Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
File:                     7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json)
Hash identifier:          L5i6dnjRlp7mxjWHHjMiBD0zz1+WPiqj1QmXlaTeGTg=
Subject key identifier:   93:11:14:20:F5:A8:E3:3A:42:96:9C:A7:DD:3C:A1:31:8C:DB:2A:B2
Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4
Certificate issuer:       /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
Manifest number:          0132
Signing time:             Sun 01 Mar 2026 06:28:33 +0000
Manifest this update:     Sun 01 Mar 2026 06:28:32 +0000
Manifest next update:     Sun 08 Mar 2026 06:28:32 +0000
Files and hashes:         1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: U7YXNMt3Hdguv8+zd88APSCxacEfYZiZ6qcM6QNl7NM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
        Validity
            Not Before: Mar  1 06:28:32 2026 GMT
            Not After : Mar  8 06:28:32 2026 GMT
        Subject: CN=69a3dc91-8d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:ce:34:cd:be:49:46:94:35:c6:e3:eb:19:
                    a9:73:2b:4f:c9:b2:db:d5:6d:c4:02:20:8c:b7:19:
                    ce:ba:5a:df:70:1d:02:c9:18:5e:cc:1e:42:cb:4b:
                    fa:56:24:3d:b4:ef:54:a5:1b:d0:a6:7c:40:c5:0d:
                    55:88:e9:cf:41:d9:4f:87:11:a9:21:97:6e:64:24:
                    b1:c5:51:1f:4c:95:b0:c1:82:0a:2a:84:71:be:d6:
                    f0:e6:b1:64:eb:12:68:04:cd:2b:54:55:34:86:ae:
                    9b:27:48:3a:a0:86:ae:1d:84:e5:39:fa:5f:da:c0:
                    e2:10:13:14:f8:ff:3b:f6:e7:e3:63:8c:fd:9c:03:
                    60:f6:46:7b:91:ea:fb:61:34:0f:42:c2:32:4a:33:
                    02:cf:21:8c:15:36:e6:a8:14:dc:b7:92:98:f9:b8:
                    1b:78:65:81:06:ea:48:d0:da:f2:a7:08:6b:6f:1e:
                    16:f1:31:32:c0:bd:f8:07:2c:16:65:21:87:bb:e1:
                    2e:c3:a2:7d:a4:f6:28:7a:52:2b:73:40:ab:ba:42:
                    ce:47:de:42:d8:cb:c2:5b:76:2b:df:e4:8d:66:02:
                    4f:af:e6:93:cf:81:ca:af:be:e0:57:59:f0:3c:63:
                    fd:cd:d5:e6:2b:83:74:db:2b:ae:ee:9d:46:6b:1e:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:11:14:20:F5:A8:E3:3A:42:96:9C:A7:DD:3C:A1:31:8C:DB:2A:B2
            X509v3 Authority Key Identifier:
                keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:3d:c1:48:dd:fc:27:45:0c:d1:0a:44:a9:43:eb:5e:6c:
         40:4a:1e:3b:34:c0:4d:0f:d3:22:77:91:b6:d6:16:fa:af:ba:
         a6:fe:55:20:a1:e2:73:b6:e3:99:16:9d:a5:aa:e1:db:42:24:
         68:61:75:e0:a7:d9:66:8d:80:cc:48:89:2b:fe:0d:6a:6b:b8:
         5f:3c:18:cb:e1:6e:e0:59:3f:0d:36:0c:05:f0:4b:dd:28:5e:
         9e:4e:ac:c1:db:15:1d:ce:ff:4f:60:68:cf:3f:67:18:2c:3d:
         d3:a2:f1:7c:c0:96:c7:65:fc:bd:3d:b9:66:9e:71:f6:5e:fe:
         62:c3:68:1d:c3:6b:f8:29:a3:24:ef:d8:72:df:8b:b9:dc:12:
         2a:a1:5b:49:93:53:18:8c:63:eb:43:d5:42:ae:e9:74:14:fb:
         df:a7:d3:31:15:5c:5e:c9:e6:d2:7e:11:bb:3c:9a:2d:d5:7d:
         a2:b7:1e:ed:ad:e9:f9:4d:9b:04:c7:34:49:d2:aa:82:4b:a0:
         03:21:6e:7a:eb:44:4b:39:96:99:71:da:53:28:c7:4a:26:5d:
         20:b5:c3:59:b1:13:fe:75:de:1b:84:de:fb:aa:2b:62:59:21:
         cd:b4:15:09:58:00:3b:e3:38:b4:cb:25:03:c8:d0:eb:96:06:
         1a:10:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:20 2026 by rpki-client