Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft
File:                     7G3y7NGPKF-XuI-EQf0pep7buUw.mft (raw, json)
Hash identifier:          UkXUQ8WGzlC8Qa5PR+fh2SuHmAn1ichdDe3Gj0z5s6k=
Subject key identifier:   57:BC:91:19:B7:FE:A9:6B:2C:BB:ED:20:A5:C5:18:90:34:B1:94:2C
Authority key identifier: EC:6D:F2:EC:D1:8F:28:5F:97:B8:8F:84:41:FD:29:7A:9E:DB:B9:4C
Certificate issuer:       /CN=A911725F/serialNumber=EC6DF2ECD18F285F97B88F8441FD297A9EDBB94C
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7G3y7NGPKF-XuI-EQf0pep7buUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft
Manifest number:          1A
Signing time:             Sun 01 Mar 2026 10:29:35 +0000
Manifest this update:     Sun 01 Mar 2026 10:29:34 +0000
Manifest next update:     Sun 08 Mar 2026 10:29:34 +0000
Files and hashes:         1: 7G3y7NGPKF-XuI-EQf0pep7buUw.crl (hash: GKNgOcnkhMSdRcuwlWdwOv3jKmY91WMDY4rIyECx04M=)
                          2: 0680FAB6FFBC11F0B48A1C476B6F56BC.roa (hash: JTg/wxnjXgQG78NKNMvzjkUcxRTYs52fNHEXF1Hjz1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.crl
                          rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7G3y7NGPKF-XuI-EQf0pep7buUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911725F, serialNumber=EC6DF2ECD18F285F97B88F8441FD297A9EDBB94C
        Validity
            Not Before: Mar  1 10:29:34 2026 GMT
            Not After : Mar  8 10:29:34 2026 GMT
        Subject: CN=69a4150f-08b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:4f:7c:e8:af:e9:ca:ef:66:57:1e:c1:ed:
                    f6:84:93:33:5f:98:36:b5:41:5f:7c:ef:1c:c7:52:
                    3c:78:64:b5:9c:c8:fe:02:97:1e:18:df:c0:77:73:
                    d0:14:42:69:17:f4:23:4a:46:0d:d0:7c:db:72:1e:
                    11:7c:77:7e:6f:94:f8:43:d4:7e:9a:43:ad:cc:14:
                    1c:7e:1f:22:c1:eb:ea:d4:5a:d6:f1:57:74:d9:e5:
                    cd:5a:8f:2d:67:3c:2a:4d:18:b4:fd:4e:9f:9e:ed:
                    8f:29:82:2b:e9:91:f4:61:4f:05:82:8c:02:05:cb:
                    c1:cc:50:2a:a3:36:77:51:6b:4a:6e:b6:8d:cb:58:
                    cc:ed:24:22:d9:ee:aa:f7:ca:76:77:dc:b0:18:fd:
                    2a:74:bd:ec:f2:7e:12:1f:53:4b:c9:38:ff:89:e2:
                    4d:5f:7f:bd:87:82:bb:e1:a4:1a:64:1d:a8:a9:d3:
                    ea:7e:4c:75:77:4e:61:7e:bf:15:0d:e9:65:4b:5b:
                    3b:02:e5:70:2b:5a:78:cf:b2:7f:f5:6c:be:35:32:
                    39:8a:0e:d2:f8:c5:8c:f8:82:c5:2b:b6:c3:ba:ea:
                    e7:37:55:67:87:55:64:49:06:a5:bc:c0:b2:52:d0:
                    ee:58:e2:bc:4b:f8:5b:6c:ff:ef:2d:4e:ae:54:ff:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BC:91:19:B7:FE:A9:6B:2C:BB:ED:20:A5:C5:18:90:34:B1:94:2C
            X509v3 Authority Key Identifier:
                keyid:EC:6D:F2:EC:D1:8F:28:5F:97:B8:8F:84:41:FD:29:7A:9E:DB:B9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7G3y7NGPKF-XuI-EQf0pep7buUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:37:0f:17:cc:ca:33:b5:14:66:23:74:51:5c:39:91:1e:f2:
         04:36:e1:4b:e6:3a:6c:5d:f7:d5:16:83:d3:2a:8d:cb:b9:0e:
         b3:49:f0:6d:d2:ca:25:40:30:f4:9d:4f:c7:dc:ef:d4:11:4e:
         3f:c6:2b:c2:09:fc:ca:cb:a4:a3:f4:6a:ac:8f:7c:83:01:f9:
         da:68:f8:08:29:ed:be:ab:10:ac:e0:4f:a7:e7:1f:e3:1b:99:
         fe:2e:db:27:84:3a:2d:8e:53:13:2d:36:72:40:ec:5a:81:33:
         d8:81:bd:bd:c9:33:7a:55:e0:ff:c2:4e:0c:2b:53:24:fa:c5:
         2c:0f:62:7b:10:39:bc:c0:a8:54:93:2a:1a:37:3a:2e:b7:3d:
         a7:bd:24:9f:2d:a2:16:16:89:a6:f2:45:71:69:58:77:b7:7a:
         3f:40:52:48:81:2f:6a:93:03:96:cb:10:8f:4a:f3:4a:bd:b1:
         44:96:c5:93:1c:4f:8b:c5:d1:f0:da:8d:77:70:a9:b6:cf:17:
         9c:87:28:b5:4f:8b:7f:60:f7:4a:57:b5:fd:8f:e1:c0:5b:f1:
         bf:32:08:52:93:13:c2:6a:cb:e0:7b:ea:79:1f:0b:41:7e:90:
         97:4a:fc:69:1d:28:ef:c8:b6:17:59:d0:ba:62:6f:f8:9c:f3:
         7f:8b:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:32:54 2026 by rpki-client