Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
File:                     B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json)
Hash identifier:          5lrbYorgTb5YV6uzVcQGS0q6hechbBLHwNTamT99p1A=
Subject key identifier:   CF:9F:CB:0D:CE:B1:5D:9B:59:68:03:57:74:C0:0C:CA:5C:19:4D:C6
Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
Certificate issuer:       /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
Manifest number:          0170
Signing time:             Sun 01 Mar 2026 05:46:57 +0000
Manifest this update:     Sun 01 Mar 2026 05:46:57 +0000
Manifest next update:     Sun 08 Mar 2026 05:46:57 +0000
Files and hashes:         1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: O3xb/7Fzgn6aspzpcgODXzokF6OjSZFI46FAsMzdAuU=)
                          2: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: 83asyh7KBn6tDhVd3V3FCwG4c1D4HMfxJ5bon3q/d24=)
                          3: 306EFA64A87611F089A2B881C4F9AE02.roa (hash: qJBD4dAf7BfWQ/rraTnjI0LA/fEl8zo0iRv87I2BJVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
                          rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
        Validity
            Not Before: Mar  1 05:46:57 2026 GMT
            Not After : Mar  8 05:46:57 2026 GMT
        Subject: CN=69a3d2d1-a50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:23:88:1e:12:15:52:42:a4:00:53:7d:7d:
                    00:a5:68:8e:4a:c4:57:f1:38:e8:2d:ad:02:63:0f:
                    a5:21:4e:8b:d0:70:3a:59:9c:91:90:85:76:e2:f0:
                    5f:49:17:65:3d:66:8f:e7:da:8d:84:2f:75:7d:22:
                    53:0c:5b:0c:ce:19:fa:3d:2c:88:01:b9:4d:a2:9e:
                    93:9a:04:60:dd:11:71:5d:4b:ee:c1:5b:d1:0b:6e:
                    9c:87:14:58:ce:fc:01:1c:b0:2d:a6:61:18:3a:56:
                    af:b6:73:38:c2:af:4f:73:96:77:5a:ef:0f:a8:d0:
                    ad:be:d5:37:90:16:c6:8f:3c:35:da:31:1e:61:48:
                    93:83:00:b0:b5:2c:d7:07:09:fe:63:11:72:e6:19:
                    7f:a7:39:ff:9c:e6:1a:bc:77:eb:3f:90:d5:12:b1:
                    33:4b:1c:91:7c:09:3e:19:55:3c:5e:53:b4:b1:2e:
                    fb:18:67:0b:b7:3e:40:71:cc:39:75:84:3a:e9:ff:
                    41:66:96:1e:af:61:79:ad:28:61:b9:68:38:97:42:
                    ce:64:25:5c:2d:d6:19:71:de:6e:ac:44:b2:fe:89:
                    1a:24:25:8e:b4:fc:05:fd:c2:b7:e2:63:e1:5a:54:
                    c8:11:b6:d3:29:34:f8:c1:54:73:33:55:ca:e1:9f:
                    8e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9F:CB:0D:CE:B1:5D:9B:59:68:03:57:74:C0:0C:CA:5C:19:4D:C6
            X509v3 Authority Key Identifier:
                keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:db:17:1a:cc:cf:a9:04:fa:d3:ab:67:cd:03:bb:a2:20:
         67:54:52:c2:9d:10:3e:fd:fb:40:0d:22:90:bc:63:6c:0e:4c:
         92:9f:1a:08:12:eb:28:96:f0:55:d7:a8:d5:48:88:bf:c2:17:
         58:ea:70:cb:29:cc:a3:40:3c:e6:b4:bc:e0:66:87:1c:c3:ba:
         62:45:c1:d8:81:2d:dd:89:fc:97:fe:33:fe:a5:42:01:ef:13:
         df:c4:ea:61:da:a3:de:0f:7a:ff:4d:9f:61:8a:5d:49:07:f5:
         b0:4e:d4:9f:e0:db:ed:4a:e1:4d:2c:fc:6e:85:e0:ff:46:86:
         65:a4:ef:8c:ea:bb:3c:7f:e2:2b:d5:6f:38:b5:9b:c5:d6:6b:
         2e:f0:99:02:7b:94:d3:fd:fc:a2:85:aa:71:68:8e:32:29:cc:
         66:6c:e8:58:c8:83:8b:40:36:f5:8b:76:86:6f:1b:95:56:69:
         0d:85:c8:31:04:b7:6a:17:36:1b:b0:35:00:3b:d6:36:0e:6b:
         11:e7:8c:9b:85:17:09:10:3b:93:bc:db:a9:30:b5:39:b6:06:
         83:46:75:26:32:ef:0a:aa:23:be:69:5f:cc:d0:8f:19:ee:2d:
         57:d6:72:0d:2a:1e:41:df:a0:e4:93:45:f0:37:c8:92:72:30:
         be:0a:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:48:31 2026 by rpki-client