Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
File:                     DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json)
Hash identifier:          kSVq/LLc9+Q3O3oXWy4Nr+gHgGeX6TRi4HTWnZEmH5M=
Subject key identifier:   8D:DA:41:31:93:70:BD:FC:E7:13:AE:58:18:7D:A2:CA:58:F3:99:DE
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Certificate issuer:       /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial:       0574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
Manifest number:          0568
Signing time:             Sat 04 Apr 2026 23:07:17 +0000
Manifest this update:     Sat 04 Apr 2026 23:07:17 +0000
Manifest next update:     Sat 11 Apr 2026 23:07:17 +0000
Files and hashes:         1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: LFBfXP+fFQdfBBIlIdzpK5egzBUc4xnkTC/V3yMoRvk=)
                          2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: nqt0HcD1EVYLOzTSMy3qSz9HYLHCtp2w+DxH+GzK3ds=)
                          3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: y9tCShTAtdbkhcHqZKIPeVMLfFc8J6hhfijdxgmxbTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
                          rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
        Validity
            Not Before: Apr  4 23:07:17 2026 GMT
            Not After : Apr 11 23:07:17 2026 GMT
        Subject: CN=69d199a5-6459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:88:88:54:4e:30:24:c2:fa:c7:51:a4:87:
                    fa:b1:6f:53:e2:e1:b3:99:73:85:6f:2e:a7:b8:33:
                    a1:12:2c:d2:24:11:c0:6b:79:28:4d:11:25:01:ce:
                    7d:18:b4:33:40:ab:fa:20:d8:36:dd:7a:a3:ef:3d:
                    e4:6d:93:2d:c6:df:ce:68:ea:8c:91:b1:cb:1e:6f:
                    2b:c0:ec:85:d9:bc:7e:36:8a:d2:70:37:9f:b5:00:
                    4b:a4:92:69:f4:13:7c:e8:63:9e:e5:76:32:cb:31:
                    80:05:16:9a:70:d4:83:99:cd:9a:8b:1d:59:1b:f1:
                    8c:7a:10:61:d2:b4:d4:81:ad:b8:c0:7f:64:2d:e0:
                    db:a2:88:f5:3e:dd:58:88:36:36:37:f4:ed:dd:4c:
                    84:9d:de:cc:ea:81:20:7c:5c:3d:ec:e0:a1:dd:d2:
                    c0:6f:54:d4:65:47:98:bc:fd:76:6e:9e:89:84:65:
                    fd:1a:2c:bc:40:4c:f5:2c:7a:e9:a1:9d:12:90:65:
                    12:82:7a:08:9e:ea:8b:6b:89:33:c6:22:c9:6b:7e:
                    cf:2a:12:e6:47:a4:b8:74:ed:39:47:e5:28:a1:d8:
                    54:6b:80:a4:29:49:ac:e1:a1:e4:1d:09:16:cf:3f:
                    a2:f9:e1:56:25:ab:ce:ed:dc:25:c9:ff:73:48:97:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DA:41:31:93:70:BD:FC:E7:13:AE:58:18:7D:A2:CA:58:F3:99:DE
            X509v3 Authority Key Identifier:
                keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:67:3d:6f:98:7a:17:01:e1:6a:4f:dd:1c:77:0d:71:2b:56:
         65:4a:b5:bd:63:4c:4e:2f:3a:c8:7c:77:6a:46:1d:c1:09:8d:
         9b:4b:7f:95:62:96:10:6e:74:14:f0:bd:48:39:56:a6:fb:59:
         36:e5:9e:06:7d:57:46:e1:77:b7:6e:1f:80:8d:a1:be:fc:bb:
         f5:e8:a8:f5:7a:be:d2:ef:79:4d:c1:29:75:0a:6e:10:4c:84:
         4e:a7:12:dc:7b:b0:f3:76:b1:59:91:b3:68:b3:32:c3:05:2c:
         6c:35:0f:34:70:36:0b:1b:96:6d:9d:81:27:bc:ac:6c:87:c0:
         c7:6a:db:fa:05:5f:61:86:50:66:2e:87:fc:1e:47:dc:c1:f6:
         de:a9:dc:5d:7f:2f:99:64:b6:7d:0a:de:bd:55:ce:4d:74:3f:
         1b:12:89:7c:82:eb:b0:93:17:cf:15:ae:9b:3a:c5:76:d1:e2:
         91:e8:1b:f9:ea:61:f2:61:da:e3:ff:50:b0:f1:02:71:cc:c8:
         56:5b:59:95:e7:4a:f9:7a:cb:6f:62:26:38:3a:84:8e:58:1d:
         e7:5a:86:e5:79:f3:15:3f:8a:4e:06:78:a1:c0:5e:a7:80:1c:
         8c:02:0e:d2:7e:2f:03:90:39:81:73:df:00:e2:af:03:0f:4b:
         04:1b:c8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:22 2026 by rpki-client