Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File:                     M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier:          kky2Ty2S8jaCelsW59xRZk8FMMLcp1djeB5MZPKArTo=
Subject key identifier:   E7:15:E2:30:EB:9C:5D:C1:42:74:FE:D1:21:32:00:36:4A:88:51:BC
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer:       /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial:       02F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number:          02F0
Signing time:             Fri 27 Mar 2026 01:03:47 +0000
Manifest this update:     Fri 27 Mar 2026 01:03:47 +0000
Manifest next update:     Fri 03 Apr 2026 01:03:47 +0000
Files and hashes:         1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: TfTTVM0pToTwOumRS4GbNrfp4aZaTInipAnaTSqbeLM=)
                          2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RE9FWoshhFwVBEKSS3waEgRjXTpLrxodiVIl1CwWm+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
                          rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
        Validity
            Not Before: Mar 27 01:03:47 2026 GMT
            Not After : Apr  3 01:03:47 2026 GMT
        Subject: CN=69c5d773-d264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d7:e3:bc:7b:34:c6:09:df:15:a5:6c:64:55:
                    11:8c:f2:e9:3e:97:c8:9b:ee:27:ca:5a:e1:18:49:
                    cf:3d:39:1d:f2:68:70:39:13:09:b1:25:4c:13:a9:
                    e8:02:97:00:ed:eb:d7:c2:79:98:37:93:f7:50:68:
                    24:b7:1c:60:47:72:1c:a3:64:3e:8a:e2:75:de:db:
                    99:27:d0:e5:e6:59:3e:8e:b4:a4:26:23:28:8f:02:
                    19:7f:0d:e0:53:65:51:b5:43:5e:91:e0:95:1d:31:
                    c3:60:d1:3c:cb:6d:73:ca:46:79:ba:cd:c1:86:91:
                    2b:b8:0c:5d:92:42:d2:60:8c:55:30:29:52:9c:9a:
                    f1:fe:28:be:86:fb:86:6f:da:f2:08:c0:05:bd:05:
                    67:64:4c:d5:80:10:17:92:04:76:60:21:15:f2:7e:
                    8c:1f:7f:76:14:7c:25:fc:a7:52:f6:2f:01:77:0e:
                    69:94:c4:d3:3e:69:81:ff:c7:68:67:90:ed:2c:f0:
                    47:9f:de:24:21:2c:19:46:0f:3c:2b:14:64:fc:cb:
                    6a:b4:47:74:eb:9b:2d:f1:54:73:3b:49:48:d9:6d:
                    69:5c:0d:73:56:eb:78:7b:cb:d2:82:fb:26:bf:94:
                    41:cb:9c:67:68:5d:b9:d3:80:e3:aa:25:12:bf:a4:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:15:E2:30:EB:9C:5D:C1:42:74:FE:D1:21:32:00:36:4A:88:51:BC
            X509v3 Authority Key Identifier:
                keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:79:9a:85:59:ad:f2:4f:7c:f3:f9:a6:09:71:a1:b7:c4:1c:
         72:5f:6a:d0:74:5d:85:4c:8d:92:e1:bb:f4:85:72:3e:7d:57:
         63:5f:00:7d:80:9e:e7:5e:10:69:ff:39:c7:ee:d1:a4:a6:03:
         8d:bf:d3:ac:8f:79:59:2f:19:fa:2b:ac:85:7d:f1:10:a3:23:
         9c:91:54:17:2b:c0:48:21:d4:14:8f:9e:bc:de:3e:54:06:53:
         62:c5:92:d2:b9:02:c9:1f:fc:a2:53:b1:00:7d:ee:3d:b4:e2:
         c6:f3:b9:70:c4:1e:86:48:95:cd:4a:a6:27:8b:36:97:2d:09:
         a4:4c:7b:6d:3e:6e:ab:a9:97:cc:3d:13:c7:ce:42:99:d5:47:
         e7:04:15:5e:ef:0e:3f:52:1d:52:1b:4b:6e:6a:2b:9f:d2:cf:
         fc:ee:a6:e5:4f:38:8a:79:85:ee:82:ec:2f:b5:94:9d:97:29:
         7c:69:ef:82:2d:ea:7e:6d:f3:03:28:e4:0f:1f:3c:f3:5a:00:
         0c:01:ff:99:47:26:91:fb:c6:4a:dc:1e:bf:5e:6d:15:0f:2d:
         b7:6b:8d:9b:9e:43:e1:9d:4a:b4:c7:ee:55:92:c8:f7:1b:90:
         64:60:7f:8b:a6:19:10:99:63:4f:5a:71:37:46:12:9e:f1:81:
         49:5f:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:09 2026 by rpki-client