Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
File:                     7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json)
Hash identifier:          HGc6I+Li15ZGskOzP1KqaumFk0d9WbxVIzYvfjEwp5g=
Subject key identifier:   2C:C5:12:DA:A7:FC:E5:E2:ED:C8:2E:45:4C:F0:CB:BB:D6:0E:ED:5D
Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
Certificate issuer:       /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Certificate serial:       0A87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
Manifest number:          0A7F
Signing time:             Thu 16 Apr 2026 19:29:09 +0000
Manifest this update:     Thu 16 Apr 2026 19:29:08 +0000
Manifest next update:     Thu 23 Apr 2026 19:29:08 +0000
Files and hashes:         1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: 4rYxAlCNAWEHQOQ42NYLRrFmQA31d9LpVWFQpblJZuY=)
                          2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: WVlR+tSUZ1AvN53Y2A6vxB1Yc81sfAkpa/c8BW6Mvzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
                          rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2695 (0xa87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
        Validity
            Not Before: Apr 16 19:29:08 2026 GMT
            Not After : Apr 23 19:29:08 2026 GMT
        Subject: CN=69e13885-a772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:9e:0c:1c:65:cd:e9:62:04:35:9a:fd:e7:
                    25:96:5d:07:a1:95:26:c8:d9:02:b1:69:e7:94:57:
                    8f:18:06:ae:3c:bb:18:f8:00:4b:72:05:96:32:0e:
                    63:74:99:69:c0:c8:fa:0a:ac:26:fe:3f:63:2e:54:
                    55:9d:8d:c2:12:26:fe:26:be:b3:f3:d9:f1:bc:b0:
                    45:0b:7b:09:bf:c5:28:40:da:0f:8f:e4:ee:3b:e4:
                    7d:dc:95:96:7f:df:88:db:a3:25:49:9e:e1:f3:26:
                    40:9c:2d:4c:01:ca:1b:1f:c7:c4:e7:c1:24:bb:d7:
                    eb:b6:b1:ad:81:ea:b7:97:74:76:87:71:8e:3f:7f:
                    68:bb:f3:98:f3:8e:f3:0b:de:86:2f:4c:ac:31:0d:
                    2d:b1:75:33:a0:21:9c:4c:ac:58:66:1f:67:c2:14:
                    3c:14:59:0b:07:f5:6a:90:bb:43:60:75:0d:42:35:
                    6c:12:a0:77:cb:74:9e:04:9c:00:15:e2:b2:22:b1:
                    e5:e3:85:2c:32:05:b1:af:41:ff:38:d1:01:9b:71:
                    b2:5e:59:a6:86:98:4e:ce:da:a0:26:86:16:fb:d3:
                    7c:9f:b6:ed:94:5a:1e:29:3b:5d:ee:2b:c6:df:a6:
                    76:c9:f9:41:aa:16:cf:ff:07:de:ce:14:58:e7:f1:
                    88:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C5:12:DA:A7:FC:E5:E2:ED:C8:2E:45:4C:F0:CB:BB:D6:0E:ED:5D
            X509v3 Authority Key Identifier:
                keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ad:34:35:72:c3:73:8c:b9:6c:29:81:88:2a:8f:6e:99:60:
         f1:5b:fe:da:cd:9c:77:4c:40:5a:88:de:5d:56:58:34:ba:4a:
         cd:32:3b:75:00:ed:d0:51:3f:1e:5b:4f:95:60:28:3f:c4:fe:
         ad:a5:88:f3:d5:56:1a:f1:3e:97:78:59:85:06:46:f2:a6:b0:
         fb:40:0d:00:9d:4f:1e:ea:aa:fc:4e:df:89:3b:09:95:7f:09:
         2a:d1:d8:72:50:45:08:b7:30:bd:f0:84:17:30:55:06:d9:6a:
         e0:e0:53:aa:bd:bc:ae:b4:5e:87:52:1c:d2:ed:f4:e1:7b:91:
         72:4f:7f:32:de:fc:ca:0c:4f:7c:42:2c:e6:86:2e:78:21:01:
         56:a0:ea:16:3a:78:e6:4b:e6:73:c2:4d:70:8a:fa:36:86:b1:
         90:e3:8f:6b:76:4c:5b:2c:d1:c4:09:66:97:7d:f4:b4:b9:f9:
         32:3c:ca:57:ca:b2:66:b0:96:e5:c8:0e:fb:a4:09:e6:75:d1:
         4b:6e:c2:9f:07:39:6b:6c:ce:17:7c:39:ca:d6:78:30:b0:04:
         72:02:43:32:1c:52:3e:23:ad:b7:04:e1:2c:8e:f2:ce:59:92:
         22:f7:bc:59:68:57:60:aa:9a:f0:53:ff:72:13:e8:21:1f:6d:
         08:50:cc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:59 2026 by rpki-client