Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
File:                     07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json)
Hash identifier:          z23f1gqhxOHGP69Ks44ZYW7qCJLJKF+VI5zv1Xkz/IE=
Subject key identifier:   6A:5B:91:7F:99:26:21:12:01:23:F1:C9:BE:04:01:48:70:21:F7:F0
Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Certificate issuer:       /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
Manifest number:          024C
Signing time:             Fri 27 Mar 2026 01:55:54 +0000
Manifest this update:     Fri 27 Mar 2026 01:55:53 +0000
Manifest next update:     Fri 03 Apr 2026 01:55:53 +0000
Files and hashes:         1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: N5QfgZcPuSNmPmQnnvjdR/P9vLT7TtbMBwvjQg1UPU8=)
                          2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: MAv+qfj8FMNp/Yq/62rBZvkxjMlEQpOzuUtTKjB/c9g=)
                          3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: 7LeWas0M3QR0jLIyRnb4OwRP4KvZNSbmaG7fmi94Ksw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
                          rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
        Validity
            Not Before: Mar 27 01:55:53 2026 GMT
            Not After : Apr  3 01:55:53 2026 GMT
        Subject: CN=69c5e3aa-acc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:50:15:56:05:d5:4c:d4:3d:aa:a4:be:e4:5a:
                    be:4c:5a:15:e4:31:6b:a2:70:d1:6a:94:05:18:3e:
                    f6:6a:39:0e:ac:5d:f9:7a:48:bd:67:2e:b7:53:17:
                    97:89:96:fe:46:c4:f3:57:a3:37:1b:72:c6:8b:af:
                    ac:30:11:23:09:5f:64:6d:63:42:ec:50:e1:f9:00:
                    2e:5e:26:1d:d8:c4:b3:24:8b:10:87:a7:16:44:3f:
                    8d:5e:61:82:e0:77:49:cb:c4:ad:15:75:46:37:94:
                    a7:56:ca:89:94:67:7d:83:2c:c5:38:80:a3:10:a8:
                    76:e2:7a:91:20:bd:c6:f1:4a:f8:22:7a:5b:dc:55:
                    10:17:8f:e0:8d:19:7c:45:20:28:07:7d:3e:b9:c9:
                    cd:6b:10:e2:17:b1:1e:12:c1:99:15:91:19:b2:8e:
                    d6:16:da:f2:ac:1f:c2:4a:a2:18:53:7d:e5:c6:d5:
                    ba:8d:b8:fc:e3:8e:b8:1f:03:b8:49:67:de:d4:43:
                    69:63:c0:41:87:b8:13:6b:54:7b:7b:84:fa:b3:d4:
                    60:66:66:ec:f3:3c:5f:d6:e3:c2:dc:1c:3f:87:d4:
                    87:89:9c:bb:b5:f7:33:94:91:ae:86:d5:86:c8:3d:
                    79:cf:84:05:95:fc:c1:21:d5:64:72:80:56:53:75:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5B:91:7F:99:26:21:12:01:23:F1:C9:BE:04:01:48:70:21:F7:F0
            X509v3 Authority Key Identifier:
                keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:68:0f:39:38:8f:c8:de:2a:3c:be:94:08:ee:4f:8e:6c:ad:
         72:8f:3a:44:01:c0:e4:ae:40:e7:dc:c1:dc:c6:93:82:0d:b2:
         b2:b6:07:1d:c9:fc:e1:3d:4f:33:60:e1:60:0f:27:eb:8c:24:
         00:a3:e5:51:55:5e:86:26:54:dc:ee:e3:c4:c0:34:eb:ec:ad:
         b3:5d:ed:d3:e3:a0:4a:1f:6a:fa:fe:ee:bd:67:a4:93:c7:81:
         40:fd:85:02:ba:06:90:17:5e:1f:3b:08:01:45:fd:59:fa:a6:
         d5:9c:52:7c:c6:53:a3:ad:a0:4c:37:13:2e:5e:be:11:c3:b6:
         d2:8c:28:f0:fc:53:f1:12:8a:de:a1:a5:5c:5a:fc:e6:d6:94:
         54:7b:32:9a:12:b0:53:dd:08:49:b1:1b:29:62:9e:66:c7:93:
         a7:5f:7a:0e:c1:44:f1:fd:72:e6:bb:73:15:0a:7a:96:d5:17:
         55:b6:40:f4:1a:eb:00:f2:ea:2b:c2:5b:88:2b:a8:8f:61:03:
         48:f1:c5:2e:1a:72:c6:c1:e5:ea:3a:47:08:56:e8:96:c8:b8:
         56:5c:10:7d:aa:82:a8:ae:1e:d0:6c:dc:60:b9:b2:60:74:f5:
         2d:fe:86:47:bc:b2:08:a7:21:09:a2:b0:3d:b6:2b:d1:7c:99:
         a9:8e:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:36:45 2026 by rpki-client