Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
File:                     7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json)
Hash identifier:          NZ9rkYHT/rmrcapNWzUZBXLeLEvDB5scW6dPw6ZOIqU=
Subject key identifier:   0E:48:86:DB:1C:98:B1:0C:94:7A:A8:46:BB:0E:E3:45:AB:EE:03:E1
Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Certificate issuer:       /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
Manifest number:          0156
Signing time:             Wed 15 Apr 2026 04:38:26 +0000
Manifest this update:     Wed 15 Apr 2026 04:38:26 +0000
Manifest next update:     Wed 22 Apr 2026 04:38:26 +0000
Files and hashes:         1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: iH/j6NAfklABX8v4jL+qhk9S0HWUPYNupbWjTG7mBKQ=)
                          2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: 2Z5IzjJNdD4kG65ZpOb5f1Ky7VDv275TeVLHGASGOqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
        Validity
            Not Before: Apr 15 04:38:26 2026 GMT
            Not After : Apr 22 04:38:26 2026 GMT
        Subject: CN=69df1642-4f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:d4:22:94:5e:d9:24:ad:64:89:db:18:cc:
                    07:14:54:a7:1a:47:09:f8:0f:d2:1e:cb:75:ac:a4:
                    b8:f7:ae:11:f7:56:b5:ca:6d:df:fa:ed:86:65:27:
                    db:8d:f1:53:3f:bc:13:26:1c:51:00:fa:5e:ba:b9:
                    29:dc:d8:7c:b6:e1:94:8c:85:99:46:7b:65:aa:2f:
                    50:0e:17:91:3e:c7:a3:3d:c0:ec:be:1c:87:cc:21:
                    65:06:d8:a2:74:0f:77:dc:bc:d5:4e:96:bb:d6:c6:
                    48:fd:59:eb:02:06:fe:e4:5b:c4:4c:99:5c:dc:7e:
                    9d:2d:ac:fe:b5:88:cb:69:ea:ac:f9:c5:0e:08:d8:
                    f4:fc:21:44:3c:fa:4d:85:7e:e5:2b:6f:90:cb:56:
                    62:16:d7:48:8f:b9:41:e9:bc:75:db:9b:58:ff:a8:
                    4e:10:51:b0:39:74:3e:78:ad:8d:70:22:b7:f5:1c:
                    55:42:9c:45:9d:af:23:bb:eb:9e:2b:06:de:21:e7:
                    49:79:fb:ff:fc:4d:c5:0d:30:61:7b:05:71:82:b8:
                    2f:86:e5:49:3d:b4:6f:bc:53:b2:25:e9:d3:6b:2a:
                    6c:ac:08:4a:6a:5c:b9:90:e6:38:d9:77:40:e2:32:
                    91:6a:3a:22:1d:29:a4:81:07:3e:2e:25:eb:8d:23:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:48:86:DB:1C:98:B1:0C:94:7A:A8:46:BB:0E:E3:45:AB:EE:03:E1
            X509v3 Authority Key Identifier:
                keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ec:e3:ee:40:37:9a:ca:d1:5d:02:4a:8e:12:33:a6:62:f3:
         6a:71:65:5e:7b:16:64:b7:26:e7:aa:85:40:29:c0:e8:3d:2f:
         d0:25:29:48:34:67:01:18:26:68:e8:2f:c8:20:41:99:e5:4c:
         32:5c:ad:93:c7:51:8e:ee:3d:32:45:b8:73:14:e2:8b:03:2a:
         68:72:55:fb:4c:f5:f2:3f:2c:d7:50:39:7d:ca:70:4e:8e:eb:
         36:58:c9:01:7e:01:65:75:e7:ad:10:f4:4c:11:91:77:a8:b7:
         b7:a8:85:d0:e6:9f:ce:c9:8c:85:91:d1:7d:9c:91:17:60:a8:
         4d:aa:6c:89:d1:2f:87:fa:ef:85:63:20:6a:ef:e6:88:ce:04:
         9a:71:d2:d0:57:7a:81:da:9f:af:be:d0:ee:e2:e3:7f:dd:06:
         b1:2c:46:22:27:eb:4a:11:1a:1c:88:dc:c5:84:d2:7b:db:3b:
         18:cc:1a:23:51:9f:c6:0b:21:46:db:fa:5e:c2:23:4b:33:81:
         72:36:dd:5a:1f:c5:cc:ab:51:1d:bc:dd:e4:62:41:31:93:cc:
         9f:90:36:cb:78:29:a1:bc:4b:d0:e0:3a:7e:67:c6:ad:f0:b7:
         8c:b1:75:f5:ab:5a:32:b7:a8:6f:65:f5:b6:88:08:1e:8d:d0:
         8f:51:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:56 2026 by rpki-client