Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
File:                     7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json)
Hash identifier:          u3dDTPcz4AQMhYJInx60Z6gi6iuEGh5qBJiaLAIW4lY=
Subject key identifier:   B7:13:E8:F4:E8:51:65:A7:DA:0B:19:5B:8E:66:9C:FD:1A:C0:7C:35
Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
Certificate issuer:       /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
Manifest number:          011C
Signing time:             Wed 25 Mar 2026 05:05:17 +0000
Manifest this update:     Wed 25 Mar 2026 05:05:17 +0000
Manifest next update:     Wed 01 Apr 2026 05:05:17 +0000
Files and hashes:         1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: eXhgffbHL2HZQO3pnicu+g0KgzHWqmIEypmuENYk7qw=)
                          2: A647525E853B11EFB513D149C4F9AE02.roa (hash: 8/z43AfGGthVBc9cfR73JH6jugiVT0aL27yCo3q+XYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
                          rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
        Validity
            Not Before: Mar 25 05:05:17 2026 GMT
            Not After : Apr  1 05:05:17 2026 GMT
        Subject: CN=69c36d0d-9e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:73:52:ee:63:70:8c:67:8d:bb:24:61:ea:
                    ee:0d:34:8b:c2:07:72:81:b0:0a:3c:23:49:55:b1:
                    18:16:59:49:fb:ff:b1:11:cb:52:d0:de:f8:0b:9d:
                    aa:e0:3c:0b:c9:1f:44:9a:52:3a:f0:8b:ba:cc:d0:
                    a1:e1:5c:a6:97:57:2b:61:08:b2:ba:18:29:e1:3b:
                    a8:ac:53:65:5c:7e:44:49:5d:58:48:ff:85:95:ce:
                    3e:81:9f:76:9b:60:53:a2:38:4e:e5:32:c6:a1:11:
                    1a:3e:70:b9:6b:07:c6:31:d8:d9:0c:17:c5:fe:6f:
                    4d:23:a9:de:fb:6b:90:13:e4:9b:42:b8:b6:f7:7a:
                    1a:b2:e9:30:16:bb:45:30:e6:d6:26:2a:bc:e8:b7:
                    66:c2:33:72:5c:00:6b:88:a1:07:13:cc:75:69:96:
                    e9:18:85:a8:00:47:d9:0e:38:b4:0b:8c:fa:44:f3:
                    c3:0f:fb:97:c5:54:40:2b:ac:59:32:23:d3:cf:d2:
                    de:1d:30:d9:d8:2c:98:4a:fd:53:e1:20:9f:03:51:
                    08:41:74:ef:54:11:b3:49:5a:ef:ac:eb:60:46:2c:
                    f2:61:47:cf:e2:e9:72:02:0f:8c:e4:4e:4a:f9:cf:
                    dd:ff:00:8c:4a:e4:79:8f:69:6a:af:7b:1d:39:61:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:13:E8:F4:E8:51:65:A7:DA:0B:19:5B:8E:66:9C:FD:1A:C0:7C:35
            X509v3 Authority Key Identifier:
                keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:87:1d:83:68:74:ff:8d:09:e4:51:f7:97:6f:c0:35:ff:
         07:06:42:29:21:0e:50:37:a5:b1:b1:97:93:80:0a:89:67:f8:
         1a:84:7c:32:5a:f5:79:74:74:6e:78:22:e3:a6:9f:2d:9b:8f:
         99:17:da:72:36:be:b0:50:ed:20:2a:f2:32:1f:cb:8e:93:c6:
         65:23:4a:9d:74:9c:2e:b2:38:9d:52:67:77:41:81:87:84:25:
         12:48:33:29:3b:4d:4d:95:cc:bf:1d:61:b7:04:71:f7:57:a6:
         12:7b:88:50:c4:48:66:ab:61:ae:3a:52:ac:a2:17:78:73:b3:
         b4:b9:cc:1b:1a:50:54:0d:50:1a:91:98:8c:5c:f5:11:09:7e:
         c6:f5:76:1a:50:68:2c:fe:a2:a2:a5:13:ab:49:18:99:70:53:
         ad:2a:67:f0:d9:70:c0:1e:ae:15:f1:fe:01:dc:88:fc:50:e8:
         cd:c5:9f:22:a6:58:ff:1f:3b:6d:10:e4:a3:43:d4:b6:40:1d:
         50:59:01:84:0d:2d:21:b1:3b:32:0e:2d:7f:0e:06:00:6d:2a:
         df:26:bd:dd:08:2a:2f:e8:5a:f6:2b:38:3b:86:1d:21:7f:9c:
         a2:f3:51:88:72:53:0f:1e:4f:a5:ad:11:31:b2:ae:71:26:60:
         1b:58:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:13:36 2026 by rpki-client