Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File:                     7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier:          islsjwW1HaQPcJGtSp1r/dBxSws/bc13PwPWWsbgE1E=
Subject key identifier:   86:43:68:70:30:D8:C7:87:0A:78:3A:69:A0:39:03:D7:49:71:81:05
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer:       /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial:       0CF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number:          158B
Signing time:             Sat 04 Apr 2026 18:00:52 +0000
Manifest this update:     Sat 04 Apr 2026 18:00:51 +0000
Manifest next update:     Sat 11 Apr 2026 18:00:51 +0000
Files and hashes:         1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: 6wK4c9C1UwMu9/RrgMw8MnP6JwS1dAdyOMCVDQ1aSik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3316 (0xcf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
        Validity
            Not Before: Apr  4 18:00:51 2026 GMT
            Not After : Apr 11 18:00:51 2026 GMT
        Subject: CN=69d151d4-b10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:85:92:7c:0c:3d:13:f4:07:8a:66:47:41:
                    82:2b:b9:e1:cf:99:cf:09:4f:d0:1c:1c:a5:5e:cf:
                    19:51:13:47:a4:94:8e:43:e0:a3:d7:c0:e0:73:b4:
                    2e:b8:f1:05:1d:42:c6:73:20:4a:65:4d:e3:cb:d6:
                    b5:14:fd:54:a3:2f:64:84:14:ed:87:1e:3b:75:07:
                    f2:03:29:c2:54:de:98:bf:a0:21:c5:88:18:98:ea:
                    0f:3a:5e:e9:65:33:5b:f7:96:cc:ec:bf:8e:ea:27:
                    22:98:b9:04:1c:9e:d1:e4:da:d7:44:26:1b:5f:c4:
                    c0:e9:d5:d9:20:10:0d:66:9f:f8:64:43:79:39:44:
                    b3:b5:f0:52:f4:45:5b:da:8a:39:59:e4:b9:b6:6f:
                    ad:4b:ab:27:53:1b:86:9a:2a:db:ad:b5:40:d6:3b:
                    75:ca:43:a2:bd:11:7e:bc:2b:14:f2:bf:be:8c:10:
                    74:f3:25:55:23:e1:77:65:c9:fa:a5:bf:c4:72:83:
                    e9:ee:c1:fc:66:9e:c7:72:3e:1e:1e:89:1d:59:75:
                    63:9b:91:65:29:ce:5c:4e:1a:f7:ad:fe:db:91:fa:
                    58:db:34:59:c4:55:63:33:9c:21:71:1e:4b:b0:38:
                    5f:2f:28:34:21:5e:4d:79:8c:a0:83:13:21:2c:ac:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:43:68:70:30:D8:C7:87:0A:78:3A:69:A0:39:03:D7:49:71:81:05
            X509v3 Authority Key Identifier:
                keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:22:70:c8:9f:18:af:52:41:1d:94:56:ee:27:fa:35:77:a3:
         97:46:d1:0d:d0:50:92:17:28:d7:ad:49:a6:6f:51:96:1a:14:
         82:ed:53:b5:bf:c6:a8:b7:04:1f:d7:06:5b:77:c3:96:1b:35:
         f9:e3:c1:05:8c:27:3a:6e:54:5a:56:1a:fc:72:50:75:4a:4c:
         17:09:78:12:26:e9:ae:67:2e:0f:33:ed:95:d8:27:2a:34:bf:
         38:dc:73:15:97:1d:61:90:46:34:b7:f4:8e:c5:ce:9f:6b:60:
         dc:81:9c:ee:16:38:b2:0e:cc:e3:e0:af:70:57:f4:ed:e1:ff:
         ab:75:1d:cb:87:d0:80:ad:91:0b:58:9a:41:48:ff:ec:19:3f:
         8e:03:e7:80:e4:41:cc:00:a2:c6:82:84:05:b2:13:80:ce:ef:
         a5:69:0a:b4:76:e0:40:7c:4a:78:c4:be:e1:b1:3f:2f:d4:16:
         80:e3:eb:e1:34:ef:70:dc:1e:e6:45:7c:43:d0:6e:04:84:c3:
         51:37:bc:9c:4c:86:b1:9f:17:6a:67:20:bc:d3:4a:82:ef:c6:
         53:da:6e:36:49:42:76:13:fc:8b:86:d0:6f:60:fe:61:97:8b:
         f2:cc:2d:2a:f7:e6:31:19:11:39:6f:37:35:1f:92:b6:cf:ea:
         d8:17:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:09 2026 by rpki-client