Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File:                     7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier:          ZnWXeI0tayTb4SAlpaNpyW0fG1QzG2VecX1q69ED5v4=
Subject key identifier:   C4:04:B6:C1:F6:46:DE:CD:5A:5F:DD:49:99:55:41:AA:80:9F:56:50
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer:       /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial:       0C88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number:          0C6E
Signing time:             Tue 24 Mar 2026 18:27:26 +0000
Manifest this update:     Tue 24 Mar 2026 18:27:26 +0000
Manifest next update:     Tue 31 Mar 2026 18:27:26 +0000
Files and hashes:         1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: bkVkZp5jqZxyuDuHJ6rJh6dIPLFXQ9WvpUWSr3S4W6Q=)
                          2: 627B1438281211EA881CC32DC4F9AE02.roa (hash: QuMcWQGwhElYLcNGEV8qqlAOlpLd+8u3fMjc2LDn80I=)
                          3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Lb32CCKaZxPXJVtVTz41kWSGeP/mH1CszKT3y/ullaM=)
                          4: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: 4bnWRv5wJBsyx0TFBETKt2oLFJp/Xiza93KwZfpHk70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
                          rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3208 (0xc88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
        Validity
            Not Before: Mar 24 18:27:26 2026 GMT
            Not After : Mar 31 18:27:26 2026 GMT
        Subject: CN=69c2d78e-a4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:40:38:c8:16:83:5e:2b:93:1f:d4:1b:af:
                    e1:bc:da:72:7a:87:56:c7:f1:a8:58:46:7b:f5:b3:
                    15:66:87:5c:d4:41:59:91:db:45:ed:f9:49:96:bb:
                    51:4a:79:38:93:6e:3f:86:f0:66:b5:c8:d3:e9:53:
                    6e:13:e3:5c:93:34:bc:24:18:91:e1:03:62:75:08:
                    ac:d8:29:6a:8a:21:9b:38:5c:42:3b:c6:6d:d3:ff:
                    5d:97:30:3c:25:c4:68:8e:d7:0f:20:30:0e:d0:e7:
                    41:e6:07:d1:ef:1a:58:36:49:44:eb:6f:ad:40:ff:
                    98:0f:bf:89:2e:f3:1c:1a:eb:a4:0d:39:8f:be:e0:
                    ca:a6:94:67:b1:0d:98:99:c8:a7:96:d5:e7:db:19:
                    4c:77:a9:6a:8b:95:49:b5:92:34:02:6a:82:3f:9c:
                    6d:cd:66:ac:8b:bd:c0:18:50:d0:c5:f3:5b:c5:47:
                    27:95:fe:98:65:97:dc:a1:b9:58:b7:72:6f:71:e7:
                    bd:79:1e:49:9e:7d:c5:d7:be:4b:ff:e9:d9:a8:a6:
                    10:65:7e:b2:07:e7:30:07:e6:53:11:53:30:c7:1f:
                    61:86:42:8a:c4:22:38:92:be:77:a7:c3:5b:21:7d:
                    d0:1e:ec:50:d5:ec:61:c9:44:44:9d:1b:7b:dd:9c:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:04:B6:C1:F6:46:DE:CD:5A:5F:DD:49:99:55:41:AA:80:9F:56:50
            X509v3 Authority Key Identifier:
                keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:25:a9:e4:4a:25:7b:48:01:6b:33:22:d2:7e:0e:a0:15:a0:
         e9:99:b0:94:31:9f:e1:e9:0b:83:d3:37:76:da:1c:3b:7c:58:
         93:b0:4b:c6:c1:50:88:e8:c4:14:1e:72:94:7c:a7:08:73:5b:
         83:7e:79:2c:ab:57:53:84:51:68:b7:46:93:8c:1a:f3:91:75:
         22:6d:75:e3:6e:3c:55:a8:fd:b9:bf:16:48:b2:74:59:cb:8f:
         0f:3a:09:33:62:1d:e3:f6:24:a2:21:d6:ef:5f:4d:49:e6:5c:
         cf:21:ad:1f:73:a2:92:c4:cc:5b:5d:ec:93:c0:8c:1b:4d:bc:
         3f:fc:45:42:12:88:11:72:e3:aa:7d:9b:50:ae:f6:09:cd:15:
         b2:ce:08:de:66:62:e6:b2:5e:59:dd:88:92:db:70:89:af:09:
         58:ed:26:18:34:16:a8:c5:bd:8b:86:c1:51:2d:46:ff:f9:8c:
         ab:5f:aa:87:d7:5c:38:13:51:bc:73:9f:dc:2a:2c:f3:99:0c:
         8e:da:7c:70:02:17:75:c5:2d:fe:6f:25:c0:d4:56:13:4b:8f:
         64:59:2e:6f:11:7c:0d:b7:75:cb:71:8b:af:cc:92:d0:dc:2b:
         e2:b9:9a:3c:13:b1:67:b3:33:43:ac:30:8a:5a:6d:34:57:cc:
         ec:6a:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:38:09 2026 by rpki-client