Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
File:                     7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json)
Hash identifier:          0Jvd4aDWcjqGMQ05ln1WCJqt19CEuVUqv3E2OKdL3GI=
Subject key identifier:   53:0F:56:7C:EE:72:63:AC:70:75:34:4C:5B:67:90:E5:20:53:99:C1
Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Certificate issuer:       /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
Manifest number:          0148
Signing time:             Thu 19 Mar 2026 04:16:43 +0000
Manifest this update:     Thu 19 Mar 2026 04:16:43 +0000
Manifest next update:     Thu 26 Mar 2026 04:16:43 +0000
Files and hashes:         1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: 8OdFnv1KQNFDJHHFD423CcARmlavsE3vzV6QaoAihis=)
                          2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: 2Z5IzjJNdD4kG65ZpOb5f1Ky7VDv275TeVLHGASGOqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 04:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
        Validity
            Not Before: Mar 19 04:16:43 2026 GMT
            Not After : Mar 26 04:16:43 2026 GMT
        Subject: CN=69bb78ab-2673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:8f:97:23:14:82:d6:45:91:59:62:ec:9a:
                    2c:7b:da:98:b5:5f:97:14:17:27:c0:20:b5:d4:00:
                    ed:51:53:49:85:ee:f4:59:60:04:7b:dc:cd:7b:88:
                    8a:5a:d6:2a:5e:1d:6a:d4:99:78:88:11:56:13:fb:
                    e9:8c:d6:5e:b5:f1:ce:43:fa:b7:00:e2:46:f2:d7:
                    23:2d:95:8c:73:09:68:4f:77:75:a1:0f:09:b0:26:
                    1f:c8:03:eb:91:75:48:35:51:8b:cd:04:c7:70:b0:
                    24:dd:31:c2:54:f2:cd:9e:81:9c:d3:48:22:25:36:
                    e3:02:82:87:91:bc:44:38:4e:4f:03:86:eb:d2:a0:
                    b9:d7:cb:17:9c:53:18:e8:ae:e2:13:e7:86:70:d0:
                    96:97:cc:25:4c:f0:af:25:e6:9b:ff:a9:70:57:6a:
                    11:57:85:be:39:60:4c:53:d4:06:fe:db:f7:b8:d0:
                    b8:2d:d7:f2:93:f7:d2:46:63:55:e5:21:fc:81:96:
                    b3:f8:c8:a7:7b:d0:87:bf:58:c4:be:bc:66:f0:5e:
                    fd:4f:dc:59:79:39:08:e1:6a:e3:fb:06:34:c9:cc:
                    8d:6f:41:6f:81:de:a5:ca:ad:ab:14:8c:5e:69:1a:
                    14:55:e6:88:0d:ee:ad:0c:0f:3c:ae:2b:94:6b:c9:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:56:7C:EE:72:63:AC:70:75:34:4C:5B:67:90:E5:20:53:99:C1
            X509v3 Authority Key Identifier:
                keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c7:dd:7a:6f:d9:68:e1:2c:0b:9a:dd:b4:a9:4d:ed:31:18:
         ac:17:ba:db:68:88:30:c6:16:d6:1e:13:88:e7:ae:8b:4c:4b:
         a8:a8:f5:d9:be:e2:e1:f6:25:fb:6f:4d:80:23:49:b1:45:0a:
         03:ad:3a:08:80:7e:63:1a:3c:9e:b7:71:c0:c6:5d:e0:0d:33:
         ec:24:22:b9:34:1c:6b:15:7a:9e:06:b1:de:e4:8c:2d:45:aa:
         96:c0:0c:8f:cb:d8:4b:1a:64:af:9b:26:06:1e:e6:99:55:62:
         a7:36:da:7a:03:5d:ca:04:6d:0e:34:d9:a5:50:22:76:8b:74:
         ea:c6:60:64:8e:9d:c7:f5:aa:e3:c7:fb:30:14:5d:45:eb:f2:
         e8:ce:af:40:29:b3:6c:61:40:60:89:c0:70:ae:80:7f:88:fc:
         01:2b:6e:d7:22:66:f8:6e:73:14:90:3b:ea:35:78:5d:bb:47:
         22:47:f8:14:cd:e7:d2:c0:26:42:da:ca:d1:83:de:27:b5:45:
         80:f4:2c:42:de:18:23:44:a3:f3:20:fa:0b:c0:a5:ab:af:eb:
         ec:23:07:8f:6d:53:4b:9e:57:a5:80:39:bc:15:d4:98:e8:1d:
         77:be:84:67:42:a9:ce:d6:cf:3e:2d:2c:ac:1d:f8:62:19:99:
         71:8d:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 17:25:44 2026 by rpki-client