e:7a:f5:79:cd:0c:eb:06:e8:8c:d8:8c:bb:38:
                    01:39:2e:73:50:95:9d:df:31:44:a5:c6:bb:43:ef:
                    a5:ae:ad:9b:12:b0:b1:88:53:0b:11:94:11:ac:f8:
                    13:47:c7:9c:60:9b:51:9d:ec:b0:fb:b1:57:bc:75:
                    1e:fd:cd:32:a6:17:38:a0:33:bf:de:8f:8f:98:cd:
                    2f:75:47:95:5c:aa:9d:78:95:59:ad:ea:ca:f5:89:
                    68:1c:f7:d3:9d:14:29:e3:47:39:48:e6:02:3e:f1:
                    7f:f6:3f:f6:44:cf:0a:56:c8:d1:84:24:47:4a:5f:
                    60:df:d9:5c:b0:a5:f5:00:6c:84:78:db:22:a5:fc:
                    a9:62:e6:b4:8c:a8:d7:45:9a:a9:6c:2d:4f:03:17:
                    ce:0d:49:cc:1b:ce:88:5e:0c:91:84:28:42:e6:4a:
                    56:05:f7:80:f8:8a:96:b2:c9:3a:88:42:71:cf:ee:
                    f4:cf:ad:bc:ea:b6:6f:65:56:6b:96:e0:31:f5:63:
                    e7:04:95:da:ef:b3:c8:93:7a:35:2a:7d:2b:eb:16:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C9:2E:BA:6F:FA:EA:B1:60:36:4C:38:65:8B:FB:E3:DA:D0:C3:2F
            X509v3 Authority Key Identifier:
                keyid:ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ed:fe:95:4a:b5:52:5e:7e:69:ae:f0:9d:60:28:89:b2:9c:
         5b:7f:9e:87:6f:4b:e1:de:ab:ff:41:fc:94:59:42:ee:68:63:
         47:bf:8f:04:f4:c9:85:5c:21:dc:07:25:ab:47:76:ee:72:af:
         b2:bc:6a:6b:24:a0:8b:0b:de:27:cc:5c:2c:76:3b:14:f5:fd:
         f7:f7:20:0f:ac:45:7b:f7:d2:25:43:8d:e3:13:e3:a4:39:e7:
         f0:2c:dd:4c:6f:ba:f1:5d:45:a5:c3:71:91:f5:49:fd:bd:7d:
         bf:4d:37:e5:b5:8e:46:bb:fe:e7:1c:40:65:5a:e5:54:25:96:
         f2:b9:df:d5:72:e7:ef:66:f4:e0:70:55:c0:6a:a9:08:8f:4e:
         a6:c0:51:d6:72:40:aa:be:8f:9c:4e:88:ab:9a:f7:38:a7:a2:
         55:fd:d4:64:f1:c0:20:45:e7:8d:91:7e:e3:c5:de:e5:f0:0d:
         5a:06:0a:17:ae:7b:2d:56:7b:ec:7b:c3:2e:02:ec:ad:46:ba:
         32:aa:b8:f9:74:f7:53:f0:62:36:38:5e:fb:e3:a4:94:d1:1f:
         52:95:73:64:bd:9a:72:16:e6:f3:49:3d:20:34:e8:80:06:18:
         d3:ee:02:02:fc:57:1f:6d:36:4c:69:c9:17:c0:13:db:bf:04:
         ad:74:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:39:55 2026 by rpki-client