Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
File:                     ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft (raw, json)
Hash identifier:          LEsA68Jw3ODYRkLJWg2uC35YvDdbLBWdKdMRu5HqIso=
Subject key identifier:   91:0D:3E:7C:9D:93:F0:45:B9:2F:1C:E2:93:F8:11:69:BB:89:15:29
Authority key identifier: 7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13
Certificate issuer:       /CN=A9157B93/serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
Manifest number:          A8
Signing time:             Wed 25 Mar 2026 06:26:04 +0000
Manifest this update:     Wed 25 Mar 2026 06:26:03 +0000
Manifest next update:     Wed 01 Apr 2026 06:26:03 +0000
Files and hashes:         1: ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl (hash: i3kDpnn1jag4KoG2a+ihjRCzHDAZ0viY/s5MxZuRP1k=)
                          2: 7C487C522AD711F0889A9C4CC4F9AE02.roa (hash: LrgZlKmCBJJsSbfhjuUNZPTEV7fzfSNz0zBjR7IdJII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl
                          rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B93, serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
        Validity
            Not Before: Mar 25 06:26:03 2026 GMT
            Not After : Apr  1 06:26:03 2026 GMT
        Subject: CN=69c37ffc-a148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:e2:61:bb:74:02:86:a4:fc:a9:e0:f1:c2:
                    3a:45:5f:f3:1c:06:7b:d3:06:c9:87:37:6e:bf:9d:
                    6d:b3:ad:aa:fc:1c:28:7d:43:36:db:22:9b:34:e4:
                    92:fd:da:cd:52:77:67:9e:00:5b:37:83:44:d8:13:
                    f5:17:5e:5b:2a:9f:52:af:bc:16:28:29:ef:82:fa:
                    e4:9c:a0:94:7d:ac:38:28:38:18:c2:78:62:37:f6:
                    56:de:a5:9c:3a:98:35:e5:68:d2:2a:ae:9a:68:37:
                    db:a9:95:af:89:4d:d1:33:2a:0a:1f:80:d9:c3:06:
                    dd:82:57:b7:f4:fc:a3:af:f4:16:57:9d:bf:5f:61:
                    2e:7b:3c:b9:8b:58:98:88:ea:1c:60:c6:6d:eb:7a:
                    74:72:86:3f:59:fc:41:69:f7:04:c2:04:25:ea:24:
                    18:06:b9:dd:9f:aa:f7:26:13:ea:7e:5f:c1:04:d5:
                    31:8b:3b:06:ca:95:e6:7e:01:d1:5e:8b:49:84:62:
                    a8:e7:df:3a:5b:7c:ae:b9:b0:f4:18:8e:0c:3a:b7:
                    b7:dd:67:85:c7:61:b6:47:41:32:38:92:ba:a1:d2:
                    d1:17:d0:25:c5:29:45:b4:6b:f8:1d:f5:88:3b:78:
                    c3:e2:6d:16:a0:25:09:3a:16:b9:5b:ee:51:ad:1d:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0D:3E:7C:9D:93:F0:45:B9:2F:1C:E2:93:F8:11:69:BB:89:15:29
            X509v3 Authority Key Identifier:
                keyid:7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:66:79:bb:96:7a:fa:47:2e:17:a1:63:fd:37:44:39:5b:c8:
         5b:f1:15:0f:58:bb:7d:cb:d2:d4:53:90:95:d6:4f:75:af:e7:
         78:71:ac:ac:26:0b:05:45:20:2e:0e:cc:62:7d:c0:2c:ba:49:
         80:86:0d:90:bb:49:71:b2:3f:e1:8c:bf:c2:a9:01:21:82:b8:
         2b:6c:7e:84:29:97:38:3a:3c:6e:71:ac:d9:ee:a1:07:5e:f4:
         49:c1:88:16:f7:c6:a8:4f:a6:79:20:66:1a:af:9a:34:55:2d:
         49:88:de:7f:a5:27:6d:1b:0e:29:41:68:f6:fd:5b:00:f1:3c:
         23:f9:4c:18:d6:b3:89:f6:ee:7f:50:43:04:c8:b0:82:b2:15:
         79:66:db:f0:e1:3a:2e:9a:a2:df:3e:05:99:93:0a:b8:9c:58:
         c7:7a:a0:4e:8b:b0:36:d0:86:1d:87:08:8d:e8:08:04:5a:f6:
         70:28:76:f4:92:eb:44:62:3b:72:30:70:ff:5e:ae:72:26:a2:
         89:f4:07:09:94:75:63:70:10:2b:c0:ef:1e:5b:41:de:ec:0c:
         1f:d5:fc:9c:a0:e1:d7:c7:36:b5:26:df:4b:ee:c9:2d:96:6e:
         aa:f2:b2:0d:0a:c9:38:14:9d:c6:79:47:2b:60:8d:fc:5f:8d:
         5f:33:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:22 2026 by rpki-client