Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File:                     l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier:          O622DlkguI8057g7LfBuYhqcwKsATusz8Qry7TyAX7Q=
Subject key identifier:   12:9C:B4:67:1B:42:52:E5:6F:7D:C5:A4:7B:96:B0:13:BE:FE:1E:6E
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer:       /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number:          EE
Signing time:             Fri 27 Mar 2026 05:56:09 +0000
Manifest this update:     Fri 27 Mar 2026 05:56:08 +0000
Manifest next update:     Fri 03 Apr 2026 05:56:08 +0000
Files and hashes:         1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: Mb+kVZYVqGt2lHo87XniiUAFBITSZsuWzA1MOVY4WjY=)
                          2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
                          rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
        Validity
            Not Before: Mar 27 05:56:08 2026 GMT
            Not After : Apr  3 05:56:08 2026 GMT
        Subject: CN=69c61bf8-fd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:e7:22:77:4f:de:63:19:0b:87:88:1c:0d:
                    49:59:5b:6f:b4:bc:5b:f0:72:50:08:71:ca:8d:2d:
                    76:dc:e6:33:89:fc:33:6e:d1:8e:bc:d2:26:81:5a:
                    5c:86:10:9f:54:98:ae:5f:79:58:5a:78:f9:1c:5f:
                    fd:8d:14:d3:aa:32:c8:c1:d4:5f:3f:16:45:ca:6b:
                    d0:d6:e5:73:9c:e1:57:05:1b:c3:51:9c:b5:10:9b:
                    6d:bf:df:83:72:1c:ce:9d:8b:8c:0b:b4:27:84:8c:
                    2d:67:92:21:8a:44:a0:9f:f0:cd:95:4c:c2:cb:7f:
                    07:16:fa:96:3b:8e:5f:d6:ae:0c:14:92:a4:98:d8:
                    90:5e:4b:1e:54:52:f7:87:c1:62:6e:be:65:c9:c8:
                    b1:55:19:de:9c:c7:f8:99:15:61:8e:0f:0e:e3:c3:
                    4f:98:37:a6:c7:6f:01:3c:03:6f:ef:7c:fa:c2:a9:
                    50:ed:ab:1a:8f:2b:98:52:78:27:62:af:e0:cf:1e:
                    12:5c:d3:ed:43:60:67:b4:1a:92:34:2b:c0:35:70:
                    dd:c2:21:d3:de:2e:c9:9e:eb:ac:38:c4:73:79:4b:
                    1e:68:42:a5:5c:a1:2a:8f:87:80:fb:2c:8c:8b:a1:
                    b6:71:3c:de:e7:ee:e7:3a:bf:21:05:d1:e8:67:31:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9C:B4:67:1B:42:52:E5:6F:7D:C5:A4:7B:96:B0:13:BE:FE:1E:6E
            X509v3 Authority Key Identifier:
                keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ae:20:31:a2:7f:9e:57:74:56:40:3e:8e:43:26:98:61:4c:
         4c:9a:8f:df:e9:10:bb:9a:15:18:e0:f1:06:b5:89:d5:70:bf:
         c3:f4:bb:1b:55:f0:2a:b9:a3:4e:52:b7:b6:c5:8a:dd:ec:43:
         c6:ed:2f:b0:d2:d9:44:e4:b4:15:ea:ba:9e:00:44:b4:79:3d:
         ba:44:9f:9f:32:42:7c:84:83:93:39:bf:07:4d:63:12:7f:37:
         0e:ba:93:d1:cf:fa:7e:cd:38:97:c8:c5:e7:0b:63:f5:c5:75:
         fb:6f:87:43:60:cf:19:47:07:50:e4:c8:ba:b3:32:19:53:ae:
         38:b4:22:ed:df:4b:ac:65:fe:ac:ba:67:01:25:24:a9:8d:7b:
         f8:60:ad:d7:4f:da:5b:ff:87:22:4c:f9:28:92:80:0c:76:0d:
         82:46:9d:14:64:56:e3:0b:d0:95:e7:76:1b:08:cc:b8:64:c4:
         f5:4e:d9:9f:ee:aa:7b:7c:b4:14:ce:18:51:32:2a:3e:00:99:
         11:ff:1a:62:9d:eb:19:cf:54:ad:55:56:9b:27:b0:48:6d:71:
         92:1f:a3:8d:ad:3e:11:37:70:84:63:84:ca:31:8e:11:90:eb:
         5d:cc:ef:88:23:f7:06:10:b4:89:48:45:38:d4:21:9e:8b:5f:
         a1:37:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:28:29 2026 by rpki-client