Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File:                     7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier:          hU0uYq73TUlvf6dXn5jZilV3LSPtjLCf1O9TaDs4oT0=
Subject key identifier:   5A:62:94:D3:96:C7:4B:3A:52:4B:31:F1:AD:44:E4:24:F0:D7:C9:B1
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       036A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number:          0347
Signing time:             Wed 25 Mar 2026 00:41:46 +0000
Manifest this update:     Wed 25 Mar 2026 00:41:45 +0000
Manifest next update:     Wed 01 Apr 2026 00:41:45 +0000
Files and hashes:         1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: u5QNfaakWJcq/5r5STUHdFao/suERHhahFh6NeWBvz8=)
                          2: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: QTw/GKnqOzom+7g2Vy0ugUBB+pLhZarT5O8cic2MYbc=)
                          3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: 9v4NKBdRQhuU8DQv3Rod5Fcc10899zvHWabiZx6Nun8=)
                          4: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: nnwYsXqpriKdgHZ6F2Bjskh6Ji1AomhewkLa8SUVYYs=)
                          5: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: WYNTjnlZgwrqZBIU4k28zQZnPO22jdEa1SzcgGRQAiQ=)
                          6: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: vM0A7WnGvcxI52gcg6mHL5DanZRChz8WZQbZNCoxjuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
                          rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Mar 25 00:41:45 2026 GMT
            Not After : Apr  1 00:41:45 2026 GMT
        Subject: CN=69c32f4a-0034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:b5:3f:a4:4b:b9:1d:1d:81:72:b4:01:ff:
                    4a:1d:bc:d5:23:04:16:d6:6e:5f:f3:b4:24:72:00:
                    45:83:03:5a:ff:f3:f5:05:e8:62:c6:74:a3:f6:4a:
                    97:dd:a3:5d:4c:86:ea:20:e6:ca:eb:40:ea:2c:56:
                    4a:71:d6:67:1c:50:5e:69:88:77:eb:07:c2:3d:07:
                    12:0c:d3:78:43:b0:0d:5c:cd:b0:9e:30:13:0f:3d:
                    34:ae:10:f8:9f:42:28:33:c4:bb:48:c7:32:0a:9d:
                    02:22:25:d3:ad:17:53:43:52:72:f8:f5:8d:c1:26:
                    fc:dd:3b:7a:7f:ae:60:2c:1d:85:03:29:d1:05:7b:
                    ac:44:ef:45:83:b3:11:c9:39:b2:2c:42:63:a9:f4:
                    3d:21:50:87:a7:89:7f:d0:ba:0b:be:77:a4:54:f2:
                    1a:e4:ec:46:5e:ba:a3:86:1d:35:46:00:a7:40:48:
                    7b:34:f2:72:c3:0d:4e:c7:d9:6f:27:76:40:6d:a8:
                    63:58:0e:0c:41:52:78:f4:66:59:eb:3d:e6:7d:8b:
                    74:ad:16:56:1c:6e:32:7e:80:c3:42:4d:10:c2:48:
                    f3:20:32:bf:ba:b7:cd:8f:11:21:25:7e:9d:c4:b9:
                    6c:1f:32:76:16:bf:b1:8a:70:10:d6:dd:50:8d:3b:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:62:94:D3:96:C7:4B:3A:52:4B:31:F1:AD:44:E4:24:F0:D7:C9:B1
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:10:c1:e5:ae:e7:7a:6b:ef:0b:6d:3e:59:3c:81:f6:b5:
         3b:7a:54:99:84:7c:bb:37:69:14:83:3b:39:d5:f3:19:f1:20:
         fe:64:9b:67:68:2c:2f:b2:29:49:99:9f:43:ab:56:ca:42:a2:
         18:7c:96:25:de:8a:21:79:19:c1:55:87:4d:9b:cf:73:55:59:
         22:89:c7:0e:01:0e:f2:11:33:f2:01:ac:72:7f:13:99:f8:e3:
         fb:fa:12:20:9e:9b:80:43:90:bd:7c:9e:da:fd:4a:54:23:c8:
         eb:37:c4:41:09:67:ab:b1:ea:0a:e6:a3:61:84:92:ba:34:eb:
         6f:d7:88:01:fc:f6:8d:4a:c4:d4:1a:49:b1:af:ca:9f:28:3e:
         56:b7:b3:31:bc:19:78:96:40:ee:48:d6:1e:c8:ee:da:c8:99:
         96:0e:77:74:fa:21:31:75:8b:e6:00:93:48:88:ca:11:e3:81:
         50:4d:04:e3:30:69:2e:c8:e5:3c:ae:5c:4c:2d:0f:7c:c7:41:
         c3:88:78:d9:ab:83:78:0d:3a:50:10:80:71:5d:8e:61:05:9b:
         22:34:72:3a:57:d6:aa:5d:d0:99:93:00:a7:69:ce:1e:8f:e3:
         25:31:01:e6:c7:19:2e:cc:9d:14:d1:dd:74:92:32:76:dd:f8:
         97:be:21:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:47 2026 by rpki-client