Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          T0qOoFHEiSkF8+oI/9R4iu2h46N7KCRFiQzoDOBnjBI=
Subject key identifier:   08:57:19:96:CA:C6:C8:07:6D:A8:61:68:E0:A0:5D:1E:B8:B3:12:52
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          0278
Signing time:             Wed 25 Mar 2026 01:18:47 +0000
Manifest this update:     Wed 25 Mar 2026 01:18:46 +0000
Manifest next update:     Wed 01 Apr 2026 01:18:46 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: KJYJO1VW0RGquSFpId+YCKUjQMrcqev5Jxqsy//TdDY=)
                          2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: tKFaHITtLZAQ61mcV49Br1vxEy6JkCTzuDJ4xLJ+YOA=)
                          3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: 6YJJzl5drZKIcUPjGHkkRR3YgQuFHkEPTeKqUES1L5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: Mar 25 01:18:46 2026 GMT
            Not After : Apr  1 01:18:46 2026 GMT
        Subject: CN=69c337f7-2f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:21:7b:9e:a1:28:94:4c:49:a6:4a:06:e3:
                    9f:c7:27:f4:36:d3:28:9b:29:3e:cf:88:01:b0:94:
                    a4:8a:b0:e4:fe:32:a9:c2:86:e0:5a:26:42:f8:26:
                    52:c4:cb:54:9e:f4:9f:69:eb:f4:8c:24:43:b2:76:
                    7e:f5:ff:92:2a:54:0b:ca:4b:7f:54:3d:0f:94:07:
                    0c:19:a9:71:fc:a2:b4:1d:43:87:a4:a5:55:59:0d:
                    6e:0f:88:f8:eb:64:17:4c:6a:b0:de:d4:a2:29:8b:
                    62:15:f0:18:4a:b3:2f:e6:ab:d0:ad:85:b5:79:3d:
                    eb:ba:0d:eb:e5:9d:64:84:ce:c9:d2:31:43:f4:f6:
                    25:eb:38:b6:ea:c3:f7:d8:10:9b:ea:9c:01:d8:bb:
                    ab:62:d3:53:fe:94:1d:db:12:8d:32:6d:47:f4:9b:
                    79:ac:e6:3d:b4:6f:84:ee:42:c2:21:49:cb:df:52:
                    27:b5:ee:42:97:b8:55:e9:64:86:97:f3:96:cb:2d:
                    41:a7:de:c8:1c:65:bd:4b:89:44:87:ff:d4:e8:70:
                    d8:ea:dd:41:a4:21:2e:e6:80:30:09:89:83:96:7d:
                    f2:fb:6e:3d:6e:9f:90:06:70:5a:0e:90:e1:d4:d7:
                    64:57:1c:12:74:ba:2c:e3:62:2a:47:31:fc:08:f1:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:57:19:96:CA:C6:C8:07:6D:A8:61:68:E0:A0:5D:1E:B8:B3:12:52
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bd:95:d6:47:01:8b:33:70:d3:3c:dd:90:85:63:04:20:ad:
         27:9c:80:f4:b8:78:5f:1e:e3:e7:28:9b:e7:e3:b1:00:d3:bf:
         52:d7:45:1b:3e:02:86:af:e6:45:03:83:10:94:ee:a2:88:41:
         3b:b8:6d:58:d8:7a:37:25:27:74:59:6e:fc:fc:f4:73:1f:01:
         0d:ab:96:fe:51:01:a6:f5:1f:75:72:a2:fc:77:18:dd:3c:aa:
         fe:ee:d2:1f:83:38:82:a7:e5:ad:15:ff:f7:80:70:f5:d9:da:
         9d:4d:50:1b:c5:7a:ce:af:c9:45:d7:a0:2c:8d:0d:45:83:57:
         bb:da:c8:1a:4e:71:da:96:13:4c:0d:40:0a:bf:ab:b1:5d:55:
         3e:20:58:21:f2:4f:bf:1d:59:6f:ae:30:8b:88:ed:12:b2:ae:
         a5:a6:35:21:9e:71:db:43:ca:45:9c:e0:a3:dc:30:07:10:3e:
         0c:e1:b1:61:31:58:30:de:6c:ed:2a:51:e3:0f:15:2e:4f:79:
         70:2b:81:08:2b:8c:15:5e:4d:d3:5a:7d:d8:37:d5:c2:0d:6b:
         6d:d6:b4:e7:19:a1:ae:99:4d:32:ac:18:b2:43:70:52:fe:a9:
         86:01:1b:2c:91:e4:f9:5e:fa:38:76:73:4b:7d:68:0d:d3:13:
         42:8f:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:25 2026 by rpki-client