Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
File:                     ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json)
Hash identifier:          fwY8YCsCOen+NXW1GPN1uAYArQYo0yCInbPQA5IQ6Os=
Subject key identifier:   A1:CC:9A:A8:84:C9:39:AD:84:D7:09:CC:E0:5F:DA:26:D8:32:7D:B9
Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
Certificate issuer:       /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
Manifest number:          7E
Signing time:             Sun 01 Mar 2026 09:04:23 +0000
Manifest this update:     Sun 01 Mar 2026 09:04:22 +0000
Manifest next update:     Sun 08 Mar 2026 09:04:22 +0000
Files and hashes:         1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: Gz6EbZc85hGSxfHYi5HotgA8HgyQsfTRVZVNGOnfRFI=)
                          2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: Apt167cImQ9bznd/mrI1RjZ6uVpwBwSLJP+YkmjGc00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
                          rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
        Validity
            Not Before: Mar  1 09:04:22 2026 GMT
            Not After : Mar  8 09:04:22 2026 GMT
        Subject: CN=69a40116-cdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4f:50:b4:f7:a7:15:c2:1a:a6:0e:95:af:7e:
                    79:06:f8:a7:86:e8:db:be:8f:e3:42:bb:68:91:9e:
                    ae:6b:cd:3a:34:b1:8a:2c:fc:0c:99:19:30:f5:60:
                    ba:64:ef:b1:f4:2b:47:d1:67:00:bb:28:e0:f5:11:
                    9b:c8:57:99:58:76:dd:fd:b8:9a:07:4d:ff:9a:3e:
                    84:0c:22:23:2b:23:97:4d:b5:17:cb:4d:46:45:43:
                    0b:de:9e:47:6d:36:d1:77:14:09:83:26:27:5e:59:
                    9e:c0:ad:f1:c9:46:8e:05:69:d8:1c:bf:d3:5a:54:
                    82:cb:63:35:ab:d1:d7:0a:cc:17:dd:fb:93:8a:ab:
                    7b:dd:73:60:af:e0:18:e3:b9:44:d0:83:96:b8:11:
                    d5:79:4b:d1:47:05:8e:5e:53:8c:90:4b:db:33:74:
                    77:ec:ae:82:c2:21:13:1e:c3:fd:82:ed:86:6f:b6:
                    46:cb:9e:7c:2f:cf:a2:af:d4:05:03:9d:6c:78:c4:
                    64:e1:d5:f9:8a:48:df:4b:57:f6:f2:7b:0b:85:e8:
                    2f:2b:22:c6:00:10:84:4b:31:3d:15:c8:d3:97:b2:
                    06:c5:f6:4e:f0:3a:6c:c3:82:85:bd:1e:83:db:b9:
                    47:83:ac:3e:62:bd:cd:d1:9c:20:ad:86:b9:89:18:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CC:9A:A8:84:C9:39:AD:84:D7:09:CC:E0:5F:DA:26:D8:32:7D:B9
            X509v3 Authority Key Identifier:
                keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1e:1f:7f:b7:08:9b:78:61:0b:97:ef:e0:ee:02:ab:e4:cb:
         2c:17:9b:32:c6:8c:8e:48:b1:fd:79:48:de:03:49:c5:7d:33:
         1b:3f:b0:05:67:a7:da:20:f3:f2:51:6f:08:e4:20:3a:5f:ca:
         3c:8b:35:07:e6:2b:f0:0a:c9:8d:da:5f:ba:0d:ab:f0:c0:53:
         c1:cc:12:fb:b2:c7:ff:70:ae:e6:38:ed:5d:bb:41:35:ec:68:
         63:35:08:ac:14:a5:6d:0a:1f:91:82:2c:16:c2:f4:72:5c:63:
         01:22:65:a2:fd:8c:0d:fd:62:b4:d1:96:a9:41:db:ef:22:6a:
         bc:6d:96:5c:aa:af:c9:53:96:e2:f6:5d:18:5d:78:89:d5:cb:
         41:f3:8e:48:95:e2:8f:2d:7e:95:09:1e:f4:02:0d:78:c3:75:
         9f:3b:c0:24:11:7c:ea:27:cc:96:85:fc:7b:11:d6:a0:69:f7:
         47:03:22:2b:af:eb:fc:30:73:f1:ac:f1:ca:54:4d:3f:d6:04:
         51:0b:bb:ca:10:5b:44:5b:24:18:e3:6e:06:af:48:5a:76:77:
         89:b9:80:6e:71:1d:46:0b:d8:06:c4:f0:3b:fd:83:fc:21:f1:
         d6:de:16:94:29:74:a3:7d:5d:18:06:81:c9:9b:ef:13:61:02:
         ad:c8:01:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZDNUMxMTAvBgNVBAUTKDcyREFCN0NFQkU4QTdGMjc4OERFNzgyRURBNzAxRTQ2
N0Q4Qzc4REUwHhcNMjYwMzAxMDkwNDIyWhcNMjYwMzA4MDkwNDIyWjAYMRYwFAYD
VQQDEw02OWE0MDExNi1jZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8E9QtPenFcIapg6Vr355Bvinhujbvo/jQrtokZ6ua806NLGKLPwMmRkw9WC6
ZO+x9CtH0WcAuyjg9RGbyFeZWHbd/biaB03/mj6EDCIjKyOXTbUXy01GRUML3p5H
bTbRdxQJgyYnXlmewK3xyUaOBWnYHL/TWlSCy2M1q9HXCswX3fuTiqt73XNgr+AY
47lE0IOWuBHVeUvRRwWOXlOMkEvbM3R37K6CwiETHsP9gu2Gb7ZGy558L8+ir9QF
A51seMRk4dX5ikjfS1f28nsLhegvKyLGABCESzE9FcjTl7IGxfZO8Dpsw4KFvR6D
27lHg6w+Yr3N0ZwgrYa5iRhm0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHMmqiE
yTmthNcJzOBf2ibYMn25MB8GA1UdIwQYMBaAFHLat86+in8niN54LtpwHkZ9jHje
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkM1Qy8zNjM3ODhFQzVD
QjAxMUYwQjc0NDI1MzlDNEY5QUUwMi9jdHEzenI2S2Z5ZUkzbmd1Mm5BZVJuMk1l
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N0cTN6cjZLZnllSTNuZ3UybkFlUm4yTWVONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkM1Qy8zNjM3ODhFQzVDQjAxMUYwQjc0NDI1MzlDNEY5QUUwMi9jdHEzenI2S2Z5
ZUkzbmd1Mm5BZVJuMk1lTjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJB4ff7cIm3hhC5fv4O4Cq+TLLBebMsaMjkix/XlI3gNJxX0zGz+wBWen2iDz
8lFvCOQgOl/KPIs1B+Yr8ArJjdpfug2r8MBTwcwS+7LH/3Cu5jjtXbtBNexoYzUI
rBSlbQofkYIsFsL0clxjASJlov2MDf1itNGWqUHb7yJqvG2WXKqvyVOW4vZdGF14
idXLQfOOSJXijy1+lQke9AINeMN1nzvAJBF86ifMloX8exHWoGn3RwMiK6/r/DBz
8azxylRNP9YEUQu7yhBbRFskGONuBq9IWnZ3ibmAbnEdRgvYBsTwO/2D/CHx1t4W
lCl0o31dGAaByZvvE2ECrcgBXA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:43:45 2026 by rpki-client