Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
File:                     07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json)
Hash identifier:          nqcIu/9ei/Dsk6mTqqzsGVzMOFWQR8NFTZs518fw55A=
Subject key identifier:   D5:13:33:D9:A5:5A:04:2A:F2:E0:6F:9A:AE:88:2F:C8:57:B7:46:2F
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Certificate issuer:       /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial:       09C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
Manifest number:          09A8
Signing time:             Sat 28 Feb 2026 20:19:10 +0000
Manifest this update:     Sat 28 Feb 2026 20:19:10 +0000
Manifest next update:     Sat 07 Mar 2026 20:19:10 +0000
Files and hashes:         1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: k5lNWDZoP5eUbL4LndWOojPFBjuupUAPt9iBTPDBfBQ=)
                          2: 359388D8006511F1AA0FA34B566F56BC.roa (hash: LoAeL0RLlGhPEbe9r+NWVl3jOF528hlgHMGyjJwEH8A=)
                          3: 0A72D294006511F1BE07F947566F56BC.roa (hash: /nSjDkDwZukK3H60lcra1a4qvj9RZBW3Em5XmUDHDDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
                          rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503 (0x9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
        Validity
            Not Before: Feb 28 20:19:10 2026 GMT
            Not After : Mar  7 20:19:10 2026 GMT
        Subject: CN=69a34dbe-386a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:e0:18:c1:d3:03:e4:75:65:db:b8:1d:1f:
                    d8:77:9f:dd:3b:fb:99:bd:c0:12:ea:ee:ff:83:7d:
                    56:ea:09:b2:0d:20:d1:e5:bf:c5:a4:b1:40:d3:b0:
                    ce:50:18:34:08:83:2b:91:c0:53:64:b8:77:be:5b:
                    29:89:45:e5:c4:2d:65:c8:fb:2a:c3:09:8d:85:3b:
                    98:a2:9a:e7:fc:10:22:f2:f4:8a:d8:90:77:4f:42:
                    6f:60:8f:81:45:b7:a7:18:cc:0c:8f:3b:05:ac:04:
                    95:a4:4e:3f:8e:76:19:2b:78:aa:f6:c9:a6:ef:79:
                    44:2d:cc:aa:35:f3:37:91:09:23:27:c2:8a:9f:e9:
                    b1:0a:30:b1:9f:34:f8:c4:47:47:d3:f3:9f:f6:c0:
                    e4:d5:c3:9a:49:ac:fe:25:7d:e3:0e:a7:ba:49:26:
                    10:3e:ff:97:e4:36:e4:f2:1c:db:3d:32:6e:ab:e2:
                    0a:30:25:a3:e0:a5:4a:9b:22:19:3b:33:c5:79:3b:
                    4c:90:70:a0:df:3c:ba:1d:19:fb:39:35:e5:fd:9c:
                    fd:09:54:c3:bf:1b:99:ff:ea:0e:7b:db:36:e3:45:
                    ba:56:56:10:06:fb:b3:aa:38:99:88:c5:18:8f:3e:
                    6d:91:3b:dd:81:0a:25:fc:26:fd:e0:1e:eb:99:ea:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:13:33:D9:A5:5A:04:2A:F2:E0:6F:9A:AE:88:2F:C8:57:B7:46:2F
            X509v3 Authority Key Identifier:
                keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3a:e7:30:3b:2e:1d:e8:34:c3:1d:ff:64:25:6d:1c:14:1d:
         93:fb:b2:fc:c2:b1:18:03:f8:0f:df:8c:9d:32:da:a9:21:2a:
         00:0f:1c:c3:f5:2d:c7:a7:de:39:20:73:e0:6c:7b:f0:be:d7:
         ff:e0:f0:6f:bf:5c:ab:a9:de:e1:43:78:d2:df:4b:7c:75:26:
         21:e7:17:cc:e4:b3:e6:ed:38:f4:2f:25:c9:8b:e8:32:13:73:
         e4:76:be:98:7a:56:69:7e:1f:42:df:3e:42:d3:3d:ae:fa:7c:
         12:ec:f3:f8:f9:cd:9d:48:d0:d6:44:6e:e7:c7:b1:72:f3:93:
         f1:4d:79:be:a6:5a:51:ba:13:50:2b:21:73:6d:b9:aa:3e:b7:
         78:fe:97:21:96:94:c9:2f:15:0f:e3:df:da:e1:13:d8:d1:91:
         51:4c:49:ac:d3:66:1a:fc:5c:b7:c0:9e:ab:9a:ee:e4:31:e7:
         76:6b:f6:21:0b:47:0c:68:62:ba:a7:47:ef:1c:46:a9:11:6e:
         cf:d0:a4:ce:ca:eb:7f:4d:b8:ca:34:98:b3:ad:c6:a0:bc:32:
         35:05:55:5a:47:10:b8:9e:f6:69:db:3b:cf:95:e8:1d:8b:0b:
         ac:2a:ff:53:73:19:c0:91:f6:90:ad:90:7f:49:ce:bb:01:91:
         88:a5:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:28 2026 by rpki-client