Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
File:                     0rolH4MRa7tToMiSMQ9P963v_es.mft (raw, json)
Hash identifier:          VlVm+EzmrFWO6b7CrOXh5dciJpAqUVyrWaTKukUVM84=
Subject key identifier:   70:B6:E2:60:6D:40:DC:46:43:38:C5:71:84:0A:3C:BF:CC:45:CA:38
Authority key identifier: D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
Certificate issuer:       /CN=A9175B42/serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
Manifest number:          A7
Signing time:             Wed 25 Mar 2026 06:24:56 +0000
Manifest this update:     Wed 25 Mar 2026 06:24:56 +0000
Manifest next update:     Wed 01 Apr 2026 06:24:56 +0000
Files and hashes:         1: 0rolH4MRa7tToMiSMQ9P963v_es.crl (hash: ObUHYmKxZCzYp1i8cLipEZUUuhuV3zMA1mMgWOrmR/I=)
                          2: EABFF866266511F0A3060E66C4F9AE02.roa (hash: 3VcOAffEJ0gAEFY9o/GWgUHQvlmy/gzyZiJXevjQCoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
                          rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175B42, serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
        Validity
            Not Before: Mar 25 06:24:56 2026 GMT
            Not After : Apr  1 06:24:56 2026 GMT
        Subject: CN=69c37fb8-55bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:6d:a4:6c:f3:4e:f2:f5:fc:44:f4:e2:08:
                    4f:00:e1:4c:fc:a7:36:41:28:38:f9:f6:87:7e:d7:
                    37:0e:d5:d6:37:3f:59:52:ae:67:02:3b:ed:e0:6b:
                    d7:b8:80:b2:30:b4:02:b2:a9:1b:fc:89:4f:25:8a:
                    76:5c:76:3e:e0:6d:27:74:14:f9:e4:b8:29:cd:b0:
                    73:b4:88:ea:66:e8:4e:d3:d4:7f:d3:96:38:d4:18:
                    01:98:c0:3e:50:88:c0:7f:67:50:2a:5a:11:28:f8:
                    1e:e8:ff:d6:4e:15:0e:cf:90:b4:59:40:f2:d6:ba:
                    bc:09:4f:7f:7f:67:e2:59:2c:4f:06:ff:46:ca:4f:
                    ab:79:9e:77:7b:58:65:56:94:59:72:cd:a8:e5:01:
                    0c:ef:90:5d:00:c2:26:36:d9:48:ed:03:74:26:07:
                    2f:a5:91:af:66:d7:c2:b1:9b:a6:53:36:47:1c:86:
                    da:57:b5:e0:c7:25:3a:78:1d:c1:b9:ee:d6:42:6a:
                    78:06:58:a4:73:00:3f:74:4f:73:10:45:b3:5e:c6:
                    bd:7c:e6:2f:4b:f1:96:12:8c:ed:55:7a:ec:c4:1d:
                    c4:95:06:7c:c0:0d:7d:2f:83:ea:40:35:de:db:94:
                    00:10:b2:46:40:58:73:79:9a:9f:25:11:cc:f5:ea:
                    e5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B6:E2:60:6D:40:DC:46:43:38:C5:71:84:0A:3C:BF:CC:45:CA:38
            X509v3 Authority Key Identifier:
                keyid:D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:af:54:8c:e5:41:e4:8f:1f:36:c1:57:06:6b:f4:25:23:cf:
         0a:4f:7d:48:38:c1:89:91:58:58:a8:74:1f:f8:b7:07:67:fa:
         4d:39:62:ce:1f:2b:d1:6b:a2:94:08:75:27:33:ac:b8:03:89:
         34:06:ef:2a:54:bd:86:12:cf:60:06:bc:cd:0b:8b:44:fb:c7:
         75:51:01:7f:a7:81:cc:dc:83:2d:0d:97:b2:78:68:2a:55:a3:
         e1:eb:bc:82:e9:e8:2a:6a:30:39:b4:d7:c4:a9:21:fb:4b:d6:
         15:cd:4e:2a:0b:1a:a2:04:37:26:68:d9:8a:98:cd:68:3c:2e:
         4e:8f:72:4f:b9:cb:99:e5:b3:30:ef:65:9c:1c:80:c4:d6:d6:
         f4:0a:fd:e8:44:54:df:ab:a0:85:8b:7b:43:b1:dc:c0:21:37:
         24:c8:49:9e:f8:a4:c3:cd:5f:17:08:e2:26:73:44:60:8b:15:
         dd:9f:55:23:c4:29:ca:7d:b3:88:df:08:ac:09:fc:50:74:74:
         5c:7a:8e:6d:d0:65:6f:3e:5f:6a:82:0e:76:3a:70:9f:8a:0b:
         3f:e6:f2:92:e5:67:d0:57:e4:fc:9f:89:2d:cd:f4:24:4f:71:
         b8:5f:a3:b4:a3:90:7a:a9:5a:c9:86:cc:11:09:b5:d8:35:1a:
         ad:49:1e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:55 2026 by rpki-client