Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
File:                     7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json)
Hash identifier:          grtdsQ7GSOUtrBR+X6x/ZOjIEJ97mIIx6XAb07w2jNI=
Subject key identifier:   2B:D2:02:0A:D2:57:87:8E:55:EA:31:64:C3:D9:EE:0F:03:A3:F7:3C
Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD
Certificate issuer:       /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
Certificate serial:       3520
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
Manifest number:          3520
Signing time:             Thu 26 Mar 2026 14:38:25 +0000
Manifest this update:     Thu 26 Mar 2026 14:38:25 +0000
Manifest next update:     Thu 02 Apr 2026 14:38:25 +0000
Files and hashes:         1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: lvYSFCAJCUGpQ9pwt2qSqu2D+UyBrwNpfPLTY/SFHnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl
                          rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13600 (0x3520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
        Validity
            Not Before: Mar 26 14:38:25 2026 GMT
            Not After : Apr  2 14:38:25 2026 GMT
        Subject: CN=69c544e1-3257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:06:33:0a:5c:18:09:ec:aa:d3:d5:04:8c:
                    a9:04:47:21:0b:31:4f:d8:28:3e:01:39:78:2c:9f:
                    0c:49:fa:0c:1d:36:8d:75:d3:e2:01:94:0a:24:07:
                    b0:5e:12:09:be:de:87:a9:52:4f:4f:a5:6e:63:ce:
                    47:01:81:af:2b:a1:83:23:2d:b5:88:67:cd:6e:2c:
                    c5:fb:23:21:03:bc:fe:10:18:c2:0a:38:04:15:e1:
                    e7:69:63:93:b9:5e:31:41:ef:19:41:3a:87:3e:c6:
                    dd:1c:c0:8d:b4:fc:a7:38:0e:0f:e8:e3:10:8f:41:
                    de:0b:86:59:f9:88:b3:c2:38:ea:98:89:cc:f0:af:
                    0b:10:3d:27:a3:ea:76:e9:bf:3f:b3:50:c2:8a:b5:
                    c9:c4:81:8c:d9:44:07:76:68:61:b2:f6:36:3c:44:
                    79:9c:05:9f:63:eb:21:68:d6:0c:1c:a3:a8:3b:f9:
                    a0:ee:17:6e:2c:ed:34:98:c6:70:60:55:b5:de:ee:
                    e1:7e:49:a3:c1:0b:13:d6:b8:36:f4:e9:3c:5d:13:
                    e6:a4:ad:5b:b6:58:72:66:62:aa:29:70:49:df:d8:
                    7f:fd:b9:b5:26:53:21:65:ed:d8:d3:24:02:20:e1:
                    a5:27:0a:84:b8:47:8c:98:9e:ab:47:db:a9:d4:b6:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D2:02:0A:D2:57:87:8E:55:EA:31:64:C3:D9:EE:0F:03:A3:F7:3C
            X509v3 Authority Key Identifier:
                keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c5:2f:d3:5c:62:53:a8:df:a0:ff:0c:cd:8d:30:55:b6:d2:
         a1:be:e4:32:a5:24:06:53:13:fe:0e:c8:5c:6e:da:cc:94:b0:
         36:b2:d6:de:79:d6:7b:07:ba:00:19:bb:09:8c:57:ef:51:9e:
         ed:e0:5c:1e:9e:fc:86:b6:6e:a8:53:c1:44:e9:da:05:2b:2b:
         0e:89:f6:86:48:e1:93:ef:f8:7c:4c:44:b3:cc:b1:14:23:98:
         dc:3b:f5:0c:31:7b:bc:2e:33:56:ca:8d:b6:55:99:1f:1a:64:
         6c:3b:e9:12:49:da:cc:40:09:80:ca:dc:17:64:4b:12:b6:78:
         90:cb:d4:e9:2f:5e:08:0a:bd:62:de:1f:51:84:4b:28:6b:15:
         49:4b:73:e8:c0:41:fd:a4:c6:cc:f6:ed:58:15:b5:d4:35:b2:
         98:6f:8a:b3:e8:63:c3:62:ec:70:86:4f:4b:38:ba:b0:9e:57:
         ed:56:33:89:9f:6b:9a:4f:63:db:9e:19:fa:26:10:f3:f8:ba:
         02:d9:64:bf:79:ed:94:de:f2:c5:fa:df:aa:ab:41:12:30:30:
         fd:cd:24:82:1b:3d:4f:54:84:2b:c7:1b:25:57:74:c4:27:82:
         d2:cf:e5:7d:e5:89:f0:46:68:90:14:92:f8:61:f8:2d:92:00:
         16:6e:ae:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:23 2026 by rpki-client