Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
File:                     7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json)
Hash identifier:          DzdUXBOXMKpgYpqnlsf0l/lTGDjQs+w+G2i9Q7E2FKc=
Subject key identifier:   38:9E:BE:73:C4:D3:37:9C:88:F2:8A:C1:F4:88:55:3C:FA:D3:A8:42
Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
Certificate issuer:       /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Certificate serial:       0518
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
Manifest number:          0508
Signing time:             Thu 26 Mar 2026 23:29:23 +0000
Manifest this update:     Thu 26 Mar 2026 23:29:23 +0000
Manifest next update:     Thu 02 Apr 2026 23:29:23 +0000
Files and hashes:         1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: PXmV4z2GbWNxi8Tums2DEMI15BsS7DmTJFj0n8TZsYM=)
                          2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: PZZSaZ/jY/+Q5rYNb4tAqwzAZjO5/D1Dz+zXHEh3vC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
                          rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
        Validity
            Not Before: Mar 26 23:29:23 2026 GMT
            Not After : Apr  2 23:29:23 2026 GMT
        Subject: CN=69c5c153-a802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:59:22:d7:0a:79:6a:74:89:74:56:45:00:
                    3f:d7:d3:c4:a2:25:88:56:42:b9:72:f4:86:73:d3:
                    e9:6e:4e:6e:aa:0a:b6:93:97:27:29:61:77:4c:e7:
                    b7:82:51:32:56:31:86:d0:fb:a0:ce:83:96:59:23:
                    21:d4:01:82:fb:dd:c3:49:52:bb:ee:24:15:60:ec:
                    43:c9:2b:9c:11:e9:58:d7:c4:1b:4b:2a:10:69:51:
                    4f:d0:85:c7:83:6b:ab:c8:61:c4:dd:92:08:98:7e:
                    97:59:9e:59:5d:dc:9c:4d:d5:a7:37:7f:67:6f:1f:
                    26:cd:bb:7f:83:60:27:72:ab:ed:c5:13:d2:20:70:
                    16:93:36:ec:32:37:e6:b9:57:65:6e:8c:aa:a3:94:
                    af:d8:5b:1c:f0:87:0c:6a:85:cd:21:34:bc:53:0b:
                    2e:c1:ad:c4:ea:37:9f:af:c0:3f:d2:8e:79:88:df:
                    e5:b8:3e:5b:e7:5d:23:84:4d:19:c1:5f:b8:e1:73:
                    7d:6e:89:9b:e5:0a:1d:60:52:ae:7f:18:44:15:69:
                    55:4b:bc:62:7e:af:5f:25:4d:77:e8:f6:aa:fe:d3:
                    c2:d1:fa:c4:eb:40:f7:94:bd:ed:51:49:27:9a:70:
                    95:02:ee:66:d0:58:07:3f:ae:c5:ca:a0:a1:7f:47:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9E:BE:73:C4:D3:37:9C:88:F2:8A:C1:F4:88:55:3C:FA:D3:A8:42
            X509v3 Authority Key Identifier:
                keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a4:8e:19:ec:d6:b7:3c:4d:be:c6:8f:b4:72:df:02:f4:36:
         5f:f9:c3:b6:e7:27:6b:a4:6e:10:eb:73:ba:5f:f0:bc:56:fe:
         b3:96:dc:eb:40:6a:29:6c:ba:4c:02:7b:96:8a:e2:ca:ce:5a:
         b6:ec:0e:d7:c7:11:bf:e3:c6:c8:f0:12:b9:64:a9:ce:fc:67:
         bf:44:86:16:c4:68:1f:2d:82:d8:5f:b4:e4:b5:da:06:f1:3c:
         a5:ae:20:a3:e2:53:53:cd:28:4c:b0:d6:4a:09:f7:8c:f0:b8:
         f4:d7:3a:93:07:37:2f:05:cf:0f:e0:52:51:1b:ec:a7:32:22:
         37:c7:f9:71:2d:08:2e:e2:b9:68:b1:a2:a5:8f:f5:96:82:a5:
         58:e6:0d:57:c9:7d:2f:80:72:71:78:18:d7:7e:1b:77:fc:08:
         08:bd:bd:fe:be:6b:ec:3c:e2:bc:fc:43:4d:96:e7:f0:57:c2:
         e5:2e:34:e4:72:4a:e4:05:11:89:13:89:ab:e8:3b:32:47:40:
         7e:69:b4:85:d6:05:1e:bb:52:e8:19:53:60:4a:d4:16:40:c8:
         af:27:ee:1d:c9:7e:91:46:95:25:83:19:25:30:65:54:9c:28:
         cc:be:71:5e:65:a0:12:8c:48:41:69:e0:54:8c:4f:35:ec:ef:
         91:42:55:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:10 2026 by rpki-client