Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File:                     7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier:          1RLU5UNfE9pUBg/h97hp3D7ZJ0HX7O5Yyh8w/UNafi4=
Subject key identifier:   37:20:E2:DB:D0:52:21:9D:02:46:4D:2C:2C:FE:71:8E:8A:ED:EF:77
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer:       /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial:       0CEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number:          157F
Signing time:             Tue 24 Mar 2026 18:01:03 +0000
Manifest this update:     Tue 24 Mar 2026 18:01:02 +0000
Manifest next update:     Tue 31 Mar 2026 18:01:02 +0000
Files and hashes:         1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: 8LjxUzisFez3WcMeILb6dr/plYcFpE6333e11T1fQlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3310 (0xcee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
        Validity
            Not Before: Mar 24 18:01:02 2026 GMT
            Not After : Mar 31 18:01:02 2026 GMT
        Subject: CN=69c2d15e-73c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:f1:f8:bc:e5:9f:fc:a0:dc:fe:d5:8a:68:
                    9a:bd:41:98:b4:0a:29:ff:0a:76:9e:22:c2:a7:15:
                    2f:3b:48:7a:72:48:81:49:8c:11:2f:16:ce:ee:c4:
                    72:4c:9b:11:91:46:c0:d7:ec:bd:3a:19:db:4a:59:
                    6a:3a:6b:e2:d8:2d:b8:b8:31:52:a0:0b:95:01:22:
                    ba:fb:44:d5:b4:3c:df:85:1c:93:ee:ff:91:86:73:
                    0f:eb:7c:8d:18:47:bf:f6:20:2f:3c:94:6d:ad:ab:
                    ed:a5:e0:74:b5:be:62:b7:0f:3a:8a:e2:31:40:73:
                    27:9d:4c:7c:28:5c:c7:da:10:4e:52:50:a6:f6:f5:
                    de:f4:8f:47:2e:05:5d:7e:69:85:60:28:e2:21:3d:
                    a0:b3:03:64:e2:bb:f5:fb:0c:30:38:5f:2e:70:72:
                    5c:06:08:24:6c:5a:c0:95:8d:c1:a5:71:0f:74:63:
                    ec:3a:34:55:69:9b:ec:2d:01:9d:38:c3:3a:8e:3e:
                    e2:bb:26:6d:4e:d7:d1:c5:31:fa:55:7f:60:e1:1d:
                    12:9a:1e:34:14:a8:b2:59:9e:51:d0:0b:77:fc:09:
                    cd:3b:9e:38:4a:bd:9a:f1:30:32:c1:f5:b8:b7:70:
                    5c:c7:63:3a:94:1b:e1:ed:ec:eb:5f:a1:4c:a9:3e:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:20:E2:DB:D0:52:21:9D:02:46:4D:2C:2C:FE:71:8E:8A:ED:EF:77
            X509v3 Authority Key Identifier:
                keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5f:9b:8d:26:be:36:6b:a3:86:f7:c7:5d:da:f7:79:8b:c0:
         34:56:a1:57:71:6e:83:cd:98:4b:ea:71:52:82:c8:86:b0:25:
         fc:92:58:f4:c9:f7:12:4d:9c:14:de:2b:aa:e2:61:f2:0d:b8:
         22:6e:f0:6a:6c:bd:3e:0e:af:fd:14:57:09:dc:ea:90:7f:d3:
         f5:a2:91:3d:75:17:a5:e1:f8:66:cb:9b:13:77:6c:f4:0f:ca:
         db:3b:90:7d:9c:a5:40:77:95:e4:55:b0:f5:78:3e:e8:63:44:
         5c:ba:97:80:96:03:77:31:d6:72:8e:62:53:1d:64:6b:fd:75:
         27:30:b6:ae:69:4e:86:e8:c5:07:77:56:21:ef:1f:c2:b9:a8:
         9a:d8:43:e7:a9:3c:7b:89:79:33:34:8f:31:d7:84:88:27:8e:
         4e:ab:35:2e:8c:a9:0e:c8:22:2e:d2:59:19:ba:81:53:6e:86:
         d1:d8:d8:c6:e1:d0:df:32:fd:bd:e0:73:c3:dc:ba:2f:26:a5:
         1b:92:31:83:fb:23:f3:5c:ae:c7:ae:1d:a3:1a:3b:43:a9:3a:
         79:64:de:be:eb:68:2c:f4:5f:96:29:40:a9:0a:89:60:c8:d8:
         88:d6:80:cc:da:cf:cd:af:92:ca:1f:9b:70:ee:53:3c:a9:dd:
         9a:7c:9c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:23 2026 by rpki-client