Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
File:                     w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft (raw, json)
Hash identifier:          7E+GsMNOe9h+LNprQJFxmIPNgdxozRjyIaSKqT0V9jc=
Subject key identifier:   5D:28:B3:33:FE:97:7D:82:FB:2A:27:3B:62:89:AC:E3:09:84:53:C8
Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Certificate issuer:       /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Certificate serial:       0793
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
Manifest number:          078B
Signing time:             Mon 02 Mar 2026 02:35:48 +0000
Manifest this update:     Mon 02 Mar 2026 02:35:48 +0000
Manifest next update:     Mon 09 Mar 2026 02:35:48 +0000
Files and hashes:         1: w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl (hash: aC1bvzVLugH3BlR06fVkchJ4763acma56dQ/ds3gSGw=)
                          2: 43854B4044D411EB85615640C4F9AE02.roa (hash: 2Xjt4SdBZGaW7oZCb7vo9tweuahkp/3fJMEVxJAgK7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
                          rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168197, serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
        Validity
            Not Before: Mar  2 02:35:48 2026 GMT
            Not After : Mar  9 02:35:48 2026 GMT
        Subject: CN=69a4f784-2620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:df:5e:a8:4e:db:1a:9f:7b:99:1f:c6:c7:
                    c7:cf:86:02:53:fb:90:d2:55:a6:ab:10:78:a6:06:
                    03:bc:33:16:02:73:2a:30:4a:66:1d:01:f4:15:cf:
                    db:ea:3c:b5:b5:39:89:cc:19:2b:28:ec:2d:69:9f:
                    23:43:61:ed:90:6d:e1:e0:f0:dd:9d:05:7f:7f:b9:
                    5e:cc:9c:17:78:8e:f9:4f:c1:96:ab:e2:a6:c1:4d:
                    42:2b:70:72:53:ee:50:75:39:45:b9:30:0e:fe:ac:
                    68:7c:d0:96:9f:58:f2:b9:fc:66:be:4f:78:73:c8:
                    26:f7:00:c2:6d:1e:a3:80:6b:08:19:53:4d:83:7f:
                    4f:46:f3:8b:ee:37:76:d5:71:22:73:1f:c7:4f:26:
                    e2:40:e1:b2:28:f4:34:ba:b2:0d:14:6a:8d:6c:9d:
                    99:b2:c5:b7:bb:33:db:3f:73:fb:b4:c3:e6:f6:6b:
                    66:4c:de:a0:d1:d4:68:af:b5:63:7c:67:60:08:73:
                    6c:1f:1c:50:ad:dd:95:a6:fb:ce:17:7c:a0:1b:75:
                    d3:3b:45:00:3e:ab:86:72:ec:ff:1b:7d:32:ff:d0:
                    59:01:6b:f0:92:44:42:a5:65:7d:55:c7:ea:fd:4d:
                    66:28:54:4e:ce:2a:1d:16:f7:28:50:71:ae:94:f2:
                    ed:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:28:B3:33:FE:97:7D:82:FB:2A:27:3B:62:89:AC:E3:09:84:53:C8
            X509v3 Authority Key Identifier:
                keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:38:7a:01:7c:c5:86:35:aa:b3:a9:c8:14:00:c8:7c:c8:d5:
         5c:84:8f:f0:45:7b:3c:66:4e:41:35:c7:87:de:a0:09:fd:54:
         df:2f:21:35:56:68:53:c5:e1:8c:83:09:27:06:c0:a6:7c:33:
         b0:a1:e8:d4:28:f9:7d:85:89:b8:6c:8d:10:05:83:ac:6d:5b:
         13:20:f7:50:4b:25:20:86:a9:d4:18:a3:d5:54:9d:cc:c3:6b:
         ab:7b:22:01:dd:35:89:87:86:8e:82:49:1e:01:ed:3a:ce:c3:
         e7:8f:71:e7:9b:8c:aa:92:7b:4e:9d:46:5c:55:7d:15:ca:6c:
         98:e4:e2:49:7f:fb:90:14:bf:32:ba:bc:ec:08:6b:5c:76:f8:
         da:3c:2a:86:a6:82:d0:ac:17:32:f9:ac:8b:7d:25:6d:dd:24:
         5e:a9:5e:3d:da:c6:00:c1:7b:8c:53:b5:5b:71:5c:58:d2:57:
         14:38:e3:79:4b:7b:1a:74:84:74:85:1e:ca:b2:05:25:ea:b9:
         fd:ab:cb:fe:77:18:6b:75:f5:8d:00:e5:5d:0f:05:f3:60:15:
         c2:52:f2:49:50:81:43:f9:9c:e3:2d:59:f7:aa:77:0c:97:b8:
         f4:50:93:49:01:24:39:89:ea:40:3e:f1:e3:40:17:ab:5d:d9:
         5b:96:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:18:08 2026 by rpki-client