Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
File:                     DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json)
Hash identifier:          mj9I6Y4Du5j5yAkZe+MVnp4hwVyGOlwDLIUlO5jRfkg=
Subject key identifier:   EF:1C:74:8B:D8:91:72:A9:63:CD:CE:74:DA:5A:EA:A7:2E:89:8A:02
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Certificate issuer:       /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial:       0562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
Manifest number:          0556
Signing time:             Sun 01 Mar 2026 23:44:13 +0000
Manifest this update:     Sun 01 Mar 2026 23:44:11 +0000
Manifest next update:     Sun 08 Mar 2026 23:44:11 +0000
Files and hashes:         1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: /qKm98QGUXVi0soqR8NAU9KcFFbekW8b3BGTmdLJZyo=)
                          2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: nqt0HcD1EVYLOzTSMy3qSz9HYLHCtp2w+DxH+GzK3ds=)
                          3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: y9tCShTAtdbkhcHqZKIPeVMLfFc8J6hhfijdxgmxbTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
                          rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
        Validity
            Not Before: Mar  1 23:44:11 2026 GMT
            Not After : Mar  8 23:44:11 2026 GMT
        Subject: CN=69a4cf4c-af2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:69:a7:50:9f:98:d7:6a:67:c8:8c:d3:35:
                    69:68:12:64:87:ca:76:37:71:13:2f:38:11:c1:39:
                    43:0d:a8:04:6c:e1:6b:e8:d0:95:44:55:6f:2b:2d:
                    a9:ed:40:5a:d5:b4:1c:2b:2d:22:6e:c1:08:51:71:
                    62:09:72:c4:fe:dc:b1:c8:1d:83:b1:9c:88:d2:b0:
                    4c:a5:da:bc:6b:ef:9a:a7:03:3d:b8:89:57:d8:c1:
                    44:39:df:eb:a2:13:25:33:c4:99:8c:8f:49:43:b7:
                    38:35:c7:7d:7e:99:04:1a:97:19:5a:56:d8:3c:49:
                    b1:fe:27:f8:c6:98:eb:f6:fd:54:88:94:c2:81:8c:
                    4c:70:6f:9c:87:d7:a1:7d:e1:3e:6a:4a:ca:79:44:
                    2d:ce:1f:d4:50:f7:e4:b2:5e:c7:c2:f5:fc:1e:0c:
                    82:22:73:40:9b:3e:6c:10:d0:15:b2:d9:d9:a1:5d:
                    b2:31:4f:f2:23:0d:20:e1:da:45:6e:8e:c5:40:8b:
                    82:76:a4:58:ee:fb:3e:c6:c7:a4:42:26:d4:24:05:
                    94:12:92:b5:bb:89:2d:ee:2b:c3:49:c1:98:7e:88:
                    98:22:ef:c4:07:3c:97:b9:77:78:00:30:65:00:19:
                    b2:96:7e:1c:8d:c4:83:cb:79:9f:cd:36:0c:e6:e6:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1C:74:8B:D8:91:72:A9:63:CD:CE:74:DA:5A:EA:A7:2E:89:8A:02
            X509v3 Authority Key Identifier:
                keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7a:c2:66:ee:20:72:b5:5d:cf:4f:47:22:90:70:85:78:4e:
         da:1f:99:e6:57:56:6f:20:0c:96:39:d2:c5:4a:5b:b8:84:83:
         1a:76:e9:87:4b:ee:10:ad:d5:35:37:24:68:c8:f9:bb:7a:47:
         dd:b3:61:e3:cb:ea:db:fd:aa:32:8c:94:01:22:60:2d:39:34:
         99:39:3e:02:25:c7:6e:e4:6f:a3:6e:e7:17:f9:47:a6:ef:d2:
         55:5c:48:5a:22:cd:f1:42:98:28:c6:08:fb:fb:0d:e4:79:ac:
         50:f8:d1:30:c6:d1:21:77:7a:a2:25:b5:e5:58:10:6e:7e:70:
         0e:55:37:7a:75:57:6f:a4:43:ff:b3:8f:73:6d:ce:67:31:ca:
         d1:41:17:f8:d4:64:f8:57:7d:76:38:a4:37:e7:05:75:e3:8b:
         2e:50:63:c5:27:87:cd:8a:f8:da:b7:b1:0a:8b:6c:cc:9a:e0:
         f8:0f:78:35:92:1a:41:8a:d4:e9:79:9d:3c:e6:b6:d6:eb:d3:
         a8:2f:61:1e:9d:12:de:e3:8c:0e:97:e3:c5:95:28:4d:f9:8d:
         94:14:40:2a:50:45:60:d5:ff:36:1f:50:2d:11:a0:49:6b:e8:
         24:86:24:f1:7b:9e:b3:d8:ca:29:ab:88:8f:8f:3a:83:03:0f:
         f6:ad:03:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5
N0U2NUNBMTkwHhcNMjYwMzAxMjM0NDExWhcNMjYwMzA4MjM0NDExWjAYMRYwFAYD
VQQDEw02OWE0Y2Y0Yy1hZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4dFpp1CfmNdqZ8iM0zVpaBJkh8p2N3ETLzgRwTlDDagEbOFr6NCVRFVvKy2p
7UBa1bQcKy0ibsEIUXFiCXLE/tyxyB2DsZyI0rBMpdq8a++apwM9uIlX2MFEOd/r
ohMlM8SZjI9JQ7c4Ncd9fpkEGpcZWlbYPEmx/if4xpjr9v1UiJTCgYxMcG+ch9eh
feE+akrKeUQtzh/UUPfksl7HwvX8HgyCInNAmz5sENAVstnZoV2yMU/yIw0g4dpF
bo7FQIuCdqRY7vs+xsekQibUJAWUEpK1u4kt7ivDScGYfoiYIu/EBzyXuXd4ADBl
ABmyln4cjcSDy3mfzTYM5uaWKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8cdIvY
kXKpY83OdNpa6qcuiYoCMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1
Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi
eVpacXppUlB5X0tYNWx5aGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYHrCZu4gcrVdz09HIpBwhXhO2h+Z5ldWbyAMljnSxUpbuISDGnbph0vuEK3V
NTckaMj5u3pH3bNh48vq2/2qMoyUASJgLTk0mTk+AiXHbuRvo27nF/lHpu/SVVxI
WiLN8UKYKMYI+/sN5HmsUPjRMMbRIXd6oiW15VgQbn5wDlU3enVXb6RD/7OPc23O
ZzHK0UEX+NRk+Fd9djikN+cFdeOLLlBjxSeHzYr42rexCotszJrg+A94NZIaQYrU
6XmdPOa21uvTqC9hHp0S3uOMDpfjxZUoTfmNlBRAKlBFYNX/Nh9QLRGgSWvoJIYk
8Xues9jKKauIj486gwMP9q0Ddg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:31 2026 by rpki-client