Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
File:                     u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json)
Hash identifier:          PFNuxaHhmLVTzS2IUoMKh7H8GarxSpaIL4ddgZJ8eKw=
Subject key identifier:   56:F4:A4:1D:65:B8:37:84:8D:39:56:44:6B:9C:7C:73:05:4C:23:0E
Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0
Certificate issuer:       /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0
Certificate serial:       1866
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
Manifest number:          1858
Signing time:             Thu 26 Mar 2026 16:28:56 +0000
Manifest this update:     Thu 26 Mar 2026 16:28:55 +0000
Manifest next update:     Thu 02 Apr 2026 16:28:55 +0000
Files and hashes:         1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: xOqpImacfWtccNgMm9IdYcoy2qB0R62TfDhPCEY5Ggo=)
                          2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: 4pZljsATLvJe8EreBzMXvrtPZqlAUHjGmzZp2lY9i6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl
                          rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6246 (0x1866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0
        Validity
            Not Before: Mar 26 16:28:55 2026 GMT
            Not After : Apr  2 16:28:55 2026 GMT
        Subject: CN=69c55ec8-e01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:de:69:d8:8c:a6:f3:b4:0d:94:c9:97:3d:
                    09:8f:34:ff:f2:b9:0b:ce:05:76:a2:bc:4c:35:20:
                    43:75:d6:a1:ab:1b:b2:1d:55:c6:b6:cf:38:40:c7:
                    e0:f6:59:f6:08:45:8a:7c:26:a0:ec:ae:c5:f3:06:
                    a2:b9:78:0b:d3:3b:8d:80:74:8d:01:df:ef:44:e8:
                    5b:b4:39:f4:a6:76:4e:dd:8b:a4:c2:9a:19:a6:92:
                    59:bf:18:1b:a9:1e:74:bb:68:b0:71:78:12:11:99:
                    e3:b5:21:97:67:16:02:b7:95:09:5e:50:46:eb:64:
                    a4:11:c9:84:1c:8c:c2:ad:09:95:07:a9:c0:fd:fb:
                    87:dc:ea:11:ab:ef:3f:a5:1e:01:e2:cf:74:78:e7:
                    2d:04:21:f7:48:5a:96:93:12:ae:3f:a5:ff:cc:e4:
                    93:ec:da:06:b4:5d:b0:bf:4f:61:8e:ee:b4:d3:c9:
                    46:60:3d:32:60:67:70:95:ad:8f:9d:b5:55:c6:fa:
                    fd:95:9f:34:90:0a:96:df:4d:c6:b8:84:f9:79:47:
                    92:ba:0d:b4:9e:ae:bd:cf:eb:60:a8:ac:e4:58:a4:
                    cd:0d:38:ec:32:6f:02:86:e6:3b:12:83:ed:77:ff:
                    16:b5:d6:c7:82:72:24:64:b4:54:1a:53:56:7f:79:
                    d2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F4:A4:1D:65:B8:37:84:8D:39:56:44:6B:9C:7C:73:05:4C:23:0E
            X509v3 Authority Key Identifier:
                keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:16:64:f8:08:bb:67:49:0c:2d:32:57:d3:7d:a5:c5:c4:28:
         62:8b:c2:81:b6:49:0c:0f:a7:7d:bc:a3:1d:7c:d0:f0:b8:ed:
         f4:1f:9c:45:4f:5e:cf:90:10:38:98:eb:8d:34:c4:66:0d:2c:
         bb:65:68:0e:d6:71:02:c9:00:ec:2d:c6:b7:9e:a8:aa:62:be:
         0d:59:7b:6c:b7:ec:5a:57:db:0e:5d:f2:e6:e9:98:21:ab:b1:
         f4:f7:91:5a:0f:f9:d2:f2:99:82:d9:df:5f:b2:28:a1:59:e1:
         c7:0e:ff:a5:fa:88:f6:ca:dc:41:50:f3:6d:31:39:61:71:1a:
         c5:0c:8a:b8:5a:b2:4d:2c:71:b1:74:ab:6f:b6:24:c8:d7:16:
         d7:2b:37:57:82:c8:0f:ff:53:5b:6f:78:51:18:16:e3:eb:a0:
         1e:8f:84:60:f3:dd:bf:9b:f0:07:6e:f2:5d:7e:79:e3:7d:d0:
         81:35:92:72:c0:ac:1e:e6:1a:1d:ad:2f:aa:e1:dc:bf:0a:b8:
         53:84:63:ce:8a:ca:6d:2a:39:f9:53:4b:2c:1f:f3:fc:9c:6a:
         fd:a9:8e:38:88:00:c2:4d:81:5e:80:f9:79:a6:ee:74:d3:d7:
         c2:aa:9b:2b:5a:e8:c6:41:41:ff:87:85:50:21:97:3f:57:a0:
         a9:dc:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:32 2026 by rpki-client