Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File:                     7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier:          TCLmwb/I98jZ8IJdG/L2Vvx39Kb3332LeFvJf/24HEA=
Subject key identifier:   E0:73:61:A7:3F:5B:DA:9F:5C:4F:74:BC:07:BE:DC:D6:67:3D:A8:FB
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer:       /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial:       0CFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number:          1597
Signing time:             Thu 16 Apr 2026 18:04:50 +0000
Manifest this update:     Thu 16 Apr 2026 18:04:49 +0000
Manifest next update:     Thu 23 Apr 2026 18:04:49 +0000
Files and hashes:         1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: ckkQAAJ+4ln2hY3G0DdW+VqX4KjeUP20ppsNbsRX2Vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3322 (0xcfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
        Validity
            Not Before: Apr 16 18:04:49 2026 GMT
            Not After : Apr 23 18:04:49 2026 GMT
        Subject: CN=69e124c1-6aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:88:96:87:5d:b2:93:73:0e:5a:6f:e8:30:
                    1b:44:54:87:94:71:41:ba:a3:d5:df:44:c9:20:68:
                    bd:e6:09:67:81:37:29:ce:89:88:16:90:1d:95:0c:
                    2e:fd:d8:f3:2d:cf:1c:f8:54:0c:40:79:93:8a:4d:
                    65:81:ce:d4:40:db:3d:86:a2:0c:6f:18:5f:93:cf:
                    db:27:8d:a0:2a:ee:a0:29:7f:8e:3e:9b:6c:70:b2:
                    f7:59:a7:ca:21:30:2e:a8:d9:9c:13:5d:51:47:2b:
                    c5:1e:2b:35:32:18:25:7e:53:98:da:76:f5:94:f7:
                    16:ec:d6:fb:0e:e7:ef:f0:78:1e:3e:a2:a5:ea:29:
                    75:33:8f:c6:45:19:e2:e9:1d:f8:6c:54:90:17:1d:
                    fc:9d:1f:ee:a0:f8:c4:00:cc:c0:d5:24:17:d3:0a:
                    a2:cf:24:cd:24:88:92:2e:5a:e3:61:4f:3c:73:8f:
                    f7:d6:84:93:f3:42:29:c6:dc:cb:21:35:c4:55:8a:
                    80:30:90:12:87:df:07:6e:59:1c:b7:aa:35:47:a5:
                    e7:2b:d6:4c:81:14:f7:a2:4d:c3:04:d0:d5:4e:66:
                    12:26:5e:b2:88:91:25:c8:c8:18:35:0e:03:76:78:
                    04:e1:07:f9:11:42:9d:56:b5:56:5f:a5:f3:eb:91:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:73:61:A7:3F:5B:DA:9F:5C:4F:74:BC:07:BE:DC:D6:67:3D:A8:FB
            X509v3 Authority Key Identifier:
                keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:03:23:a1:19:92:fb:cc:71:22:84:29:64:57:a4:cb:cb:7f:
         e9:4a:80:98:80:d4:57:bb:1b:99:6a:87:bb:ee:de:4b:92:37:
         95:ca:82:c7:01:8b:83:6d:6b:ca:4a:24:ca:3f:f3:a1:a0:6c:
         00:53:f7:ff:29:12:88:df:c4:6b:0b:7a:8c:76:3a:e9:f1:e9:
         44:56:4a:50:3c:61:e8:22:7a:26:ec:61:ea:97:c5:fe:fa:ea:
         ed:14:38:9d:ce:20:8f:54:4b:54:cc:96:76:d7:3b:1a:f4:df:
         7c:f6:53:9e:73:9b:4f:13:0b:11:63:23:a9:66:57:41:ef:87:
         3b:c9:9b:22:5b:ce:70:d9:3a:00:a0:dd:b7:a6:d5:d4:d8:7f:
         9f:23:15:a7:99:8b:b1:f4:0f:ce:3a:f1:0c:11:05:b2:e0:c8:
         91:26:b2:c0:03:b5:45:d0:0c:39:39:f2:85:e3:4c:10:dc:83:
         0c:29:ef:24:bb:6f:18:23:c5:53:02:e5:3f:59:80:81:2e:eb:
         3f:79:4d:78:56:6b:55:c2:9f:23:f8:60:12:02:bb:86:39:d6:
         f3:ee:bb:3e:8a:16:62:e9:3b:67:67:54:d6:bf:fa:4d:78:2e:
         ee:68:c5:68:9f:ea:78:43:19:0e:24:5a:3a:d3:3f:34:8e:a1:
         2a:bd:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:39 2026 by rpki-client