Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File:                     rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier:          jQdbwOKQPf6k6GxSxE/jkKGTL1QmLwmRAbkrWcFQizI=
Subject key identifier:   78:9D:EC:26:BE:76:F8:76:86:18:76:1D:84:C8:4A:4A:CC:97:F3:FD
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer:       /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial:       07CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number:          07B4
Signing time:             Mon 02 Mar 2026 00:14:57 +0000
Manifest this update:     Mon 02 Mar 2026 00:14:55 +0000
Manifest next update:     Mon 09 Mar 2026 00:14:55 +0000
Files and hashes:         1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: IpOTtwLBmBy4unTc9+8+oddPSL/aNj7bd9rRtl98Rak=)
                          2: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=)
                          3: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: ZmAyU9kRA0slDQaJ0VTa+g0MzBvfdT0VhVsvUeReZ3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
                          rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
        Validity
            Not Before: Mar  2 00:14:55 2026 GMT
            Not After : Mar  9 00:14:55 2026 GMT
        Subject: CN=69a4d680-1932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:4c:b4:51:1b:23:89:0e:7a:d5:1c:33:2f:
                    0c:02:b0:ba:9a:44:b7:89:98:d5:f7:c9:81:bd:0a:
                    c9:b6:f1:4b:bb:2f:c0:75:45:95:35:11:c3:0e:df:
                    66:f3:3b:17:78:0e:26:0f:20:29:e4:cb:2e:83:72:
                    ec:7d:33:6f:b8:3f:d3:77:9a:d5:3d:d7:c3:2d:4e:
                    92:55:fa:9c:3d:d2:ea:bd:95:57:c0:6b:71:62:14:
                    43:cc:08:ea:1e:af:fe:3e:00:20:bc:49:6e:7c:15:
                    e8:43:1e:04:c1:15:73:fc:1a:9c:9c:35:16:88:27:
                    a2:c6:e5:75:50:83:1d:25:04:ef:12:02:1d:96:c6:
                    a5:f7:0f:ff:93:13:fd:f3:48:01:c3:d3:76:ff:c9:
                    07:01:25:b7:c5:93:f0:44:19:78:a6:20:79:15:05:
                    86:73:89:fb:6b:54:da:75:52:21:9d:5c:38:2c:00:
                    cb:a3:a9:1c:ba:f7:56:ed:e9:48:6d:69:3d:98:e3:
                    14:9e:e2:8c:e0:9a:01:86:ab:6f:12:b4:6e:11:b3:
                    96:41:59:35:cf:3a:b5:a1:95:e3:99:25:05:3e:09:
                    cd:fd:db:8b:5d:21:4e:8d:00:bf:e6:7b:b6:62:cd:
                    c6:0d:6e:f5:9e:2f:19:d9:57:14:e7:13:94:64:0c:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9D:EC:26:BE:76:F8:76:86:18:76:1D:84:C8:4A:4A:CC:97:F3:FD
            X509v3 Authority Key Identifier:
                keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:18:12:8f:81:a7:56:0f:61:41:78:23:45:d2:0a:93:c5:c6:
         c5:54:28:a1:21:c6:ed:d5:8e:4a:c7:9f:39:5c:d6:b4:c6:e7:
         9e:3d:36:d1:53:07:7f:5a:c2:ec:49:5a:be:d5:93:2e:f5:1a:
         c1:3e:2e:ea:62:be:55:6b:4f:fc:16:0b:61:9a:04:2c:8c:78:
         73:ba:db:32:88:0c:0d:9c:c8:0a:45:99:60:74:c1:0a:f2:41:
         d0:b6:d0:05:d3:8a:88:ce:21:31:7a:9d:67:0a:9c:3a:3b:c2:
         b7:a7:82:46:0e:95:db:75:27:8b:30:f4:50:9e:a2:4c:f0:ba:
         d5:de:ee:d3:2e:2d:df:c6:c6:47:34:71:95:42:a1:fa:55:46:
         d6:cd:a2:82:d1:01:6b:b7:37:34:e3:ff:35:a8:22:78:1e:c9:
         e4:02:56:f6:19:57:0c:99:44:89:c4:8f:1a:9e:af:b5:e0:5e:
         c9:21:2e:6d:a3:f8:b0:dc:3d:36:6e:67:9e:84:ce:64:62:6b:
         71:ee:f4:94:a3:11:a6:dd:84:44:96:d5:1b:45:32:57:f7:f7:
         58:a5:d4:f2:3d:60:a3:e5:87:1e:5a:9e:6f:e2:2c:9a:27:0d:
         73:5a:0e:ba:13:10:ad:54:71:5b:90:50:7e:7c:0a:e6:9f:1a:
         02:a4:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:03 2026 by rpki-client