Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
File:                     DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json)
Hash identifier:          xA3VgKy3GadARnrvU59hxgXz14y76GCLWEnn1ZOzAxE=
Subject key identifier:   DF:2E:BA:74:CA:74:64:E4:80:7A:9E:30:6C:F0:DF:B0:A4:3A:DC:0C
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Certificate issuer:       /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial:       056E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
Manifest number:          0562
Signing time:             Tue 24 Mar 2026 23:02:34 +0000
Manifest this update:     Tue 24 Mar 2026 23:02:33 +0000
Manifest next update:     Tue 31 Mar 2026 23:02:33 +0000
Files and hashes:         1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: GYP3ViPn1JuqeRGfiR2Z3DSmVEINwburRL8CDIyqgg8=)
                          2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: nqt0HcD1EVYLOzTSMy3qSz9HYLHCtp2w+DxH+GzK3ds=)
                          3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: y9tCShTAtdbkhcHqZKIPeVMLfFc8J6hhfijdxgmxbTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
                          rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
        Validity
            Not Before: Mar 24 23:02:33 2026 GMT
            Not After : Mar 31 23:02:33 2026 GMT
        Subject: CN=69c3180a-fb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:10:47:71:9d:b8:01:0d:0e:db:4f:b2:7a:
                    68:52:18:23:f7:51:fa:e2:08:0f:68:bf:8a:d9:24:
                    98:2a:19:2d:b8:09:d4:60:bc:61:eb:3e:82:a0:09:
                    ee:a2:e2:21:90:3e:bf:8e:86:af:06:cd:f3:7b:11:
                    e5:6c:aa:65:ab:44:e9:36:a3:97:8f:d4:9d:97:7c:
                    b2:90:9d:72:cb:ea:34:35:52:a2:8b:da:4b:d5:52:
                    8d:66:45:7a:ad:33:b9:50:b6:6f:fe:85:b3:30:c0:
                    86:3f:8f:57:34:5f:a4:a6:2f:fc:d2:1a:d4:bf:b8:
                    7e:78:77:64:13:67:ef:02:9e:23:b1:11:bb:c2:60:
                    00:6b:a9:99:ed:d5:bf:b8:3b:2b:43:81:51:b4:fe:
                    3b:cf:71:a5:98:8c:66:b3:86:78:aa:81:54:6f:86:
                    a9:4c:d2:64:d7:dd:c6:b0:cb:3b:f7:4b:70:9f:ed:
                    84:18:53:83:c4:ec:71:d4:50:a8:9c:7b:43:b6:f3:
                    b9:9f:54:2f:44:2b:ed:2d:a6:e6:cc:98:1f:5b:c9:
                    1a:c8:41:13:89:41:1b:0e:c5:f1:00:19:73:9a:8d:
                    7a:a0:cc:69:8a:8d:03:29:94:33:68:ce:92:03:ad:
                    b4:c0:a1:dd:25:48:d0:d7:01:d1:31:e9:05:83:22:
                    be:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2E:BA:74:CA:74:64:E4:80:7A:9E:30:6C:F0:DF:B0:A4:3A:DC:0C
            X509v3 Authority Key Identifier:
                keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a9:94:77:58:86:23:71:23:20:ac:e8:c8:fd:3f:4c:e7:a6:
         bc:f7:be:46:6c:d7:b1:7c:c2:92:d9:bd:32:78:01:da:b4:c2:
         70:cb:2b:19:d4:b6:56:0a:8b:76:66:79:a6:f7:cd:7b:59:77:
         d3:93:05:d2:27:b2:64:c4:2f:8e:e7:51:2e:48:b1:51:6d:45:
         99:33:f0:91:8e:6c:57:7d:fc:85:58:5c:68:c9:94:e3:f9:35:
         19:b1:fe:e3:0a:4f:73:81:b6:dc:b1:c8:19:9f:a6:bb:63:ca:
         3d:19:41:94:2f:fc:71:07:3f:cc:63:86:0c:67:7e:b2:6d:99:
         89:ef:01:37:6f:1a:c8:ef:66:0e:9c:ec:5d:47:e5:97:ad:48:
         f5:5a:ad:03:d1:1e:16:74:66:ac:9e:bd:14:3b:33:6b:4a:2d:
         42:99:ac:6b:88:7f:67:03:68:00:e3:32:62:83:9c:34:ca:e1:
         f2:c3:b0:f4:48:87:2d:97:4f:6b:55:85:20:17:5e:56:d0:be:
         d0:72:39:bf:c0:1c:dd:8a:47:24:8c:a9:45:18:34:34:7d:2a:
         fd:69:a6:04:3b:78:5c:89:f5:c5:40:a7:d0:8a:b6:25:63:71:
         04:13:9f:af:fd:2d:f4:62:35:25:09:64:cc:0f:b3:a8:56:60:
         be:f5:df:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:16:28 2026 by rpki-client