Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File:                     M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier:          GwSCrXaTBWdYdgFCfskWkQuPrtnQ+YVQl5Y6bdV6MI4=
Subject key identifier:   E6:23:C8:16:25:CC:8C:11:6F:76:01:5F:59:DA:FE:40:8C:A6:DD:EC
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer:       /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial:       02EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number:          02E3
Signing time:             Sun 01 Mar 2026 23:29:47 +0000
Manifest this update:     Sun 01 Mar 2026 23:29:45 +0000
Manifest next update:     Sun 08 Mar 2026 23:29:45 +0000
Files and hashes:         1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: O2+lMQL6RMsNAWeriSl27Y+LL037W5AFLyaiscE0E9I=)
                          2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RE9FWoshhFwVBEKSS3waEgRjXTpLrxodiVIl1CwWm+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
                          rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
        Validity
            Not Before: Mar  1 23:29:45 2026 GMT
            Not After : Mar  8 23:29:45 2026 GMT
        Subject: CN=69a4cbea-d7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:82:49:e2:5c:d7:54:52:35:23:d4:7e:c9:
                    2e:b9:ec:92:be:5b:6e:b2:97:91:82:ce:f7:a6:0a:
                    ca:56:d8:c8:11:5f:1e:37:d8:c4:18:97:6e:2e:90:
                    c6:10:58:b8:62:4e:ee:83:1c:df:25:ed:91:b6:a6:
                    9e:e1:0a:97:33:a2:0d:13:c2:d5:8f:17:4d:5f:17:
                    ee:eb:94:81:78:2e:d5:09:69:f9:99:50:24:5e:23:
                    df:68:b9:b9:8b:ff:e1:f1:30:bd:70:02:cb:77:49:
                    73:7a:ff:d2:ca:0b:30:1b:38:a9:96:9a:a4:fa:46:
                    21:fc:65:6a:06:d8:8a:e5:a1:91:d5:c5:9c:d4:d6:
                    df:68:51:53:16:6b:5c:5d:1e:cc:8d:52:b8:c5:cf:
                    02:95:40:cf:e9:53:75:eb:24:9e:71:fd:2e:68:50:
                    2b:e7:e9:22:a3:50:35:a2:ff:96:bf:39:8f:d0:d3:
                    f0:3f:01:7c:a7:65:83:87:77:64:9f:f8:9e:a3:b1:
                    5c:20:36:11:0a:aa:f7:97:6b:5b:48:eb:07:51:80:
                    a0:0e:93:92:61:b1:53:ee:2a:87:e2:c4:0a:2d:cd:
                    79:d5:0f:40:05:83:c9:a1:2b:21:12:83:72:f4:a0:
                    b6:38:e5:86:0c:1a:6b:08:ec:7f:14:3b:07:ce:ff:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:C8:16:25:CC:8C:11:6F:76:01:5F:59:DA:FE:40:8C:A6:DD:EC
            X509v3 Authority Key Identifier:
                keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:62:50:6f:6d:d3:ec:d1:4d:22:4c:d3:9c:46:4c:40:e1:
         6e:ba:df:33:e4:de:dc:0a:22:05:7b:a8:5d:1a:61:7c:83:a6:
         da:8b:e0:cd:5b:01:08:fa:36:48:70:18:da:50:6a:2f:9c:72:
         af:d7:bf:ca:48:88:76:46:fa:a8:17:74:7d:00:f1:13:1f:8b:
         64:42:76:d7:06:2e:ed:ee:5f:e7:31:d5:36:2c:7f:65:47:49:
         33:bd:76:f6:96:e7:75:00:31:20:26:9f:4b:74:50:1c:55:95:
         e5:c3:e1:67:31:61:61:cb:c2:f6:66:98:e1:49:7a:e3:fb:fb:
         04:53:d3:b7:55:f5:d8:03:1b:e9:5c:c9:62:9f:b9:31:17:a0:
         33:78:78:7c:aa:34:28:94:ae:dc:2a:8d:48:e2:44:6c:60:9f:
         ce:f2:42:f1:08:82:3c:0b:4e:a3:8a:00:d9:54:c5:8c:4e:d6:
         ee:ae:d8:18:f6:5d:ba:34:e5:16:73:47:02:f2:64:18:88:8f:
         52:20:8a:38:85:7d:25:a1:0d:e6:b8:c6:42:63:d3:ab:16:0d:
         96:15:4f:74:0b:2d:09:10:b1:30:85:08:74:3b:68:e7:dd:7e:
         93:85:20:1c:2b:23:00:70:dc:88:8a:b3:14:b6:f0:ae:a5:a6:
         f8:94:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:11 2026 by rpki-client