Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
File:                     7Ubg2mfUm_C8p7L9IOxIu86EepE.mft (raw, json)
Hash identifier:          cmroP3mAWegRDUCUQtgw3Y60QeIZ1bctTNP+2dym7+c=
Subject key identifier:   F7:EA:C6:C2:4C:5A:09:56:0E:86:3E:0E:9E:3F:9C:41:CA:D4:19:C5
Authority key identifier: ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91
Certificate issuer:       /CN=A915E38A/serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
Manifest number:          3E
Signing time:             Sun 01 Mar 2026 09:54:34 +0000
Manifest this update:     Sun 01 Mar 2026 09:54:34 +0000
Manifest next update:     Sun 08 Mar 2026 09:54:34 +0000
Files and hashes:         1: 7Ubg2mfUm_C8p7L9IOxIu86EepE.crl (hash: VEmRyNgOvKC+MfqBSkXwWM3D3Cv7kf4d8UTucu5XO+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl
                          rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E38A, serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
        Validity
            Not Before: Mar  1 09:54:34 2026 GMT
            Not After : Mar  8 09:54:34 2026 GMT
        Subject: CN=69a40cda-525a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a8:ce:41:ba:97:e4:e8:1d:d9:e3:1e:8a:33:
                    4a:2b:e4:12:fc:ea:d5:37:7a:92:e6:8e:d4:12:0d:
                    c6:83:79:07:8c:b4:b2:56:df:f7:8c:0a:3f:a4:b9:
                    65:e6:2d:34:37:30:72:97:70:3f:d5:1e:75:f8:93:
                    20:36:d9:77:d4:07:ce:e8:33:99:2a:7a:49:75:80:
                    a1:95:db:2f:fe:2f:cf:43:96:6b:47:3b:a2:da:18:
                    af:0e:f9:ce:28:d0:d8:81:7f:8a:e5:d5:81:a4:53:
                    9f:26:c2:8c:bf:a7:58:86:62:e6:7c:6b:1e:99:91:
                    56:6c:23:10:ed:ec:a2:81:36:7c:bb:cf:3f:b7:e5:
                    87:eb:27:09:93:36:f5:24:07:9a:f7:57:de:78:c5:
                    a7:81:de:30:0c:96:a9:68:09:35:d8:7f:a7:34:d9:
                    86:ee:3e:fe:05:d4:0f:f6:5c:83:a8:19:dc:15:db:
                    cf:b3:c8:c6:ce:2c:c6:de:10:33:28:52:40:af:44:
                    ec:29:30:12:0a:3c:67:3e:41:9a:ad:be:37:77:3e:
                    09:e9:2f:45:81:48:d2:46:c4:fc:b6:a3:84:c6:bf:
                    60:69:b5:22:f3:14:b0:98:18:3e:4e:ca:c0:ee:8b:
                    dd:b0:72:e8:b4:00:ff:64:ba:fd:44:bf:94:3a:33:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EA:C6:C2:4C:5A:09:56:0E:86:3E:0E:9E:3F:9C:41:CA:D4:19:C5
            X509v3 Authority Key Identifier:
                keyid:ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4a:9d:8f:f6:e1:73:21:79:f6:3a:f0:d9:89:8e:f3:fd:1b:
         52:df:40:aa:70:c5:7a:df:fa:4a:df:a0:61:96:33:8e:89:50:
         d5:3c:4c:a0:5b:2b:d9:ae:a1:99:4d:17:3f:7a:1a:e9:e3:42:
         21:d8:15:92:f5:ff:a5:7b:8e:dd:5d:03:1c:af:2d:d4:e9:7b:
         bd:d2:65:87:2b:8a:08:eb:11:5c:d7:58:fa:7c:02:48:50:98:
         0b:35:66:c6:25:8c:83:d0:26:f7:18:5c:d4:cb:b7:ac:51:c0:
         4c:9b:94:e0:a5:b4:55:c6:7a:75:ee:43:ec:2e:92:3a:7e:9e:
         7f:c7:c9:ec:9a:5d:6a:34:25:87:b2:54:1a:d1:8f:80:a3:96:
         28:14:70:c8:ee:2f:1d:5a:e8:74:42:29:e8:61:b2:3e:4a:cc:
         bf:b7:0d:d4:8b:ec:e8:93:cb:26:7e:cc:2e:fe:1e:03:3f:c3:
         4a:ff:ba:af:91:0f:b6:da:67:94:5a:a0:b2:05:c5:f6:1a:3f:
         7e:96:22:78:cb:7f:f8:59:11:b1:60:40:cf:de:6a:bc:d0:58:
         a5:b8:94:cd:24:d3:0d:c4:04:8f:89:a1:65:95:d9:8a:0d:35:
         41:b7:c7:60:23:ca:87:38:de:0e:3c:8d:0e:c6:ad:a3:04:6c:
         3f:9d:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:58 2026 by rpki-client