Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
File:                     nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json)
Hash identifier:          8qx4kd5dO8p4ASgDBvBuIkcmx/1yJWOKoxdPf2URXhc=
Subject key identifier:   9D:C3:8E:95:17:47:25:BF:06:0E:30:ED:19:59:DA:3D:E9:26:AE:6B
Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
Certificate issuer:       /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
Certificate serial:       07D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
Manifest number:          07C7
Signing time:             Tue 24 Mar 2026 21:10:18 +0000
Manifest this update:     Tue 24 Mar 2026 21:10:17 +0000
Manifest next update:     Tue 31 Mar 2026 21:10:17 +0000
Files and hashes:         1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: f9Osu1jSwFSGlbFWEDaW/pGWTBDtIa2jcqL3KU/pqs4=)
                          2: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: CHJSTdgPy0KknKQ/4Ptq2ibul5UV30vvrzVGfO8IU1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl
                          rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2007 (0x7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
        Validity
            Not Before: Mar 24 21:10:17 2026 GMT
            Not After : Mar 31 21:10:17 2026 GMT
        Subject: CN=69c2fdb9-1a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:d7:a2:8c:14:6f:f9:ca:e1:d9:23:cc:51:
                    83:7b:b1:89:ee:b1:c7:c9:6e:04:ff:cc:d6:b9:e4:
                    1d:d1:b9:df:55:9f:3a:42:73:6e:95:a6:b7:ff:f7:
                    d8:25:cf:27:d9:d8:c3:92:e1:15:22:12:84:fd:28:
                    06:d1:39:15:9e:94:c0:d2:19:12:89:cd:85:09:6e:
                    d0:f4:83:78:a2:39:e2:9b:36:0c:17:c8:b5:c8:48:
                    f0:9a:20:c0:48:b5:db:ea:a4:d1:78:dd:f1:55:f9:
                    5b:67:a6:c3:67:0a:0b:1a:13:65:4c:2a:82:3d:1b:
                    ff:13:82:88:a5:79:94:22:60:07:5a:1c:d0:e2:d8:
                    35:99:8a:4d:d7:88:c5:43:b4:86:96:28:27:06:20:
                    e0:24:15:a1:cc:59:e8:ec:11:18:1c:d1:51:cb:20:
                    80:79:3b:eb:ec:d1:2b:15:6c:1b:57:2c:fd:56:82:
                    c2:94:ed:dd:dc:bc:b7:59:53:74:2f:4e:54:aa:28:
                    52:88:e8:4d:22:b8:12:48:a7:45:89:e3:79:06:3d:
                    33:05:58:64:06:41:99:15:3a:4e:b5:cd:65:5b:78:
                    42:17:c4:31:26:2c:20:d3:15:5d:11:5b:5d:bd:23:
                    9a:5c:aa:ba:11:bb:7a:e1:b0:b9:c6:9f:09:ff:f8:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C3:8E:95:17:47:25:BF:06:0E:30:ED:19:59:DA:3D:E9:26:AE:6B
            X509v3 Authority Key Identifier:
                keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:51:cc:da:00:ec:cd:4f:48:c9:8a:75:ac:62:3a:fe:3c:9f:
         9e:9f:bb:01:4b:3b:45:18:51:bb:f9:3d:da:e9:68:57:35:c0:
         ee:a8:27:8f:0b:96:49:76:c1:39:18:79:b5:ba:00:e1:d5:d7:
         e3:fa:db:24:fd:e2:64:95:10:a0:15:85:eb:68:ed:f1:79:1f:
         ae:81:64:71:8a:78:5e:e8:27:70:73:38:5b:0c:5e:2a:0c:b0:
         4b:2d:9a:92:ca:cf:6d:fa:2f:1c:9a:c5:2b:a4:27:96:f4:09:
         32:5b:50:49:83:e8:78:6b:f5:dc:79:86:73:0b:b1:12:62:cf:
         08:3e:f8:1f:4c:83:26:6b:45:44:e7:db:30:42:23:d4:d8:a3:
         d4:fe:36:8b:e9:3b:05:c9:8c:ed:ed:c4:16:ad:5a:b2:7d:7a:
         3d:b5:00:ab:8e:44:9c:19:79:58:f2:f5:e3:32:01:46:4d:5e:
         dc:79:29:34:25:3e:d3:46:fb:6c:b4:da:c8:e3:b9:cc:fc:75:
         f7:99:83:0a:7f:9a:aa:29:90:50:08:e0:79:46:36:36:bc:c2:
         a0:49:e9:90:16:92:67:06:24:ca:65:1e:02:25:85:48:10:e6:
         2d:a3:81:5d:79:62:c4:f7:48:38:81:43:be:b3:06:28:29:94:
         34:44:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:16 2026 by rpki-client