Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
File:                     07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json)
Hash identifier:          MrRW04LsqiI57Unh9fm4VSTaRK/pJaXNm0elwdpYDao=
Subject key identifier:   A2:A9:76:23:C4:EC:38:B0:12:33:30:3F:C0:6F:44:37:15:2F:E9:A1
Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
Certificate issuer:       /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
Manifest number:          EC
Signing time:             Sun 01 Mar 2026 07:33:59 +0000
Manifest this update:     Sun 01 Mar 2026 07:33:58 +0000
Manifest next update:     Sun 08 Mar 2026 07:33:58 +0000
Files and hashes:         1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: lRGKaXT4JQGLqbZFZOKHXMQxz5bV6A917rCoud6A3RQ=)
                          2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: yg1FmYWx1FZHdQ4owstnGeV2Nc29yPQYjO3wps9oxuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
                          rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
        Validity
            Not Before: Mar  1 07:33:58 2026 GMT
            Not After : Mar  8 07:33:58 2026 GMT
        Subject: CN=69a3ebe6-a056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:87:0b:4d:7f:a3:44:ab:ae:85:ff:de:8c:
                    d9:f5:a5:67:a6:31:41:ef:d0:06:1b:4a:ea:02:0d:
                    a0:fa:70:fb:f7:9b:c1:43:1d:ef:81:4f:d4:5c:5f:
                    22:bd:23:d0:f7:d5:8e:69:ac:b0:55:71:d8:64:63:
                    82:7a:48:e0:f2:4e:13:37:10:38:4f:89:fa:28:1f:
                    62:fe:df:04:16:df:cb:13:30:32:cb:0b:d6:1d:cd:
                    e7:39:5c:ae:7c:14:14:e6:82:87:5e:07:ef:ec:70:
                    13:64:d0:9d:d2:b2:0b:9f:b4:86:22:70:d1:4b:2c:
                    54:09:49:dd:3f:bc:73:80:7d:86:04:10:87:0c:0f:
                    9b:7b:43:33:42:fc:18:03:14:62:86:42:03:78:e8:
                    c2:53:ec:88:b7:d1:b7:52:ba:f1:ec:c2:07:14:b1:
                    ba:c2:28:ad:49:01:da:ba:41:54:7a:f8:18:2d:2c:
                    f9:3b:d9:6b:0e:e9:8d:10:92:eb:34:87:17:93:f7:
                    a5:48:77:7e:a8:c4:b3:17:f7:02:a0:1f:1c:7b:9f:
                    4a:c7:1f:12:fe:2a:a3:03:b3:c5:3d:d9:ba:eb:c3:
                    ee:93:7f:67:a7:10:04:01:f6:ab:8f:a5:6e:7d:2f:
                    5f:1f:27:3b:b3:66:7d:df:04:94:c9:78:e1:11:d1:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:76:23:C4:EC:38:B0:12:33:30:3F:C0:6F:44:37:15:2F:E9:A1
            X509v3 Authority Key Identifier:
                keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f5:a6:2e:6f:5f:b1:0f:f4:cf:2b:b5:c9:12:17:f2:47:ad:
         44:87:69:23:dd:00:ea:24:ad:30:6e:9f:c5:8e:47:fe:6f:84:
         31:33:f4:70:01:71:4f:15:f6:76:c3:e8:f9:39:3d:79:9a:b7:
         d3:8e:f6:ad:01:e2:fb:52:c1:8a:9c:43:27:ad:38:37:3c:60:
         c6:1c:51:32:72:21:e5:6a:2d:b1:34:5d:d7:a0:1c:c0:d8:80:
         29:b0:38:7a:89:57:96:e5:01:b6:78:9f:18:49:66:da:69:f5:
         53:1a:53:d4:54:2b:8e:23:b0:6d:43:55:3d:98:b6:bc:47:a4:
         7b:fa:d3:c0:41:cf:39:42:de:ff:4d:3d:24:57:8c:7d:47:99:
         8b:7b:f2:0e:7a:ff:40:87:ec:c0:6c:5e:65:36:25:1d:2e:72:
         21:02:56:47:14:2a:5c:4c:73:4f:18:d5:6b:d5:3c:a7:84:67:
         b1:d9:ab:ce:00:d8:5a:0c:98:7a:53:fa:cb:89:bb:c2:43:90:
         67:b3:47:d6:ab:62:d8:a7:11:8a:ec:ad:86:7f:05:d1:56:15:
         4f:14:97:f5:8e:ac:6b:d3:35:14:51:f8:f5:06:f4:ea:68:78:
         57:57:07:e0:d1:ee:5f:c8:ce:35:9e:2f:80:22:92:28:33:91:
         5f:01:1d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:58 2026 by rpki-client