Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
File:                     7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json)
Hash identifier:          Vgz13V+KjVipEW21MoQMPH2LM301k57hMHtgx158YpE=
Subject key identifier:   EA:1F:16:AD:C0:19:45:55:45:F6:B5:51:F3:52:D5:97:98:55:0C:F5
Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
Certificate issuer:       /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Certificate serial:       06A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
Manifest number:          068D
Signing time:             Tue 24 Mar 2026 22:16:55 +0000
Manifest this update:     Tue 24 Mar 2026 22:16:55 +0000
Manifest next update:     Tue 31 Mar 2026 22:16:55 +0000
Files and hashes:         1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: KJ6TQkn4bnddB0GSRsqF04qYXuczT0RvHFZTuIn5u1E=)
                          2: 26E44986BE8311F0B427BB65C4F9AE02.roa (hash: Dx5tcISPNh0RjY9tKVBv7tMDgBX0/Dr23CkV9FuyXMs=)
                          3: E8542DEA6B8811ECAC731B4EC4F9AE02.roa (hash: JuznK0Navb/TYRQG52xqAUxKffqGcodmGZgqr5yACw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
                          rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696 (0x6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
        Validity
            Not Before: Mar 24 22:16:55 2026 GMT
            Not After : Mar 31 22:16:55 2026 GMT
        Subject: CN=69c30d57-f510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:d1:a3:64:4a:18:a6:c6:b3:e8:17:7a:71:
                    5f:a1:c0:ae:19:50:50:b9:93:10:b3:95:35:fc:c2:
                    6a:d1:c5:06:82:3d:ad:57:06:30:41:ce:ee:cf:d7:
                    98:9b:57:e1:48:46:1b:c5:42:42:e7:dc:22:55:5f:
                    a4:59:3e:0d:ff:fd:39:24:3a:86:5f:34:3a:c1:51:
                    83:86:62:50:69:74:26:1a:e1:6e:50:a3:49:4e:ae:
                    13:3d:46:de:42:7c:cb:bf:19:23:e8:12:6d:8e:b4:
                    6b:26:e8:c4:e9:8e:2a:d7:88:66:ae:62:3d:3f:50:
                    3b:e2:aa:d2:4a:05:e4:67:a1:60:15:b0:a0:1a:2e:
                    bf:53:98:df:24:e2:3e:81:01:1d:7f:eb:5e:5b:22:
                    fd:0c:da:96:bd:f1:af:37:51:c8:37:16:ea:84:ce:
                    d3:69:cd:28:ac:cf:4c:c1:bb:1b:05:89:c3:87:05:
                    61:28:eb:d0:a5:2c:05:dd:55:8a:da:46:dc:82:d8:
                    25:15:37:03:58:b6:09:0e:6c:aa:de:ff:db:d2:70:
                    42:e0:34:15:dc:44:ed:bd:7f:8d:82:93:f5:64:f0:
                    f0:d3:2d:12:97:da:12:79:08:56:7b:87:5c:b9:46:
                    0f:66:67:3f:20:61:f5:97:f5:27:8f:df:b8:3f:c1:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1F:16:AD:C0:19:45:55:45:F6:B5:51:F3:52:D5:97:98:55:0C:F5
            X509v3 Authority Key Identifier:
                keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:8d:44:3a:26:21:00:d9:35:3b:b8:0f:02:32:0e:0e:69:
         63:42:45:f2:36:2d:74:f6:00:3c:c4:46:cc:98:11:9f:de:05:
         02:83:a8:9d:aa:98:7d:89:36:68:ad:14:98:dc:6b:10:d3:25:
         78:33:cd:b0:99:d4:16:d5:00:74:e4:1b:ed:b4:67:f2:05:35:
         bd:2a:62:2f:20:fe:20:2d:ed:76:b5:02:54:fd:9b:af:4d:60:
         7d:1c:f1:6f:5a:cc:a9:cf:88:ae:7c:39:74:25:1d:97:e4:6c:
         9e:c0:ac:ba:d9:0d:6e:14:ed:34:48:d8:57:66:98:a9:2c:6d:
         58:df:e4:8f:fc:c7:63:91:14:f8:7e:63:44:ed:1c:9b:80:89:
         12:5a:2f:c8:7e:a9:07:b8:8c:b7:3f:a4:dc:69:47:45:76:54:
         fa:1c:2b:43:78:36:27:a7:ef:4a:13:d1:ba:3b:f3:0b:ca:b6:
         4a:e4:9f:fe:b7:9e:1e:6a:79:4b:09:90:bd:47:eb:4c:db:7f:
         de:ec:03:b1:4b:3e:fb:99:e8:af:3c:36:23:aa:61:7f:d2:d6:
         2c:73:5c:53:a9:85:37:6e:4b:76:da:03:b4:59:4c:27:2f:02:
         51:a9:9a:c9:46:07:79:ca:a8:78:0f:c5:13:b3:a6:4e:5d:6f:
         80:1e:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:28 2026 by rpki-client