Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
File:                     aR7cVncnIjOjjzNRkaropa4q97k.mft (raw, json)
Hash identifier:          JZY9km9+dsmsOaZKviO0MgCW01tec0GDPSZKtd0RJHw=
Subject key identifier:   03:F5:FC:3C:FA:A0:7D:8F:A2:B0:09:8A:BB:F7:A0:90:6B:A5:76:F9
Authority key identifier: 69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9
Certificate issuer:       /CN=A9155725/serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
Manifest number:          B1
Signing time:             Mon 02 Mar 2026 13:10:42 +0000
Manifest this update:     Mon 02 Mar 2026 13:10:41 +0000
Manifest next update:     Mon 09 Mar 2026 13:10:41 +0000
Files and hashes:         1: aR7cVncnIjOjjzNRkaropa4q97k.crl (hash: DIkRE1w8SBYMXrF9yRZkS+hFXK3xgNMWrSFQk2VZea8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl
                          rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155725, serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9
        Validity
            Not Before: Mar  2 13:10:41 2026 GMT
            Not After : Mar  9 13:10:41 2026 GMT
        Subject: CN=69a58c52-9010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:71:e8:bb:68:10:c2:e5:70:38:f3:61:be:cb:
                    06:7d:af:6d:d1:d5:37:f4:6e:6c:e7:a6:fe:a7:cd:
                    89:ea:21:69:02:a9:04:06:41:e1:e7:90:bf:2a:fc:
                    3c:a4:27:2f:a7:4b:8f:d9:d6:95:70:21:61:a0:d8:
                    3a:59:6d:e5:f3:fd:1f:e8:68:bb:43:b8:75:83:9c:
                    35:79:98:cd:4d:f1:8a:36:ed:5d:49:96:55:b1:88:
                    d8:5a:75:57:25:df:34:0b:ff:45:84:3f:28:2f:64:
                    78:24:54:55:a6:8b:88:b2:60:e9:fb:29:e7:cd:b2:
                    34:b1:96:2e:15:08:7d:cc:aa:0c:15:50:85:cf:39:
                    37:47:c9:af:1d:14:8d:84:76:7f:38:86:3d:d2:6c:
                    a6:58:e2:80:60:1b:ef:af:00:4f:43:bd:5d:38:ff:
                    8e:3b:86:29:e8:d0:2d:2f:e6:ac:26:df:72:00:be:
                    a9:9e:f0:32:ff:d4:51:83:5b:76:d9:02:60:62:37:
                    a5:ed:03:00:c6:c7:ba:54:81:68:f5:5b:ba:9b:b6:
                    ad:f5:81:bc:4a:2b:6d:5d:75:a8:54:8d:81:f3:85:
                    f7:21:4c:09:60:8e:50:68:d8:59:b4:c5:33:d4:34:
                    70:cb:2c:b9:13:2f:5a:4e:9a:2e:45:64:e8:6d:9b:
                    8f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F5:FC:3C:FA:A0:7D:8F:A2:B0:09:8A:BB:F7:A0:90:6B:A5:76:F9
            X509v3 Authority Key Identifier:
                keyid:69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:48:66:8c:24:3a:ed:35:c0:80:f9:0b:7c:bc:e4:25:b9:
         53:ae:77:e5:43:7d:ef:81:93:08:ff:7c:c6:66:4a:fc:d0:4e:
         e0:67:35:97:57:5e:28:9b:8d:ac:c4:b9:01:68:5a:9e:28:52:
         df:e9:ec:7f:62:ed:ab:b2:b4:7b:8d:26:67:0c:ee:79:b4:18:
         16:1e:4b:4d:17:8c:b2:02:ff:eb:1d:be:c5:9a:ef:29:92:67:
         76:48:ab:8a:f0:ea:74:f0:8a:3f:4a:56:91:01:50:e8:f4:e3:
         b4:6a:37:c9:1a:ba:94:d9:e9:23:b8:99:6a:21:02:5b:20:ed:
         da:57:07:1f:c5:fd:82:86:86:c5:12:92:75:ae:02:54:d1:55:
         99:7b:46:ee:da:d0:72:8d:7a:d7:6e:33:1e:d3:de:41:ec:5b:
         9b:3a:2e:20:6a:e5:ab:a1:9c:6c:4e:ad:87:66:12:c9:54:ec:
         6a:c8:cc:71:4e:3b:02:08:c5:5c:e3:15:a7:37:8f:bf:0a:e6:
         16:5e:76:f9:fd:a8:6d:4f:eb:5b:e1:68:7c:3c:6f:98:52:22:
         2f:15:75:ba:5a:4d:59:40:75:59:1d:1c:aa:1e:0b:2c:1f:aa:
         01:8f:e9:93:05:be:3c:f9:de:ca:7f:bd:c4:ba:15:f1:e1:58:
         10:27:76:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:03 2026 by rpki-client