Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
File:                     7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json)
Hash identifier:          d8h0Cd3FBDfPTkNQ+RZkJO8lhXJ+P5df3CEHHTFpgOc=
Subject key identifier:   99:EB:2D:59:D2:39:4D:20:DF:35:02:18:39:63:80:14:94:7C:FE:0C
Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81
Certificate issuer:       /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
Certificate serial:       021C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
Manifest number:          021C
Signing time:             Mon 02 Mar 2026 22:55:24 +0000
Manifest this update:     Mon 02 Mar 2026 22:55:23 +0000
Manifest next update:     Mon 09 Mar 2026 22:55:23 +0000
Files and hashes:         1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: iTIWAEmhHLhI2ZBaifRGBAKFx3eBagMHtoIafySm+uM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl
                          rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 22:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
        Validity
            Not Before: Mar  2 22:55:23 2026 GMT
            Not After : Mar  9 22:55:23 2026 GMT
        Subject: CN=69a6155c-dbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:8b:0e:06:bf:d3:a5:56:c2:03:d6:fb:cf:
                    37:03:6d:dc:0f:85:86:14:d8:2a:1a:4f:6d:82:1e:
                    ef:32:4e:82:4b:6e:d3:89:2f:79:2c:05:4d:c0:05:
                    45:7e:8e:34:ba:05:8a:83:4f:5f:78:52:69:df:d2:
                    92:22:4f:cc:67:78:1d:ed:80:38:1f:37:1f:97:de:
                    53:92:26:93:5e:bb:3b:36:84:9c:a0:60:8d:04:77:
                    62:87:b4:10:26:f8:9f:19:07:a2:0e:61:e8:38:d6:
                    0f:92:e6:8f:67:55:8c:7c:b9:2a:18:3a:0c:69:91:
                    51:c4:a6:0e:cf:51:75:ba:04:18:90:8d:f1:ac:6f:
                    14:2a:b8:1d:2a:c6:71:3d:6b:a0:16:bf:cb:6b:86:
                    30:80:49:77:0b:7d:03:d3:80:5d:71:c6:2b:05:7f:
                    9d:d1:18:bc:43:c0:e1:77:cd:2d:9c:08:7e:64:79:
                    0f:f3:ae:44:41:65:fb:43:d0:17:c6:91:0f:d4:cb:
                    48:3a:7d:d6:77:53:11:c9:d6:b7:c9:51:a5:ea:36:
                    cd:57:52:19:a2:a4:5b:8a:90:3f:aa:83:83:85:dd:
                    af:c7:4e:19:30:52:95:9a:13:45:f4:c0:aa:59:c8:
                    20:50:3d:25:9c:7c:bb:e4:41:c0:7d:7c:fa:c3:79:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EB:2D:59:D2:39:4D:20:DF:35:02:18:39:63:80:14:94:7C:FE:0C
            X509v3 Authority Key Identifier:
                keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:72:20:3d:03:04:73:fa:92:b3:4a:40:cd:56:bf:03:79:
         bb:ee:e3:20:b8:2e:a1:bf:b4:23:7e:21:ab:b7:1a:c5:20:39:
         7d:b3:31:96:83:99:bf:e1:59:c3:6c:5b:60:08:d7:5e:de:80:
         94:0e:bb:c6:95:2e:98:22:34:71:c0:6d:58:4d:bf:72:9a:bb:
         d4:42:98:79:72:a5:98:1f:eb:d3:5c:88:78:f8:39:8a:50:f7:
         4c:e7:05:46:b3:c9:ac:df:62:cb:35:c6:46:6f:b9:8c:d5:38:
         aa:a3:58:69:c8:87:f1:c9:23:55:6e:74:46:c3:4d:71:02:94:
         3d:eb:a0:23:51:67:d3:98:0a:2a:a0:80:f9:39:2b:e2:05:08:
         20:72:fb:a4:6c:72:18:c6:1c:00:b6:22:8c:76:f0:48:1e:f2:
         00:c2:33:a9:e2:a4:8e:19:80:fd:61:d4:97:63:4e:37:76:bd:
         2d:b2:bc:a0:c0:78:a8:80:d7:13:d2:77:4a:46:32:d5:0c:4c:
         8f:f5:02:db:e5:9a:f1:37:33:10:66:82:26:f1:9c:af:49:cf:
         37:64:9d:25:18:81:0d:9e:3c:69:4a:2f:14:1d:a3:fb:ec:a6:
         8b:36:c4:39:5c:1c:98:28:1f:07:95:89:52:a7:42:ec:e0:57:
         a9:70:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:20 2026 by rpki-client