Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File:                     0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier:          my/FR18/CqSBWPsQJjyuNkAFWIoXIgwEou1vUkrqnO4=
Subject key identifier:   87:0E:B9:AD:3C:E0:66:AF:88:BB:11:B7:1A:AB:C5:2F:1B:2E:DE:09
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer:       /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number:          0160
Signing time:             Wed 25 Mar 2026 04:03:54 +0000
Manifest this update:     Wed 25 Mar 2026 04:03:54 +0000
Manifest next update:     Wed 01 Apr 2026 04:03:54 +0000
Files and hashes:         1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: zKIWN9XjKEoC5V0zvz9j/o5ir+D4vyQmUAouzefPTTY=)
                          2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: kCxBW9KlV5vONVPJNu5+ty3GjzD9VNwCWVx1zxePNqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
                          rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
        Validity
            Not Before: Mar 25 04:03:54 2026 GMT
            Not After : Apr  1 04:03:54 2026 GMT
        Subject: CN=69c35eaa-7a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:f5:24:16:a8:92:14:52:27:b4:12:95:da:
                    31:f0:15:76:cc:c6:f8:19:ea:a2:a5:49:87:ef:3c:
                    a8:12:b9:6e:30:c2:54:2e:22:20:22:29:21:57:43:
                    88:48:e0:9d:37:0e:ed:b3:d6:a2:c8:d0:26:d1:34:
                    8f:3b:03:a8:be:ea:42:5c:4a:f6:e3:25:cb:02:0b:
                    4a:0a:18:d4:1e:f0:b7:d2:3e:88:49:8d:50:f9:59:
                    04:9d:2b:14:61:dd:c2:3a:ec:7e:8d:9c:2f:fb:f2:
                    ab:df:d8:25:06:31:d4:ee:9c:96:aa:00:90:2b:45:
                    99:a4:47:e7:4a:79:20:15:b5:1b:da:db:e7:5d:83:
                    c7:26:77:3e:4e:f5:9d:81:f0:26:7b:75:a2:36:b2:
                    f8:d1:00:2e:ed:49:fd:cd:12:d8:02:24:89:74:0c:
                    7e:48:0a:b3:31:3d:fc:fd:a8:e2:ef:df:1b:74:d6:
                    83:23:d4:16:d5:16:24:5a:18:3f:61:31:fb:72:76:
                    90:06:59:1d:cb:7d:5c:3f:c2:e1:d7:97:00:31:30:
                    7f:db:aa:59:9d:18:d2:72:55:67:87:20:e5:61:ad:
                    28:2d:e7:9a:2a:f2:05:8d:91:87:0d:0f:1b:52:78:
                    9c:cb:79:48:4f:07:bb:5f:eb:ea:2f:0c:45:75:62:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:B9:AD:3C:E0:66:AF:88:BB:11:B7:1A:AB:C5:2F:1B:2E:DE:09
            X509v3 Authority Key Identifier:
                keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7e:f8:31:13:04:cf:bf:3f:92:62:01:b6:4b:9f:fe:bf:d8:
         1e:c5:84:6c:63:bd:2f:e3:72:65:5a:90:75:77:95:05:18:0c:
         90:58:14:92:32:f3:7d:7a:8c:49:e1:12:7b:33:f9:fa:ee:51:
         fc:31:a5:e1:3e:08:7e:71:39:d4:ba:c3:0e:50:92:6b:35:3c:
         18:2c:be:d1:3f:2c:0a:75:61:50:35:bc:d5:d2:a0:d2:bf:b3:
         9d:97:27:5c:1a:40:83:0b:62:eb:28:ab:24:0e:71:b5:aa:78:
         bb:a3:a2:2f:49:36:5f:f8:2a:35:43:81:a9:12:3b:28:3a:94:
         25:3f:9c:65:0c:fa:bb:25:49:f3:37:2f:c4:12:f4:73:f3:fd:
         2d:64:ac:4b:59:53:39:1e:46:ad:02:6a:79:2f:22:f8:e9:bf:
         74:c4:88:9c:82:16:ff:2b:19:df:86:a8:27:cd:5d:03:9a:ec:
         d7:b9:09:6c:80:92:0b:00:b5:fe:6a:4e:57:51:4b:03:b1:97:
         f8:32:2a:8c:c0:60:fa:fe:51:4c:6b:d7:98:da:67:49:0e:92:
         cc:be:7d:ee:bd:37:d1:e2:67:12:84:3d:1d:15:6a:77:20:a3:
         28:46:bb:a3:9d:f3:f2:2f:d4:6c:c0:7e:88:df:db:29:3c:df:
         d7:62:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:03 2026 by rpki-client