Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
File:                     7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json)
Hash identifier:          DMvxDuA12r89p7sK7ftcoiqe9BUIL8lNOb6UsZ5z6Ow=
Subject key identifier:   79:94:0F:69:40:16:A0:60:E7:70:5D:B2:E7:36:F1:43:21:DF:64:0C
Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
Certificate issuer:       /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Certificate serial:       3516
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
Manifest number:          3514
Signing time:             Sat 28 Feb 2026 14:32:49 +0000
Manifest this update:     Sat 28 Feb 2026 14:32:49 +0000
Manifest next update:     Sat 07 Mar 2026 14:32:49 +0000
Files and hashes:         1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: nD+P3ef0W3/60M9N5UovhRZaFdnO08xIIySPgoHWJKg=)
                          2: 33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa (hash: 9Org1Yp90cJX1JMdxmBYNLmcErmxdT0s7tIjIepxjhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
                          rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13590 (0x3516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
        Validity
            Not Before: Feb 28 14:32:49 2026 GMT
            Not After : Mar  7 14:32:49 2026 GMT
        Subject: CN=69a2fc91-91f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:e7:52:76:07:72:55:63:4f:a7:0b:9e:39:
                    4c:0a:e3:22:fa:75:46:03:c3:fa:ed:0b:cc:3d:92:
                    93:10:cc:cd:0c:a4:3c:28:83:1b:36:a1:78:bb:f1:
                    1d:5a:db:26:99:78:cc:1f:2b:97:69:ae:ad:a8:a3:
                    1a:99:3b:b4:81:38:d3:67:f1:c9:87:70:e3:d7:0a:
                    2e:9b:b4:31:85:5f:8e:a1:17:dd:2d:a6:bc:18:fa:
                    51:69:45:6f:af:fa:c0:97:c8:76:0d:54:1a:9a:48:
                    fd:6c:16:bc:cd:0d:f1:46:a7:06:12:44:70:20:c6:
                    3f:c0:e3:0b:70:85:73:a5:1f:bb:90:c3:21:ca:1a:
                    12:12:48:9a:18:e3:9d:b8:a8:40:40:f4:e6:a9:e8:
                    da:59:84:87:66:e9:f3:ca:cf:a7:10:81:c2:ea:83:
                    81:78:33:c5:ea:a0:11:d2:4d:3e:44:a9:32:5a:e8:
                    09:f6:79:19:41:32:5e:02:4e:a6:b2:50:d2:16:91:
                    3d:74:5f:2c:f1:3f:9c:fd:a1:54:90:4c:94:c2:ac:
                    90:72:9c:4d:67:cd:5a:d5:3a:0f:29:ff:cb:f5:95:
                    54:68:93:b1:60:ff:b6:b3:bf:1e:2a:c1:f9:de:14:
                    11:cc:9b:30:17:3d:c9:9f:bc:c9:30:8b:60:13:0f:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:0F:69:40:16:A0:60:E7:70:5D:B2:E7:36:F1:43:21:DF:64:0C
            X509v3 Authority Key Identifier:
                keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:3b:5a:b9:38:3d:32:9e:9c:7f:47:f6:09:af:50:8c:2b:
         96:f5:0a:7e:6e:78:f6:a7:04:b3:64:3c:ed:d7:2c:57:b2:f1:
         26:c8:ff:d0:8d:16:4e:4f:aa:46:69:68:54:26:04:30:b7:6c:
         f2:49:d7:eb:ea:cc:71:54:54:89:b9:8b:20:3b:85:19:6d:b3:
         44:e8:ef:8c:69:01:b8:0e:c2:60:de:da:72:69:7a:8b:c3:f5:
         4a:14:06:55:35:35:9d:af:49:af:35:3e:3e:29:ae:9e:4d:ea:
         55:95:d0:e7:14:2d:2f:3d:da:40:79:49:34:42:39:60:8d:9d:
         48:11:e6:92:ff:e9:dd:b8:d9:c5:0c:d2:3a:f2:9f:f4:38:ff:
         c2:9f:27:9a:f9:92:e1:cd:6b:a4:3d:c2:0b:c3:c2:c9:71:d4:
         ff:69:ed:02:92:ce:55:13:e4:35:63:31:7b:1c:df:4f:68:af:
         5b:66:e1:e1:6d:e0:64:7d:f8:d0:3b:82:73:70:74:f0:12:47:
         cc:9b:fa:93:1a:b6:c1:20:46:3a:6a:7e:16:87:ba:e6:a7:8a:
         ba:a5:5b:cd:82:7d:56:08:40:86:31:04:fa:15:01:cf:1a:40:
         cf:6f:67:e0:9f:ce:af:16:89:8f:6e:e1:42:82:e8:29:f9:f0:
         f0:ea:31:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:43 2026 by rpki-client