Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File:                     u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier:          QQlCfh06smwHDNbFd6Z5sz3mgD5h9Vnc34C5tboVTxU=
Subject key identifier:   DC:76:C8:54:4E:30:C0:FB:60:4B:7B:46:6B:E6:D3:AF:FC:93:E2:6D
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer:       /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number:          0294
Signing time:             Fri 17 Apr 2026 01:29:53 +0000
Manifest this update:     Fri 17 Apr 2026 01:29:53 +0000
Manifest next update:     Fri 24 Apr 2026 01:29:53 +0000
Files and hashes:         1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: In7zzeAOnoRD36srlwzom3+RRc+zYlSGyAqh5L9yUkk=)
                          2: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: b9DVs3sKMRxCpx6qLE96QA7SsPL0b1qBye22Pru51gY=)
                          3: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: 9SKQpptnj/JfGFLLT1UzGMBhecqFZTQ9eSGwwb/vYF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
                          rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
        Validity
            Not Before: Apr 17 01:29:53 2026 GMT
            Not After : Apr 24 01:29:53 2026 GMT
        Subject: CN=69e18d11-600d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:17:7d:77:df:9e:56:6a:72:8a:13:05:23:5a:
                    3a:c9:d8:7e:11:3c:a6:c0:cb:44:a4:91:70:40:cb:
                    0c:f4:e9:a4:ff:b9:c5:73:5f:59:4b:4d:0c:33:40:
                    52:4e:05:5d:86:8e:03:38:90:65:76:01:91:cd:81:
                    fb:fe:46:07:55:60:93:25:1b:49:72:4c:40:6a:d9:
                    16:de:0a:f4:c2:83:49:b4:33:eb:9e:73:a7:02:8b:
                    b6:51:01:7d:20:eb:bb:2d:fd:42:e7:05:93:7b:ab:
                    13:61:5a:9e:8f:f8:31:c7:ba:9f:43:ae:0e:0c:6c:
                    af:05:e9:5b:49:ea:1d:6f:11:fd:4d:a3:8c:73:f0:
                    7f:9c:4d:7f:ba:e0:09:35:5c:b3:89:cf:8e:74:22:
                    ee:c9:18:b5:ed:22:a6:46:19:2a:d8:59:c7:3e:34:
                    5a:d6:4b:fd:d0:2a:e5:c6:4b:a6:c2:08:66:8f:2f:
                    cc:21:eb:56:3b:25:38:9a:08:05:37:59:ef:22:df:
                    6c:35:d6:47:37:c4:bb:75:a4:7e:0b:19:d9:74:f4:
                    19:f1:e4:85:d4:d8:55:04:7d:bb:e4:1c:14:99:91:
                    35:81:59:b3:f2:88:57:d8:a4:19:b4:6a:21:84:cc:
                    cf:1f:0e:5c:cc:db:45:bd:25:0c:97:c0:9e:a1:05:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:76:C8:54:4E:30:C0:FB:60:4B:7B:46:6B:E6:D3:AF:FC:93:E2:6D
            X509v3 Authority Key Identifier:
                keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:2d:6e:87:64:61:f5:86:75:80:7b:c1:8d:4a:21:40:26:
         84:b2:56:19:31:1d:47:24:9f:b0:33:8c:d7:9f:07:e1:cc:67:
         27:96:c9:17:ca:9b:c8:95:7a:3f:3a:e0:d3:29:11:d6:c0:08:
         4c:8c:fc:4c:12:15:b8:1e:60:34:c3:bc:c9:78:d4:5a:77:b8:
         14:0a:2b:c4:ad:c4:fb:e0:ea:c1:e8:25:97:5d:1b:79:b0:47:
         cc:67:0e:1c:3c:03:f2:16:8a:0c:23:9a:b0:90:55:bd:23:c3:
         4b:5f:ec:15:97:c8:6d:69:62:25:29:8e:7a:d1:5c:b5:9a:c3:
         f2:f8:b9:b3:65:f5:f0:b6:f1:67:d0:6e:ac:be:65:4b:ca:0f:
         c3:4a:b9:e3:d2:0d:3d:e1:95:da:5f:8c:9c:ab:a3:f7:e0:29:
         52:db:25:eb:05:09:1a:66:5b:13:11:79:81:dd:25:49:c1:4e:
         b1:9d:0b:a9:09:cb:f7:92:b3:60:d4:f7:8b:73:b9:fa:e1:11:
         92:fb:99:c3:be:5b:ed:84:3b:4d:a8:72:0f:8e:59:66:4e:e1:
         7a:5e:e0:93:1b:09:8f:cb:2c:f4:8d:a0:ce:99:a3:14:fd:11:
         fd:a5:e6:9a:3d:db:a5:3e:20:90:30:35:aa:61:44:3b:38:34:
         17:0b:5a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:18:19 2026 by rpki-client