Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
File:                     7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json)
Hash identifier:          /Wt2EIGHfg4tj2NDX88AQpU+ckhmvBJXlq7uNBqhXdk=
Subject key identifier:   0B:9C:B9:B5:F4:BB:5D:37:5B:54:AF:A9:DA:9F:64:1E:E7:66:43:E7
Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C
Certificate issuer:       /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
Manifest number:          01CE
Signing time:             Sun 01 Mar 2026 04:21:41 +0000
Manifest this update:     Sun 01 Mar 2026 04:21:40 +0000
Manifest next update:     Sun 08 Mar 2026 04:21:40 +0000
Files and hashes:         1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: 1vkIUlHXyhvaNWZcnT6g5+UD5iamYXjmL3HmbMBsGKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl
                          rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193369, serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
        Validity
            Not Before: Mar  1 04:21:40 2026 GMT
            Not After : Mar  8 04:21:40 2026 GMT
        Subject: CN=69a3bed5-6d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:ce:4f:ec:a2:98:30:25:b9:b5:42:ed:15:
                    b8:14:7d:0d:0e:30:60:a2:1b:90:63:ac:b2:c9:dc:
                    7f:4b:3c:8e:7f:ea:3d:d0:c3:fb:e7:74:ee:32:33:
                    55:b8:67:54:e6:da:bd:6a:13:77:b4:07:3f:9f:e3:
                    b9:9e:41:56:81:8c:e3:e2:9b:94:e8:34:45:6d:fc:
                    cf:f1:3b:fc:43:c6:6e:18:b5:54:1c:e5:d8:3c:e6:
                    16:f2:21:78:98:35:13:4c:25:da:95:e5:86:9e:dd:
                    0e:7d:a4:2f:db:27:03:35:3e:43:65:8c:de:42:34:
                    ec:5c:e5:78:99:d7:bb:71:2e:9b:63:47:9f:13:78:
                    5e:97:0e:39:52:81:e1:08:bf:4a:bf:ee:a8:4d:d3:
                    4d:2f:e3:77:3e:c8:d8:bd:28:d3:5c:7c:6c:6a:73:
                    af:37:1d:99:c1:e7:ee:88:01:a1:f7:b5:41:8f:3e:
                    f3:1b:2b:04:e8:b1:70:48:03:af:fe:71:5d:38:5e:
                    bd:68:02:af:d1:0c:ee:5e:38:89:d4:b6:0d:0f:a8:
                    a2:d2:ea:9f:c1:10:82:55:70:78:64:5f:5a:49:c5:
                    33:bd:7e:7c:1b:07:8e:b4:aa:c3:e2:0d:a8:db:7d:
                    ae:47:c4:c6:13:95:c6:48:54:91:12:5c:c0:40:41:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9C:B9:B5:F4:BB:5D:37:5B:54:AF:A9:DA:9F:64:1E:E7:66:43:E7
            X509v3 Authority Key Identifier:
                keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:29:94:af:fd:b5:34:67:5b:67:32:d5:ae:d3:b1:32:79:66:
         98:62:e1:eb:56:43:ac:20:00:24:ef:98:4d:6b:83:47:39:1d:
         79:44:7a:ec:9c:62:d6:1c:6a:bd:9e:51:a6:e1:19:8d:79:21:
         22:f9:56:9b:ad:f6:c1:67:e2:5a:3f:97:99:1c:05:6c:90:ed:
         cf:dd:ed:30:83:32:70:23:a7:ee:50:bc:a8:c8:c9:88:4d:fb:
         90:6a:49:fe:7c:e7:fa:aa:cb:8b:ae:9e:58:56:92:0a:8c:e9:
         50:5a:aa:eb:ce:33:b9:7b:05:9c:2c:34:45:43:cb:fc:29:39:
         3b:f8:8d:25:03:46:68:f2:ad:2e:b3:2c:d4:30:5c:2e:09:49:
         2c:35:8c:9e:ad:4b:dd:39:24:fd:5b:02:87:27:d0:8b:7e:3a:
         59:0c:5a:ee:c5:ab:ca:f7:08:65:7a:7d:5d:a5:a8:f1:84:b2:
         84:70:88:dc:c2:87:c4:73:cd:06:07:a2:00:ed:f7:7f:63:30:
         fe:0e:d4:da:d4:0f:1f:a5:3a:46:a5:80:0b:80:86:0d:02:dc:
         ba:17:34:32:5c:e3:d7:7b:06:c3:68:09:74:ca:fb:f9:80:f7:
         fe:00:94:e0:c9:37:21:d6:f3:1a:c5:a0:63:bf:a1:a4:c7:61:
         6c:94:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:39:55 2026 by rpki-client