Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
File:                     7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json)
Hash identifier:          pWsE3X9OdPeGcB9n1cqNwGweN/TimgUYdrcrvvYuhWQ=
Subject key identifier:   A7:38:ED:7B:AE:52:B0:90:7F:74:7C:66:4B:5E:70:22:8F:85:58:62
Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
Certificate issuer:       /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Certificate serial:       3526
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
Manifest number:          3523
Signing time:             Thu 26 Mar 2026 14:34:03 +0000
Manifest this update:     Thu 26 Mar 2026 14:34:02 +0000
Manifest next update:     Thu 02 Apr 2026 14:34:02 +0000
Files and hashes:         1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: fD/6O7UBLyf0MH5A0NBQGav1kY3klwMcmwtVCnLLqY0=)
                          2: 33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa (hash: AbvhoyivAgNrkploh2fNOK5QOfQrTca6ewzAjtdPii4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
                          rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13606 (0x3526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
        Validity
            Not Before: Mar 26 14:34:02 2026 GMT
            Not After : Apr  2 14:34:02 2026 GMT
        Subject: CN=69c543da-241d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:c5:74:d8:3a:e8:67:f2:b0:20:20:37:e4:
                    f7:e4:3b:29:84:cb:47:99:b9:89:25:9e:b7:d2:e4:
                    45:dd:35:99:ec:e7:8d:27:20:32:4e:70:9e:44:f6:
                    7a:90:e3:b2:99:90:00:09:d8:33:ee:b0:3e:e8:53:
                    e4:d8:d9:3e:88:05:fc:b7:50:5b:a8:89:f9:32:a4:
                    9b:2e:6f:11:3d:b0:13:59:35:d1:85:b0:94:50:13:
                    ba:df:48:42:a2:12:d9:3d:be:09:c7:a7:05:38:ff:
                    43:71:3b:f9:08:0f:54:93:41:cb:f8:f1:ad:2c:6c:
                    ed:4c:4b:a4:74:94:a3:c5:14:cc:6c:20:31:cf:9f:
                    d9:ed:fe:a1:70:01:88:36:45:ca:1f:37:8c:ec:66:
                    00:8a:ca:a3:70:2a:ad:8d:f1:fe:10:b6:af:1c:54:
                    5e:c5:39:8d:76:d2:3e:46:3f:1b:e5:a9:4a:f4:22:
                    7c:62:50:b7:df:f5:3e:50:51:4d:a6:92:67:f1:83:
                    2a:dd:e1:0f:34:0e:8d:b6:3f:cd:ca:0e:d9:12:54:
                    e7:f9:e7:76:39:da:11:92:e0:a7:1d:bf:e4:25:d2:
                    7b:14:80:a6:7c:98:b2:82:1e:5b:02:e0:4d:5d:ca:
                    d6:57:30:11:c4:0c:f7:b8:ca:a0:f5:e2:da:4d:de:
                    a6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:38:ED:7B:AE:52:B0:90:7F:74:7C:66:4B:5E:70:22:8F:85:58:62
            X509v3 Authority Key Identifier:
                keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:da:49:1e:52:55:fc:fa:4a:22:69:4a:a7:03:f7:9b:8c:2e:
         e2:3c:35:5b:51:99:65:32:8b:d6:ee:67:ab:44:51:a6:5e:a2:
         97:ed:91:66:3f:05:a4:56:2a:b5:df:0c:be:20:30:3e:61:46:
         ee:59:95:bf:d8:02:3b:b3:69:3f:f5:17:1e:00:2f:16:f5:76:
         57:40:f3:dd:f0:61:e5:73:10:36:6a:4b:54:42:02:2d:59:b1:
         63:65:75:07:c6:2c:91:d2:d9:c4:24:2e:36:a0:6c:8d:26:89:
         1c:4f:ef:c8:02:71:5b:a2:aa:a9:e6:6a:a8:de:73:76:0a:76:
         ca:0b:4b:73:ad:66:ee:c1:70:c1:6e:e2:cb:ce:b5:09:05:11:
         ed:44:03:10:b8:fc:df:29:4c:da:af:5b:30:14:7d:01:cb:11:
         6a:0e:40:3f:53:15:79:64:c9:0c:ef:76:82:46:4c:51:f7:a9:
         6e:e3:d1:6d:63:00:1d:3b:0d:2f:15:98:1b:db:76:ee:fc:9a:
         bc:85:bb:b3:82:32:21:b7:91:b3:c9:46:60:ce:14:ba:96:59:
         61:20:b2:8b:fa:21:88:89:2f:15:07:d5:fa:13:40:80:0a:67:
         bc:04:9f:2d:1d:7f:b7:4c:f7:c8:3e:da:03:c9:84:51:1d:bd:
         08:fe:0f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:27 2026 by rpki-client