Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
File:                     7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json)
Hash identifier:          upsbYJbVJNzIIGXKA9uUvaZ/DzDULLPIhd1XOsMfoN8=
Subject key identifier:   FE:82:0D:76:A6:A9:92:6C:E4:F3:A2:6B:58:39:1E:82:E1:B5:B3:BB
Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
Certificate issuer:       /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Certificate serial:       351B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
Manifest number:          351B
Signing time:             Mon 02 Mar 2026 01:49:28 +0000
Manifest this update:     Mon 02 Mar 2026 01:49:26 +0000
Manifest next update:     Mon 09 Mar 2026 01:49:26 +0000
Files and hashes:         1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: xzHQ/wFASKAkUoMPPXrAZXq+CmZAbpc6Vz0Wb/uMAX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
                          rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13595 (0x351b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
        Validity
            Not Before: Mar  2 01:49:26 2026 GMT
            Not After : Mar  9 01:49:26 2026 GMT
        Subject: CN=69a4eca8-1030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:1b:41:8f:36:f4:15:a9:25:fa:90:53:cb:
                    d4:e8:eb:a4:31:f4:28:25:1c:b1:6e:a7:af:9e:17:
                    e6:44:3f:40:53:87:58:70:ad:8c:7d:cf:2d:40:5e:
                    69:f3:2a:89:fd:3a:06:eb:f7:9a:1e:36:c9:72:19:
                    fc:e4:f7:41:c1:34:5c:6a:5d:8f:20:d5:3d:55:b8:
                    9a:66:be:59:51:14:50:93:56:29:be:af:32:0e:21:
                    ca:11:0c:72:ac:d6:4a:60:de:4e:6d:67:a7:97:d7:
                    6f:8c:96:26:34:44:5c:8d:b5:5a:46:c2:a2:c2:26:
                    95:ba:8a:4b:c6:c3:15:fe:84:af:f7:11:ef:f0:63:
                    d8:33:d5:52:38:a1:09:f4:38:86:69:ba:c3:6b:df:
                    45:30:26:df:61:a2:19:91:57:e4:8b:c8:63:ec:e8:
                    ec:7c:80:ae:53:aa:e6:25:7e:54:d9:30:2e:06:ab:
                    51:6d:93:33:f2:24:29:93:bd:e1:3f:2a:e7:59:c0:
                    31:6b:c2:d5:f0:5a:9c:58:46:b0:a5:68:91:bd:8c:
                    c7:9b:c8:6a:b9:27:b0:c4:9e:75:84:5e:3f:c7:b3:
                    f8:e0:e2:85:0d:61:91:26:72:aa:75:36:76:d8:13:
                    45:29:69:0f:10:8d:b8:64:57:86:b9:a0:31:d1:46:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:82:0D:76:A6:A9:92:6C:E4:F3:A2:6B:58:39:1E:82:E1:B5:B3:BB
            X509v3 Authority Key Identifier:
                keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:7b:38:0a:3d:20:f1:bf:9d:09:12:30:9e:55:77:13:59:0d:
         fa:50:40:ab:ea:42:f7:c4:e1:ce:f0:b0:ac:b3:83:b5:a1:bf:
         d6:23:6f:73:8c:6d:d8:f4:cf:da:58:ce:e4:b7:7f:f2:3d:f9:
         c8:ff:b8:92:65:c2:f8:90:77:94:a5:80:5e:7e:2c:8c:cf:c5:
         78:71:5e:35:87:54:38:ad:87:05:5d:81:37:6f:32:f0:a6:c0:
         56:fe:4c:42:be:eb:79:12:b4:ce:e2:75:ef:7a:e1:54:c1:b0:
         0f:07:8f:aa:74:1e:b1:4c:e4:30:99:ad:d8:7c:5b:d9:0b:15:
         34:32:1e:d6:b1:21:68:30:03:64:1f:fe:67:78:7d:63:a6:14:
         84:01:f1:d7:c3:9b:c8:d3:67:bc:f1:5f:a4:c5:03:f1:bf:6b:
         52:fe:36:6c:a4:f1:f0:7a:3a:bb:d0:e7:4c:75:d2:0f:5b:ba:
         45:c6:a2:0e:0c:de:d1:b3:73:17:2a:27:6f:2e:1f:42:d3:a4:
         b3:20:08:c3:cf:93:7b:10:6b:b5:3d:33:41:ef:31:20:4e:ab:
         50:31:69:b2:22:85:ac:04:dc:9c:d3:54:35:83:38:6d:09:db:
         6d:dc:42:ca:34:9c:15:08:ec:17:db:21:d9:09:07:4c:b2:d0:
         1f:4a:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:50 2026 by rpki-client