Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
File:                     1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json)
Hash identifier:          RCPHpa9+VbLFc1DiJHPpv+9QW0U06J4SXMTDK/MjJ0k=
Subject key identifier:   60:BE:4C:32:CB:F4:E6:9F:F7:B1:6C:E4:AB:AB:4C:97:E5:21:DF:17
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Certificate issuer:       /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial:       35DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
Manifest number:          357F
Signing time:             Thu 26 Mar 2026 14:22:37 +0000
Manifest this update:     Thu 26 Mar 2026 14:22:37 +0000
Manifest next update:     Thu 02 Apr 2026 14:22:37 +0000
Files and hashes:         1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: Jd1yXYAmkJ3LDe0la53uGh5o5Dqcuc83VV6jev46oQ8=)
                          2: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: l7WAwvcZVKlat81bCLOlMjC2QBKLBCvz0UaEYCXONlg=)
                          3: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: HkNBHfCCxWQ28dFsr4VLP9uYL5uGGo+V0spZFxOBLiI=)
                          4: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xJWTRRKyuZjkvrJwtVub0K0nYQi/ZGucKzB1ISqRPw4=)
                          5: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: kkJ4rjLr4UzQN8c3HU8Z5z8wwvFPs1puIf6qJX6ykA8=)
                          6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: XAFPiyCkUajmfqGSLHpWXaC7zQuAH4W6AGpUVOedZk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13791 (0x35df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
        Validity
            Not Before: Mar 26 14:22:37 2026 GMT
            Not After : Apr  2 14:22:37 2026 GMT
        Subject: CN=69c5412d-fd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:20:5d:7e:2c:79:d7:b1:62:d3:4c:f4:1b:
                    74:b8:60:5b:d3:f7:44:86:88:b9:5d:a9:0f:d4:0e:
                    5d:bc:5a:2a:03:d0:97:f4:9b:64:5d:46:50:e8:f9:
                    f2:48:21:62:23:91:f9:db:e1:76:de:71:34:73:32:
                    c2:a8:4c:e8:70:d5:a5:1d:d3:68:ed:5e:56:ad:4d:
                    73:78:b5:5c:38:11:35:c8:ba:85:d9:f7:dd:98:4c:
                    1a:3e:28:2e:2f:4e:e5:69:57:ca:80:f2:e0:7c:a6:
                    d1:0d:f7:c7:31:37:49:d5:9f:eb:8d:ff:95:c1:43:
                    6e:63:1e:88:45:92:9d:08:e5:78:5b:ea:9c:b6:53:
                    24:b2:d6:8d:c1:89:81:f2:8d:85:ac:2c:1d:83:47:
                    46:69:92:ec:37:f1:92:02:28:48:b6:da:f0:51:1f:
                    43:82:3f:a3:97:6c:da:25:78:44:17:60:3f:93:a1:
                    69:a1:7e:ee:c1:94:c8:bc:9a:c4:aa:72:a9:98:c6:
                    80:3e:29:f7:e7:10:1e:1f:fb:0b:9f:0c:6f:a8:63:
                    a2:47:15:2c:01:1f:e4:bb:bd:c9:08:d9:3e:d1:78:
                    51:51:2b:d5:a6:14:47:fd:e3:84:54:df:21:4c:66:
                    58:7e:62:95:13:b0:bb:ac:7e:aa:54:9c:f9:61:b5:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BE:4C:32:CB:F4:E6:9F:F7:B1:6C:E4:AB:AB:4C:97:E5:21:DF:17
            X509v3 Authority Key Identifier:
                keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:53:97:63:b1:db:01:e1:61:de:ab:65:e8:b2:2c:fb:4d:60:
         09:22:0f:1f:63:50:e6:28:ca:84:46:57:5d:61:01:da:4a:36:
         2e:77:44:48:4c:41:22:06:e9:70:b3:5a:25:98:72:26:31:b0:
         97:09:05:28:9b:c2:fe:80:48:76:db:13:ff:fc:e8:28:16:ca:
         ac:d0:e7:30:ac:b3:a5:bf:eb:8c:79:bf:00:87:fe:f6:54:3c:
         21:fb:b1:a4:56:5f:78:d8:1c:a5:14:85:79:04:5c:2d:a2:64:
         75:6a:62:15:eb:9f:ee:ce:40:46:4f:67:02:90:21:3d:05:e1:
         ae:ef:16:cf:17:d4:fe:0a:cc:62:e9:65:45:9b:4f:cb:83:fd:
         8c:ad:66:47:75:bd:77:1b:1d:a0:e3:5e:65:53:54:7a:02:be:
         be:99:ef:1c:69:50:70:3d:60:b8:26:1d:72:61:20:b5:0a:e3:
         a1:41:24:41:46:3b:ac:16:93:51:cc:d8:66:78:b2:43:cd:03:
         25:c4:d9:f8:f8:59:5b:be:46:d4:76:f6:5e:e1:66:e3:86:3c:
         45:ea:df:88:4f:07:b2:67:b0:07:e8:cc:6e:d5:8a:e4:a8:d8:
         a2:db:37:3d:c4:7a:b9:bf:6d:f2:86:48:f1:8f:e8:0f:39:f5:
         2c:61:cf:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw
QUI0MTYyNjAwHhcNMjYwMzI2MTQyMjM3WhcNMjYwNDAyMTQyMjM3WjAYMRYwFAYD
VQQDEw02OWM1NDEyZC1mZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnNIgXX4sedexYtNM9Bt0uGBb0/dEhoi5XakP1A5dvFoqA9CX9JtkXUZQ6Pny
SCFiI5H52+F23nE0czLCqEzocNWlHdNo7V5WrU1zeLVcOBE1yLqF2ffdmEwaPigu
L07laVfKgPLgfKbRDffHMTdJ1Z/rjf+VwUNuYx6IRZKdCOV4W+qctlMkstaNwYmB
8o2FrCwdg0dGaZLsN/GSAihIttrwUR9Dgj+jl2zaJXhEF2A/k6FpoX7uwZTIvJrE
qnKpmMaAPin35xAeH/sLnwxvqGOiRxUsAR/ku73JCNk+0XhRUSvVphRH/eOEVN8h
TGZYfmKVE7C7rH6qVJz5YbX88wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGC+TDLL
9Oaf97Fs5KurTJflId8XMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE
ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV
U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKlOXY7HbAeFh3qtl6LIs+01gCSIPH2NQ5ijKhEZXXWEB2ko2LndESExBIgbp
cLNaJZhyJjGwlwkFKJvC/oBIdtsT//zoKBbKrNDnMKyzpb/rjHm/AIf+9lQ8Ifux
pFZfeNgcpRSFeQRcLaJkdWpiFeuf7s5ARk9nApAhPQXhru8WzxfU/grMYullRZtP
y4P9jK1mR3W9dxsdoONeZVNUegK+vpnvHGlQcD1guCYdcmEgtQrjoUEkQUY7rBaT
UczYZniyQ80DJcTZ+PhZW75G1Hb2XuFm44Y8RerfiE8HsmewB+jMbtWK5KjYots3
PcR6ub9t8oZI8Y/oDzn1LGHPSg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:41 2026 by rpki-client