Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
File:                     a7IptQZEL6BIpPedPLRPoOAEeUE.mft (raw, json)
Hash identifier:          S4Fmotk1gSL3E0yYRkec2MUru9rVuR/L4RAtnMQIQiU=
Subject key identifier:   ED:1B:BA:40:35:78:EE:D0:27:C7:12:77:3B:D4:70:B5:3B:52:71:1D
Authority key identifier: 6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41
Certificate issuer:       /CN=A913C928/serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
Certificate serial:       07D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
Manifest number:          07D1
Signing time:             Sat 28 Feb 2026 21:45:06 +0000
Manifest this update:     Sat 28 Feb 2026 21:45:06 +0000
Manifest next update:     Sat 07 Mar 2026 21:45:06 +0000
Files and hashes:         1: a7IptQZEL6BIpPedPLRPoOAEeUE.crl (hash: LeyhhN+A/Imo3Wcg02YDcodhJECJBIoafjUmvecI8Lw=)
                          2: 08D6D5122A4511EBA2903755C4F9AE02.roa (hash: 7o4P3vtlCJSZChEd9yTjb1fUJNgodw+OBkk/aDVHt1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl
                          rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008 (0x7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C928, serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
        Validity
            Not Before: Feb 28 21:45:06 2026 GMT
            Not After : Mar  7 21:45:06 2026 GMT
        Subject: CN=69a361e2-56fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:8f:dd:44:90:a0:16:b9:04:84:8f:79:28:
                    2e:50:33:75:3b:07:2a:7a:d5:67:57:b6:de:26:c3:
                    f4:8c:d7:2b:6c:d2:d2:c7:18:f0:ae:66:d8:2c:a5:
                    71:e5:08:54:25:c8:b6:67:83:c6:18:cb:ec:4a:b3:
                    8b:d8:a0:15:d7:b2:55:de:07:f4:97:99:ec:c9:03:
                    83:a8:9b:22:6d:47:c1:29:a9:57:aa:17:94:b2:e5:
                    62:86:02:cf:be:79:eb:ab:5c:1b:e4:f4:a6:a8:6d:
                    ad:87:4c:70:d7:78:4f:fa:1d:76:25:cc:3e:d9:2a:
                    62:7c:e9:4c:11:8e:e9:90:75:70:d3:70:47:be:54:
                    db:2a:52:24:91:bd:d2:56:88:51:00:8c:09:79:27:
                    e3:fa:e7:56:b1:45:35:f4:c1:1f:d7:94:0a:19:24:
                    93:ae:aa:1b:79:d4:0d:3c:4c:26:1b:47:6c:e5:65:
                    43:c1:29:66:35:d8:43:18:03:49:59:4d:1a:c7:8c:
                    86:60:80:69:ee:19:1a:93:8b:5d:87:42:db:c5:03:
                    85:04:30:c2:f3:b1:2d:32:d7:ed:f0:73:bc:18:b1:
                    f9:22:7d:0a:15:ae:a5:6c:2b:0b:3d:89:4a:ab:f8:
                    e4:f5:7e:dc:50:3b:27:82:92:06:cb:65:9a:af:85:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1B:BA:40:35:78:EE:D0:27:C7:12:77:3B:D4:70:B5:3B:52:71:1D
            X509v3 Authority Key Identifier:
                keyid:6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9e:93:98:2a:fd:3f:b3:37:9f:80:1d:4b:b0:41:6c:64:5d:
         16:c9:c7:4f:d7:1f:55:22:49:e6:61:64:f8:0f:4e:1a:10:45:
         66:2d:b2:62:9f:1a:e9:39:cd:57:6f:73:89:8e:0c:9b:38:06:
         17:0f:9b:0e:8a:dd:89:f5:74:f8:84:99:e0:7e:1c:b4:d1:4a:
         11:12:61:80:49:b7:c4:e8:dc:5a:98:7e:8f:5b:ac:e4:85:0a:
         41:c7:7f:35:c2:4b:0c:f9:e4:9c:23:a0:2f:7e:ab:3a:c5:2b:
         f3:12:66:df:7c:e1:af:ef:67:ba:ae:db:26:bf:5e:ee:73:00:
         d7:5c:bb:7d:4d:a0:8b:08:dc:21:f5:bd:6b:e9:e7:cd:a4:87:
         9a:38:70:48:e5:de:dc:35:cd:d8:81:f8:ec:35:c5:ff:e2:34:
         f1:a0:61:c0:83:2c:8a:b7:e3:5a:bd:19:4f:8d:2b:2b:44:bc:
         6a:da:7b:9b:52:1d:fe:6a:3b:f2:b3:a6:43:c7:f7:9e:80:4d:
         d3:ba:86:61:34:86:7f:73:c8:8e:41:ad:ea:d2:7b:11:91:d9:
         5c:5e:54:57:41:4d:a3:c6:52:27:64:74:bf:7d:96:e5:bf:5d:
         d2:87:c9:6a:3d:c2:4c:0f:e4:98:9b:da:bc:07:c1:0b:6e:6f:
         36:72:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:13 2026 by rpki-client