Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
File:                     F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json)
Hash identifier:          ClCsLjjbUbvayqFkqUsEgj9fGckm1hZo04obV8un6iI=
Subject key identifier:   1A:93:EA:B4:6E:03:96:DE:67:94:8A:22:5F:AB:70:65:1C:C0:04:50
Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1
Certificate issuer:       /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1
Certificate serial:       3517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
Manifest number:          3517
Signing time:             Sat 28 Feb 2026 14:16:51 +0000
Manifest this update:     Sat 28 Feb 2026 14:16:51 +0000
Manifest next update:     Sat 07 Mar 2026 14:16:51 +0000
Files and hashes:         1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: O8rFIOnFGxWYv7U7+2nF3BpeTg5FOEOP4LtswpHDCKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl
                          rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13591 (0x3517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1
        Validity
            Not Before: Feb 28 14:16:51 2026 GMT
            Not After : Mar  7 14:16:51 2026 GMT
        Subject: CN=69a2f8d3-53b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:59:06:07:b4:52:1f:a4:dc:9c:67:22:01:
                    8e:77:e2:ae:d6:0e:a5:ab:3f:9a:1a:f9:60:69:68:
                    86:53:e9:8f:2b:0f:ff:52:7a:14:e1:a3:09:33:9e:
                    2a:04:4d:02:d8:c0:3d:2e:82:9e:48:a6:b0:d6:21:
                    9a:62:95:14:34:8a:5b:10:56:ba:b6:7f:ed:ce:6c:
                    9f:c6:1a:23:5a:33:97:66:40:21:39:13:10:67:dd:
                    fa:e6:e0:8a:43:08:bb:f4:49:f5:59:05:4d:86:4d:
                    c9:41:06:ec:2a:60:40:af:75:9b:20:8d:70:e5:e0:
                    bd:3a:fe:0d:de:97:b0:02:5b:91:5c:db:18:5d:64:
                    b7:11:ea:02:46:b0:9f:75:f7:07:1a:f0:c4:9f:14:
                    0b:ee:44:9e:76:58:c9:39:3f:24:e0:d1:17:67:a5:
                    8a:53:f8:71:5e:50:9b:4d:3c:64:f6:3a:62:8f:0c:
                    14:26:77:4c:b1:bc:06:d5:19:35:48:b1:91:40:d8:
                    86:c5:d3:a2:38:9e:17:9f:e9:7e:9f:e8:ea:cd:cf:
                    d3:1c:69:a4:d7:0a:34:3b:dd:1a:71:53:5b:b6:15:
                    13:28:42:11:8b:10:15:c4:eb:5d:13:66:e6:39:f4:
                    bb:c4:f9:42:91:3c:c3:b4:ad:d9:88:af:ec:6c:97:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:93:EA:B4:6E:03:96:DE:67:94:8A:22:5F:AB:70:65:1C:C0:04:50
            X509v3 Authority Key Identifier:
                keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:d1:2b:29:4d:49:21:44:bb:20:17:11:33:cd:9d:0b:0c:
         c5:fa:23:46:09:6b:17:34:33:6a:0a:23:03:0b:a6:07:dd:d9:
         3f:61:5b:f8:c1:c8:05:cc:b4:68:a7:32:e1:89:9f:60:1f:df:
         ac:8b:f2:d7:0a:e9:d8:36:a3:42:2b:df:dd:11:ad:b4:7b:81:
         cd:41:a4:bd:00:fe:01:cf:f5:07:0d:a7:80:bc:23:cf:35:31:
         34:19:2a:d0:a7:f0:04:b7:66:ec:9f:b3:c5:4b:a4:b2:35:5c:
         6d:66:bc:a5:a2:24:bd:f6:da:fc:df:4b:94:c3:dd:c4:93:e6:
         e2:ab:23:1d:0a:1f:08:0c:e8:b0:b4:41:61:8b:5b:04:41:aa:
         39:68:43:b4:4a:c2:eb:34:48:73:e0:00:40:4f:23:3b:df:ce:
         2c:f3:1d:6a:9c:2b:7c:0f:1e:95:15:78:99:73:64:49:0e:9f:
         5d:d7:29:c8:a2:bd:7c:15:b5:69:a6:48:63:ec:14:85:7a:30:
         b6:68:d1:bb:83:ad:7a:f1:3e:70:d8:76:de:f9:14:86:24:de:
         a6:46:49:b6:04:9d:64:83:09:0a:43:a4:88:64:35:aa:92:32:
         e6:25:e9:95:b2:81:80:21:fe:bc:11:c5:99:81:0d:d0:e2:a7:
         11:79:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:28 2026 by rpki-client