Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
File:                     7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json)
Hash identifier:          4TExepO1WLPE1tGbHdQU6rS169+DN4X+kAKL6+HXFZg=
Subject key identifier:   53:34:8A:1D:7A:E9:22:80:4C:4B:73:A1:76:11:42:A2:9C:A9:AC:BD
Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26
Certificate issuer:       /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26
Certificate serial:       0427
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
Manifest number:          041F
Signing time:             Mon 02 Mar 2026 01:56:54 +0000
Manifest this update:     Mon 02 Mar 2026 01:56:53 +0000
Manifest next update:     Mon 09 Mar 2026 01:56:53 +0000
Files and hashes:         1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: EOwyNR7KMdqcPZrmWQnSIcG6BMt+XNqDqLh+9zcTT50=)
                          2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: X2qFz+uO5NL0iaEqOkmo3oOxCaPtoWQsW4ENjfktZb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl
                          rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26
        Validity
            Not Before: Mar  2 01:56:53 2026 GMT
            Not After : Mar  9 01:56:53 2026 GMT
        Subject: CN=69a4ee66-f3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:81:12:6d:fa:45:38:73:8e:20:e0:0d:81:7d:
                    10:9b:2c:4e:bd:67:06:35:75:1b:02:fe:8e:92:b6:
                    9a:2e:95:8d:c0:1c:a1:cc:73:ba:6b:e5:cd:e7:5e:
                    7d:41:4c:1f:4f:ab:f4:03:e6:79:b1:9a:f6:0f:8b:
                    9b:01:e6:e6:e4:7c:39:69:57:b3:72:2f:c8:23:08:
                    a8:93:95:c3:49:e1:46:70:d6:60:eb:00:38:42:63:
                    31:a3:fd:c5:f1:5c:5b:24:9a:55:67:ab:af:86:a3:
                    6b:12:2d:50:b9:18:74:e2:d4:62:d7:57:a9:1e:13:
                    07:2c:0d:31:57:24:a5:8a:09:d4:0c:42:3c:b4:bb:
                    0f:f1:6d:4d:78:32:92:aa:94:a3:03:30:ab:2c:24:
                    d8:9b:77:df:9f:0c:00:ea:72:02:89:8e:94:bb:f8:
                    29:aa:1b:c1:a9:29:80:4f:8d:00:3d:49:ce:ff:c3:
                    80:73:b7:67:59:c3:81:52:d7:63:43:37:87:a6:66:
                    6d:08:48:40:36:e0:7c:f0:5e:bd:e9:b0:23:61:54:
                    e4:dd:21:e0:f8:3e:e1:4b:32:67:d4:01:39:5b:38:
                    ca:76:d8:45:cf:2c:d8:6f:0b:1d:63:dd:05:64:cb:
                    e3:57:90:2a:b8:a0:34:45:7c:bc:4c:73:3d:36:6c:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:34:8A:1D:7A:E9:22:80:4C:4B:73:A1:76:11:42:A2:9C:A9:AC:BD
            X509v3 Authority Key Identifier:
                keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:5f:b2:88:cc:89:28:bb:9a:40:e9:e5:f0:99:37:9d:11:
         9e:c7:a3:0f:be:6b:e2:77:65:26:39:b1:f2:26:3d:db:b1:f7:
         8b:63:a2:13:cb:c2:a4:eb:f1:d7:f4:4b:8e:9d:3c:e1:d1:64:
         80:6f:ff:fe:60:ae:a1:e4:f9:4c:70:bf:0a:4a:e2:d3:04:ee:
         00:73:14:cf:95:b7:74:e1:5c:e5:49:8e:78:61:74:15:53:5e:
         0b:b3:63:b6:c1:4e:9d:ae:87:e2:8a:4c:7e:e5:c1:8a:5a:ec:
         fc:ce:92:35:19:4e:b5:dd:80:fd:19:10:9a:d6:ae:1d:1a:c9:
         4c:67:7d:7b:18:7b:3a:38:7c:50:31:4d:f6:64:ff:e0:68:3d:
         d9:96:f0:22:cb:ae:d0:4c:24:2e:57:dc:27:30:52:6f:49:cc:
         cb:7b:8a:d1:cd:df:a0:21:3b:64:b2:f9:cf:84:82:26:86:7f:
         d2:3f:98:af:bf:51:52:47:6a:f8:8e:b2:c6:32:0f:b8:06:d1:
         57:aa:09:88:b1:d9:cb:9b:a1:fa:41:ec:78:14:88:69:cd:d1:
         c5:77:a5:4f:ba:51:b0:9e:5b:87:0e:2f:1f:f6:41:7d:aa:49:
         83:44:5d:82:6a:ae:b8:dc:2f:87:b3:a4:00:06:53:1f:ab:26:
         a1:5a:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:29 2026 by rpki-client