Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
File:                     7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json)
Hash identifier:          OyYc2DV2JlO8HYgM9KuXtI7nELLjOOFl/oWvrqtCfBc=
Subject key identifier:   D5:4A:13:02:3C:29:59:CF:80:99:BC:80:85:6B:95:B6:75:50:4C:32
Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
Certificate issuer:       /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
Manifest number:          64
Signing time:             Sun 01 Mar 2026 09:20:20 +0000
Manifest this update:     Sun 01 Mar 2026 09:20:19 +0000
Manifest next update:     Sun 08 Mar 2026 09:20:19 +0000
Files and hashes:         1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: YBPHksOa5thWLASe0H0C0vNKjs2fxPphqJIn/Nl5Q08=)
                          2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: au2fE5QZV4wi2bNW1k3MSZSx8H26Znmq3AG3Io7itYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
                          rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
        Validity
            Not Before: Mar  1 09:20:19 2026 GMT
            Not After : Mar  8 09:20:19 2026 GMT
        Subject: CN=69a404d4-8c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:bd:06:d4:42:be:c7:a3:95:5f:b4:fa:c3:
                    7b:69:6a:7b:5d:48:33:af:81:b0:74:e8:09:ce:ae:
                    22:84:ac:28:5b:b3:d8:25:c7:a3:ae:29:4e:6e:22:
                    04:87:17:96:3f:ac:ee:3b:64:f1:85:52:91:59:16:
                    d3:d0:95:07:00:d8:b5:b7:82:50:b0:4e:40:0d:18:
                    26:d5:46:61:83:e5:88:bb:b2:d1:c8:ac:c6:9d:12:
                    49:86:39:6f:1f:e2:e9:fb:c4:33:85:7c:73:55:0f:
                    7f:b1:62:49:31:1a:a2:c5:02:86:10:31:7a:60:c9:
                    f2:ef:c6:45:a3:bf:5b:98:78:28:be:96:1f:74:12:
                    9d:cc:4f:87:57:cc:db:83:a1:6d:c3:35:71:10:69:
                    73:e3:56:b6:0a:e3:69:cc:e0:46:f1:44:26:c3:d1:
                    8a:6b:8a:33:85:44:24:9f:d6:52:f0:af:1c:de:1e:
                    c0:27:6b:d1:d1:79:7e:ff:d7:76:45:db:bf:a3:c2:
                    dc:8c:1a:1e:41:c2:ff:9f:8f:ef:4b:86:6e:32:69:
                    20:07:91:e6:a0:5a:23:6a:c1:6e:09:cb:bc:3d:9c:
                    d8:59:46:3c:f8:5c:47:4c:40:2f:86:e0:46:fe:a9:
                    50:2a:a1:69:dd:27:4c:5f:e1:5c:d5:14:e8:f5:b3:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4A:13:02:3C:29:59:CF:80:99:BC:80:85:6B:95:B6:75:50:4C:32
            X509v3 Authority Key Identifier:
                keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:39:19:fa:3c:e5:e8:5b:fc:48:36:14:00:72:da:14:dd:6b:
         98:1c:c7:2c:c5:a9:87:e5:d8:e7:95:51:0f:25:76:5e:ec:b9:
         82:80:13:8f:94:d9:25:a1:93:30:5a:54:4e:67:b3:f3:2b:67:
         f6:e3:a2:db:ba:f0:d6:3e:1d:32:36:95:89:20:c2:78:be:03:
         c1:af:73:0d:bd:48:59:38:4f:35:6a:8e:da:b4:fa:4a:b1:0e:
         a7:cc:6e:9d:bb:cc:db:4d:39:cc:dd:21:cc:c5:75:fd:51:22:
         42:9d:1f:55:1d:04:70:ef:4f:74:98:fd:00:17:ae:cf:bb:ce:
         59:e5:2b:e0:62:25:78:2d:b5:d0:8e:2d:2a:b6:a2:96:e6:0d:
         13:c4:bd:ff:b9:30:35:f3:9e:89:74:55:f1:c4:1d:9c:82:2e:
         fc:1c:3b:52:b6:77:d5:f4:55:83:7c:a0:44:52:8c:2d:64:8b:
         75:8a:19:48:92:de:21:71:37:aa:ac:79:4d:56:03:7b:59:5a:
         97:5e:b9:49:03:80:05:68:a1:7d:05:90:ca:3c:67:52:9c:4f:
         4f:1a:91:21:1e:8a:a2:82:8c:73:33:71:d5:a9:00:72:29:9b:
         25:74:58:fe:e1:e5:cc:b5:09:ef:6a:1b:db:81:c1:66:15:27:
         51:30:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:26 2026 by rpki-client