Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
File:                     7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json)
Hash identifier:          hULIRlgdj0wk83XvsxCJ/lmQftQMMCTvMFZjmBeRXkQ=
Subject key identifier:   C3:57:12:80:47:30:DD:66:F4:CA:42:45:8A:14:35:D5:98:B6:0F:85
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Certificate issuer:       /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial:       0AF3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
Manifest number:          0ADC
Signing time:             Sat 28 Feb 2026 19:41:05 +0000
Manifest this update:     Sat 28 Feb 2026 19:41:04 +0000
Manifest next update:     Sat 07 Mar 2026 19:41:04 +0000
Files and hashes:         1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: SWZH1hLapYJUW+LAebv+UqYn77lHpCv0wx23ENKJWQk=)
                          2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: vlc/HMnT+dmU0EXqzRPiNqLBWzJ/ff9nnfD+i3qECck=)
                          3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: bdTMJLj7GNbxl+9xXhg20ezjxC2h7OyoShduX99tNWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
                          rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2803 (0xaf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
        Validity
            Not Before: Feb 28 19:41:04 2026 GMT
            Not After : Mar  7 19:41:04 2026 GMT
        Subject: CN=69a344d0-b141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:55:be:ab:2b:8f:ee:67:c3:d9:01:6c:7e:0b:
                    68:0d:b9:b8:a7:8c:27:18:dc:43:86:79:b2:bb:75:
                    24:76:03:54:a0:78:93:06:05:3c:1e:f2:cc:1c:00:
                    38:27:cd:65:04:05:d6:4f:6b:ae:ec:33:b6:8c:1c:
                    93:2a:ba:e6:ec:26:2b:0a:a7:20:2b:8c:ef:e0:18:
                    46:48:f2:bb:47:3d:bc:30:0f:ea:15:73:e0:a6:db:
                    d7:79:36:43:a0:da:cd:d4:82:91:f2:6f:68:6c:56:
                    05:e1:67:5f:c1:f6:fa:bd:b7:3b:2e:fa:96:5d:89:
                    7f:cc:02:66:bd:00:5e:07:8d:51:7d:74:6c:2a:af:
                    81:67:3f:17:b8:2f:7a:6a:c1:61:e3:a0:b4:5b:e3:
                    68:fb:bb:32:47:cd:f2:21:a0:ad:6b:65:53:33:69:
                    65:f8:61:9c:c1:d8:c2:b3:b9:6c:f6:99:4b:08:5c:
                    04:bf:97:da:20:39:a4:c1:ac:d0:cf:19:22:47:87:
                    e0:bd:fe:4f:7e:0b:84:78:fd:33:1e:62:f4:ce:ee:
                    ea:24:85:10:e0:29:14:11:95:96:68:d5:b8:94:b6:
                    2a:fd:e3:3d:cd:7d:80:d7:f5:17:0a:17:e2:6c:f0:
                    38:de:13:25:92:a0:4d:81:a3:e9:eb:82:c7:6f:f5:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:57:12:80:47:30:DD:66:F4:CA:42:45:8A:14:35:D5:98:B6:0F:85
            X509v3 Authority Key Identifier:
                keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d3:87:c2:36:28:42:d9:f5:6d:b7:67:bc:6f:d2:fc:be:ee:
         63:f3:1f:26:cb:46:19:4b:f5:0f:b4:ab:2b:28:6f:77:79:fb:
         74:4e:27:7b:54:99:fc:31:29:ef:22:8d:f7:32:7b:8b:d6:50:
         04:4c:21:fd:cd:57:c0:bf:71:78:cd:14:c2:f7:71:ca:52:36:
         85:41:c9:cf:d1:2f:70:6e:f5:41:14:2e:d8:f0:23:dd:bb:fb:
         db:45:9e:3a:34:19:41:02:00:3f:65:bd:95:54:1f:f9:a9:55:
         bc:53:ea:d5:fc:42:cc:68:4a:32:f8:ee:31:4d:f1:36:de:8a:
         1f:c4:8f:95:ec:40:b5:15:c9:09:c2:f7:51:42:5c:33:f4:5e:
         9f:b1:a9:b4:83:9e:d8:0c:7e:5c:d6:e9:7e:34:ad:a4:b0:43:
         96:4a:ad:9c:7a:e5:15:d8:51:c0:9f:f5:04:da:b6:ff:f8:4b:
         cd:d3:4f:d9:93:82:4b:8a:6b:62:c3:25:84:ef:32:a4:be:f2:
         63:3b:c2:2b:19:36:9f:55:46:dd:9e:0e:b8:1a:8f:b5:e2:83:
         83:6f:88:25:24:31:13:e6:68:79:86:18:1a:22:4f:ac:b1:5e:
         b1:8a:10:47:1e:2f:d3:70:aa:a7:bd:53:f8:b7:2b:2d:8f:21:
         8b:05:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:52 2026 by rpki-client