Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
File:                     LT7zlg0opT_PYOmNAXAy6Sjqezk.mft (raw, json)
Hash identifier:          kFaUGmO5FloaV76en+a692B02sVgNWPzK3tXHvY1a2Y=
Subject key identifier:   A4:AF:B9:B9:ED:C9:73:5B:A5:70:63:9D:FF:77:19:8C:45:47:86:89
Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39
Certificate issuer:       /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
Certificate serial:       07B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
Manifest number:          07AA
Signing time:             Mon 02 Mar 2026 02:43:54 +0000
Manifest this update:     Mon 02 Mar 2026 02:43:52 +0000
Manifest next update:     Mon 09 Mar 2026 02:43:52 +0000
Files and hashes:         1: LT7zlg0opT_PYOmNAXAy6Sjqezk.crl (hash: 5EBNy0LxBJzyAJVMWY8oVE6EBDaj9pLJ/MQB/3h1m88=)
                          2: 1C017B163B3811EBB3FC7A77C4F9AE02.roa (hash: YPebFSMqaNrqN2HNE3zF4t6DH6zSmT3n+GWl59Oat/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl
                          rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1971 (0x7b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167278, serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
        Validity
            Not Before: Mar  2 02:43:52 2026 GMT
            Not After : Mar  9 02:43:52 2026 GMT
        Subject: CN=69a4f96a-f4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:f3:44:40:d9:40:d2:5a:d1:bc:82:ae:42:
                    bb:a7:94:14:16:3f:13:81:f7:e8:7e:ef:f0:55:ef:
                    65:4d:89:1a:2f:5a:47:1a:00:99:17:68:eb:04:64:
                    d8:24:28:de:1c:28:7f:12:ac:4d:16:f5:1c:96:df:
                    4a:71:4c:0d:72:04:86:f6:5f:68:be:ff:47:da:b2:
                    29:86:72:3d:c4:e5:fd:e4:d7:10:23:9c:5f:85:70:
                    3b:a8:70:5b:27:2c:96:db:cc:17:aa:39:3f:90:6b:
                    98:bc:67:b9:d3:4b:51:29:e1:ad:8f:ff:bc:dc:37:
                    1a:a4:b2:35:59:c5:9d:00:4a:f7:1f:04:1e:a6:3d:
                    cf:cd:5d:56:75:a0:04:e3:2c:4e:3a:84:37:4a:b2:
                    1a:37:17:ee:44:47:0f:33:90:42:bc:49:9d:ce:64:
                    69:48:66:60:4d:e0:44:0e:09:7c:b9:1a:1c:c4:8c:
                    39:6e:11:2c:68:60:a2:eb:ce:3e:bc:ae:cb:c1:62:
                    4d:32:5c:c8:08:e8:02:b5:11:37:12:3c:5b:1e:58:
                    57:da:3a:a4:da:5f:2c:c7:aa:3d:19:b7:ce:9f:93:
                    6d:3b:4c:11:1f:8b:fb:ea:78:0a:80:ca:bc:c2:c6:
                    dd:5d:82:a3:ea:30:0d:4b:83:35:62:c4:b2:28:a6:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AF:B9:B9:ED:C9:73:5B:A5:70:63:9D:FF:77:19:8C:45:47:86:89
            X509v3 Authority Key Identifier:
                keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:06:55:7f:48:a2:08:db:a3:d3:d5:f6:e6:76:1c:7d:b8:30:
         02:d5:ca:42:73:fa:ed:61:92:ac:be:d6:4c:3b:a0:28:1a:29:
         69:1e:01:5a:45:4c:06:cc:35:ac:0f:c1:7d:0a:7e:25:d9:61:
         00:89:be:a4:ef:91:30:0d:ce:d2:1a:9a:c9:00:30:86:75:72:
         4f:ce:8c:4f:9a:70:98:0c:b9:80:89:7e:77:db:fb:0c:77:13:
         61:39:1f:e7:94:ef:4c:7a:b8:d1:62:8f:cd:68:6a:e3:2e:ec:
         d3:d8:ca:8d:28:57:9c:fe:72:c8:c7:2d:b7:9f:82:b2:9e:ba:
         a1:0e:34:dc:21:4c:28:1b:64:f4:76:c2:60:11:57:2d:d0:a7:
         74:3a:55:46:00:3f:b6:3d:b7:de:b8:07:b7:74:fd:3c:ce:1e:
         51:7b:3d:89:0c:df:97:b5:95:f0:c2:80:ce:73:33:94:ba:ff:
         75:36:cd:f2:a7:2c:04:ae:79:a4:03:e0:44:ae:ef:7a:11:4e:
         c6:71:50:45:c9:db:58:b1:8a:93:75:8d:65:21:8d:64:c2:02:
         b3:48:d6:10:7b:e0:6d:f1:24:55:0d:5c:dd:1e:7c:05:64:7d:
         ea:91:37:83:7c:01:a9:f5:0e:c0:d1:2c:32:05:36:4a:e2:7a:
         91:ed:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:40 2026 by rpki-client