Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
File:                     7mC-_JS8D3S9nREVbhW6I_fr5ag.mft (raw, json)
Hash identifier:          tYZuBTaKTwZYsX900KcXxjXAtfKycITOohy6MAblln8=
Subject key identifier:   BA:DC:E7:43:46:93:59:A3:0D:9F:B3:69:B8:6D:9B:42:D2:E8:75:20
Authority key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
Certificate issuer:       /CN=A91B6DD0/serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
Manifest number:          36
Signing time:             Sun 01 Mar 2026 09:56:55 +0000
Manifest this update:     Sun 01 Mar 2026 09:56:55 +0000
Manifest next update:     Sun 08 Mar 2026 09:56:55 +0000
Files and hashes:         1: 7mC-_JS8D3S9nREVbhW6I_fr5ag.crl (hash: y0Jf2QJHuyA55trc3mgo4n9JyDFDXQt+eLfpEVv2wXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
                          rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
        Validity
            Not Before: Mar  1 09:56:55 2026 GMT
            Not After : Mar  8 09:56:55 2026 GMT
        Subject: CN=69a40d67-f52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:8a:75:bc:22:bc:e1:42:cb:84:a7:09:76:
                    2b:a8:08:3e:83:a7:b1:ec:3f:7b:32:30:cb:c9:c1:
                    38:50:8a:67:5c:95:c0:ce:f6:ee:28:ba:b6:b4:b5:
                    31:ed:cb:25:5d:51:84:f0:2c:2e:41:86:d8:3e:29:
                    6c:5c:d3:8a:76:7f:05:e6:ae:5d:0c:ef:e4:17:5a:
                    ac:ee:ab:f3:49:30:b0:7a:bd:2a:46:6a:1c:d7:8d:
                    67:4c:cd:fb:6d:e3:3a:2b:d0:bb:d3:94:c9:1e:61:
                    28:dc:71:97:7a:ef:18:df:df:a8:05:01:b7:96:5f:
                    a4:ea:92:36:28:e9:a2:dd:e1:01:59:10:85:ad:61:
                    17:8a:36:d7:01:35:30:78:fd:de:dd:c3:d2:b3:33:
                    e5:87:9d:ec:06:fc:e0:38:3e:f5:4b:aa:4a:a2:cf:
                    ee:b0:7c:aa:7c:76:b5:ee:c9:1d:57:b9:28:9b:65:
                    38:ef:93:bf:d2:71:26:8d:4d:94:1c:ff:54:b5:c0:
                    2d:a0:49:2e:5a:b7:9f:69:94:c5:f7:3c:01:f0:26:
                    96:4b:2a:a7:61:49:a8:5b:ec:90:e8:68:5b:ba:95:
                    9d:3d:69:52:8f:bc:64:c4:90:54:eb:27:0b:d2:99:
                    59:2a:25:e2:c5:74:17:55:57:79:3e:51:85:69:5c:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DC:E7:43:46:93:59:A3:0D:9F:B3:69:B8:6D:9B:42:D2:E8:75:20
            X509v3 Authority Key Identifier:
                keyid:EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ec:61:ae:c6:50:c4:4e:15:12:72:b5:74:de:60:b4:85:33:
         e3:8b:4f:46:14:32:37:21:c4:1e:2f:9c:c0:ca:93:5e:82:61:
         39:f3:82:7b:34:0e:ee:c0:fc:aa:db:8d:63:cd:31:69:b9:6b:
         1a:cd:15:a3:9a:48:0f:84:9a:1a:37:f9:b8:22:95:f0:a5:9a:
         3c:d3:ad:8c:bc:04:4b:49:32:3b:5c:3c:ea:ff:cb:96:df:26:
         9e:2a:4e:72:e5:a1:5c:8d:40:d6:ee:73:2b:7c:bc:c9:bb:b6:
         7d:33:30:ae:bf:a3:75:0b:11:55:57:88:19:a8:81:13:9f:32:
         48:11:50:71:49:b8:59:76:de:cf:ef:b6:6a:5c:dc:95:73:a4:
         f0:45:ee:c5:53:d5:4d:e5:96:2b:02:b7:05:24:72:ca:d3:62:
         94:f8:47:7e:8e:d3:48:15:52:b3:61:97:7e:78:42:4d:1d:90:
         f3:85:30:26:9b:af:15:01:c2:be:91:ca:20:17:75:c4:22:d8:
         cb:e8:18:9b:68:48:ea:1e:32:df:e5:31:9e:f2:34:f5:25:7a:
         37:a8:a9:ca:d3:de:37:b1:09:90:0f:56:a4:35:64:0a:d8:82:
         da:2a:e2:11:a9:e7:12:a1:d6:af:c0:8c:1a:78:49:85:93:a2:
         42:7c:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:49 2026 by rpki-client