Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
File:                     C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json)
Hash identifier:          EQqD2aKo2J7o1Ff3DAUtm0AK8cq9cLxc4MvhA+k+bss=
Subject key identifier:   6E:81:4F:EC:10:63:D7:52:6E:52:AB:F3:17:FA:14:1E:BC:D3:E6:CD
Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F
Certificate issuer:       /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
Certificate serial:       05CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
Manifest number:          05C8
Signing time:             Sat 28 Feb 2026 23:37:08 +0000
Manifest this update:     Sat 28 Feb 2026 23:37:07 +0000
Manifest next update:     Sat 07 Mar 2026 23:37:07 +0000
Files and hashes:         1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: DjMQGsdEWUXZAqjr6LLH7pkt/k8U0BSRGQXFk7viuvQ=)
                          2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: Q+qQNh06TWJSPioowQk9TdPpmfJvoadRPGqElrlppYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486 (0x5ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
        Validity
            Not Before: Feb 28 23:37:07 2026 GMT
            Not After : Mar  7 23:37:07 2026 GMT
        Subject: CN=69a37c24-e97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:9e:c2:5f:a9:14:03:ff:e4:2b:e7:ec:b7:
                    c4:3b:f1:41:f1:bd:20:91:1e:2c:ee:f9:2b:69:0e:
                    0b:35:81:36:27:52:5b:c9:d8:e0:a1:c1:be:cd:a2:
                    30:2e:19:0b:25:29:1d:41:49:e6:b4:b3:8f:5c:be:
                    f7:2a:52:fa:18:5f:cd:44:7c:8c:00:fc:ea:72:04:
                    a3:a4:70:81:0e:e2:30:a5:b0:53:37:67:53:32:d5:
                    67:88:97:73:84:16:2b:51:4e:0b:88:68:72:f5:06:
                    2b:c4:f9:75:5e:17:2c:4d:a4:b8:ca:33:79:b8:10:
                    44:e5:cb:8a:c3:9a:94:e5:fd:a2:49:27:ea:cd:19:
                    88:fb:6f:79:ce:45:25:db:ba:f2:4f:a5:85:cf:f4:
                    8b:24:3c:ab:f1:90:d8:58:eb:31:1f:4d:d1:e2:b0:
                    99:7a:c6:52:85:03:67:67:bd:13:f3:95:03:c8:e6:
                    84:7d:9b:e9:b7:ca:78:94:24:24:f1:7f:d8:51:d5:
                    ec:c8:52:be:56:ea:74:51:05:59:f5:1e:e9:1f:53:
                    e9:e2:a8:cd:0a:b9:43:05:3b:40:7b:4a:39:80:d0:
                    08:f5:8b:15:f2:55:9e:96:63:90:b6:b1:60:58:3a:
                    a5:f9:9b:0a:5c:f5:df:99:b8:39:70:c4:6c:2e:f5:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:81:4F:EC:10:63:D7:52:6E:52:AB:F3:17:FA:14:1E:BC:D3:E6:CD
            X509v3 Authority Key Identifier:
                keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5c:83:71:07:21:d1:e1:43:a1:96:81:f6:71:b5:4f:c6:9a:
         fa:6f:72:63:8f:b6:ce:61:df:68:6a:3f:66:18:62:08:73:4e:
         ea:4a:c9:06:7c:18:2e:f0:cd:dd:e5:e8:59:d5:12:0a:e4:65:
         ff:05:72:03:6e:a8:70:47:90:9c:c9:48:6c:0e:8e:7b:b0:c3:
         fe:a7:8a:0a:90:24:97:0a:51:42:c2:d1:f7:dd:a2:e8:b9:95:
         58:a1:c7:4b:f2:35:c8:86:d1:ca:b1:14:6d:86:68:b0:5f:47:
         04:75:20:90:ab:1c:aa:a4:6b:f8:07:b5:5d:ec:ec:9d:7c:cd:
         7a:ab:2c:9b:6f:d8:32:f2:f4:e4:01:01:c5:1f:83:6f:e2:b7:
         38:62:27:34:c8:98:b2:dd:70:35:af:7f:83:88:b4:e8:ef:8f:
         e0:a5:b5:bf:78:4c:60:04:3d:5b:00:05:93:65:63:ee:fd:a5:
         76:3c:07:71:be:4a:9a:a9:76:4c:01:31:c1:1e:dc:bb:d6:70:
         5f:5c:88:e3:dc:c5:1f:d0:ce:4a:30:b2:f8:14:e7:b1:e3:eb:
         0f:1f:17:32:07:a8:4a:66:41:04:68:cf:e6:67:dc:b7:ab:08:
         0b:4a:b9:50:cb:8a:ff:ad:92:97:ba:d2:77:55:b2:ea:3b:0b:
         d5:d8:2f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:54 2026 by rpki-client