Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          BgAwIL6c6KjG48fZZbIqPulzDwXk1ydHds5AjQEF7EY=
Subject key identifier:   DC:37:BF:1E:44:04:D7:64:83:CB:5D:CA:F0:09:93:44:3A:18:E4:7A
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       028E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          0284
Signing time:             Fri 17 Apr 2026 01:33:21 +0000
Manifest this update:     Fri 17 Apr 2026 01:33:20 +0000
Manifest next update:     Fri 24 Apr 2026 01:33:20 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: ICfhfjFp+2xA4JMK3JvZHrEV5sqRjL1ZqaJdxRZMkDU=)
                          2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: tKFaHITtLZAQ61mcV49Br1vxEy6JkCTzuDJ4xLJ+YOA=)
                          3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: 6YJJzl5drZKIcUPjGHkkRR3YgQuFHkEPTeKqUES1L5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: Apr 17 01:33:20 2026 GMT
            Not After : Apr 24 01:33:20 2026 GMT
        Subject: CN=69e18de1-660d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:02:1f:5f:92:1e:45:61:29:ca:c8:0b:39:
                    ef:7c:98:2f:29:58:4a:fe:f8:d9:98:1b:90:f5:75:
                    f8:18:11:07:22:5d:a7:a5:94:0b:be:4d:e4:f6:bb:
                    5a:7a:7b:2b:b5:9b:d2:91:bd:2e:9e:be:03:e9:6b:
                    1c:bc:49:74:10:fb:88:a2:c2:7a:60:db:e2:88:48:
                    7c:6a:aa:f9:37:82:d2:28:b1:77:bc:26:95:65:47:
                    ba:16:42:70:ec:65:e7:26:59:b9:9c:4c:1c:6c:aa:
                    7e:7e:6f:64:09:22:a6:7a:bd:21:45:32:b1:82:98:
                    04:e1:92:cd:64:96:a5:d2:57:f3:c8:7a:9b:70:37:
                    ad:d6:83:8c:6c:17:1e:ac:d1:a2:32:63:48:49:c6:
                    97:1e:a8:60:ac:8e:c7:be:b0:85:8c:4e:76:cf:a9:
                    33:c8:f5:6d:7e:71:99:a3:60:a4:95:29:2b:98:ce:
                    db:61:b9:71:bb:1c:f9:e0:a3:f8:55:58:26:cb:0b:
                    49:3a:ac:69:6c:d1:e5:11:6e:5c:58:24:66:b4:4d:
                    2e:e0:81:b5:da:14:0e:04:4d:1e:70:5c:71:5a:bc:
                    05:b9:df:fd:27:a7:2b:8c:88:56:36:bc:08:bc:55:
                    a4:14:17:a7:9c:85:d0:46:28:8a:26:26:29:55:73:
                    98:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:BF:1E:44:04:D7:64:83:CB:5D:CA:F0:09:93:44:3A:18:E4:7A
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:09:46:c2:11:93:1c:b8:e4:00:d7:25:11:74:08:f9:dd:b9:
         87:7b:32:c9:55:4e:30:d9:a4:b3:2f:86:22:02:c7:9e:b9:83:
         84:26:f7:f8:ee:37:1b:6a:94:c3:04:d5:9c:c3:2e:e6:80:df:
         86:24:94:4c:79:68:5d:65:44:5e:2a:ea:d9:d7:23:33:46:a8:
         d7:d5:5d:96:f4:96:fc:b5:d6:51:61:99:ba:1e:4d:d5:3b:bf:
         76:ee:30:d8:38:cc:7d:ea:7b:28:8b:de:a3:90:97:65:2e:19:
         ca:7c:bb:58:e2:2f:c4:96:f7:37:e6:86:be:ce:e6:5a:e6:77:
         19:ce:b1:3c:be:67:04:89:d3:c2:83:8b:62:a2:39:d1:48:35:
         c7:1c:1e:5c:f4:fa:f4:e4:71:9e:6a:bc:5a:db:42:0a:64:65:
         74:0b:02:b1:75:19:a9:fa:ca:9f:98:cc:60:95:9a:bf:dd:93:
         27:2b:58:e4:6c:3c:90:7b:1e:d7:38:7f:1e:12:9f:7a:b3:13:
         62:9b:65:0a:8d:e1:ca:e5:db:c3:fa:d6:ad:13:0e:56:8d:2d:
         e0:5b:55:ed:ba:f1:b5:99:0b:40:63:cb:9b:66:30:56:de:e2:
         58:3e:29:6b:8d:a5:e5:0b:58:37:22:1f:58:af:5e:62:34:71:
         42:34:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:52:16 2026 by rpki-client