Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
File:                     7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json)
Hash identifier:          mTHSxtNCK9rgBPczLH8ywY5NW4UwtpMKwyBZWFIhMls=
Subject key identifier:   BB:0E:1E:0B:93:74:26:D9:19:BD:05:34:22:E3:CD:81:A5:30:AA:74
Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD
Certificate issuer:       /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
Certificate serial:       3512
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
Manifest number:          3512
Signing time:             Sat 28 Feb 2026 14:37:40 +0000
Manifest this update:     Sat 28 Feb 2026 14:37:40 +0000
Manifest next update:     Sat 07 Mar 2026 14:37:40 +0000
Files and hashes:         1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: xEgvwrXn8Xdaw3HW2idoGzdthy2K2nov+lCbbdGs5Cs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl
                          rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13586 (0x3512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
        Validity
            Not Before: Feb 28 14:37:40 2026 GMT
            Not After : Mar  7 14:37:40 2026 GMT
        Subject: CN=69a2fdb4-5d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:c3:66:98:71:83:67:b6:47:61:a8:32:d7:
                    78:d2:5b:13:9b:81:74:e6:52:37:16:9d:6d:05:1c:
                    c4:ca:5c:fd:2b:6f:44:76:46:7b:87:4e:bb:fb:dc:
                    4f:cb:30:73:43:b5:50:0d:25:2f:14:30:e7:3a:2c:
                    30:8d:bd:c7:80:ae:25:5a:f1:2d:5c:72:5e:1e:95:
                    e1:07:66:dc:14:6b:14:bb:b7:48:1a:2e:9e:09:ac:
                    98:40:7c:6f:cf:74:e9:17:22:68:3b:5e:6c:0a:d0:
                    de:ff:22:d8:96:a0:23:bc:c1:93:59:bb:ad:57:fa:
                    45:c6:04:29:86:6e:fd:f2:80:a4:f8:d1:a2:3a:89:
                    c3:a8:0d:01:01:05:42:db:04:7e:9f:c0:70:8f:31:
                    53:0c:09:aa:e7:a0:99:a7:0f:b4:77:84:02:37:04:
                    e6:73:29:57:c9:94:7c:5c:fa:d5:ab:2e:c2:e2:f4:
                    7e:57:9f:11:e9:a2:eb:6d:e2:e4:21:8d:d9:28:7f:
                    54:45:98:b3:dc:b2:74:e1:69:c2:90:26:f6:98:4a:
                    bf:b6:07:3a:13:d7:28:db:d5:e4:ed:56:67:32:5e:
                    55:12:81:7c:43:5c:f0:e2:0e:90:74:91:81:0f:8f:
                    aa:b2:7d:96:a9:6e:b1:37:d5:5e:6b:3e:61:00:8d:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0E:1E:0B:93:74:26:D9:19:BD:05:34:22:E3:CD:81:A5:30:AA:74
            X509v3 Authority Key Identifier:
                keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:27:03:7b:28:9d:07:70:fd:d3:22:8c:18:2c:62:79:4f:57:
         2b:a3:7c:be:90:9f:50:ec:de:0f:04:fa:c7:54:8a:eb:01:ff:
         09:70:cd:f8:1e:92:b3:c3:a0:b6:66:99:65:72:6b:26:60:42:
         dd:36:c6:81:33:56:d2:30:c5:50:60:e4:3c:0c:74:a0:bf:e6:
         d1:4d:fb:18:a5:8e:6f:9b:7e:38:fc:fa:f7:66:84:ba:05:97:
         86:cb:62:da:5b:84:b7:5d:a1:cb:86:77:39:23:59:ad:56:bf:
         6f:a7:ed:f4:05:dc:9e:3d:91:6c:9e:fa:4a:a7:8e:ff:36:d0:
         7f:f7:3c:cf:78:6f:2b:7d:f5:31:96:25:9f:54:60:12:74:2b:
         97:14:44:02:c6:39:ac:7c:36:bf:82:52:47:c8:61:18:77:0e:
         1b:df:4f:de:97:57:ba:d6:59:6e:64:94:6d:81:b9:b7:26:a4:
         8c:44:2a:ef:94:ec:1f:0e:60:2f:90:d5:48:5b:ce:79:a0:4b:
         b3:76:a7:93:c2:67:fd:34:4a:01:bb:9b:12:26:9f:00:40:bc:
         bc:75:45:01:18:b5:1a:b1:8c:ff:5a:8f:e6:f4:15:79:5c:58:
         9a:a6:6d:b1:03:d5:37:19:11:94:c7:61:a1:95:19:c8:66:8d:
         e7:2b:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:21 2026 by rpki-client