Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
File:                     P3MTY_5HQEYaWciPp2e9ijbsDfY.mft (raw, json)
Hash identifier:          k971QuwpGsez1Vl9hs+VWjdmZqxONjfm4LYqSR1KtYU=
Subject key identifier:   1A:99:33:85:1F:DA:A7:26:44:6B:61:27:68:9D:7C:3C:85:51:CC:CC
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Certificate issuer:       /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial:       07C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
Manifest number:          07AD
Signing time:             Mon 02 Mar 2026 00:39:31 +0000
Manifest this update:     Mon 02 Mar 2026 00:39:29 +0000
Manifest next update:     Mon 09 Mar 2026 00:39:29 +0000
Files and hashes:         1: P3MTY_5HQEYaWciPp2e9ijbsDfY.crl (hash: mFaNZcqJpyGcS/pukBmdnhJlWwqAnWackOKeqaUEC5M=)
                          2: 3576B330ABFA11F0A2E07C6AC4F9AE02.roa (hash: 0w3HfHH7UREiRpb2xtmCSCZqE3QWtDjCuYCvHhtDjnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
                          rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1986 (0x7c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
        Validity
            Not Before: Mar  2 00:39:29 2026 GMT
            Not After : Mar  9 00:39:29 2026 GMT
        Subject: CN=69a4dc43-bb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:42:aa:9c:5c:61:3c:f0:a4:ce:07:7f:63:
                    f6:80:31:69:cf:12:9e:23:9b:92:d9:85:70:ac:a0:
                    a2:36:18:77:80:6f:a2:2e:49:4c:8d:d8:dc:31:1a:
                    5e:59:00:92:69:a5:59:51:83:84:6b:77:86:90:80:
                    6b:11:57:b3:95:c9:46:0d:dc:b8:47:5b:c8:1e:16:
                    d4:f4:5b:9d:d3:c3:0b:63:85:03:76:70:3f:30:2a:
                    ee:05:2d:e9:11:1d:2d:b7:62:f9:34:7c:69:c8:cc:
                    3a:25:03:7d:73:e6:f9:a4:77:2b:ba:cc:f9:a4:a4:
                    9e:74:88:3f:5b:c3:9a:44:7d:0f:01:a8:9e:d8:f4:
                    da:a4:1c:8c:a3:15:f7:1c:66:4d:8b:c8:a9:ad:41:
                    98:7a:fc:c4:ac:c0:c4:08:0f:d9:57:78:05:84:2d:
                    26:68:ee:f8:8f:58:c9:29:ab:40:74:d0:cd:0f:5e:
                    21:b2:f6:82:41:15:03:8d:10:fc:d1:bb:7b:c4:36:
                    e7:40:6f:14:69:74:9e:00:8d:14:70:34:5f:97:7a:
                    75:1b:e2:70:c9:74:4c:5d:e6:b2:e3:57:3a:45:76:
                    9c:7f:13:a0:8c:d1:57:b9:9a:f2:0a:92:56:c2:ea:
                    6a:4b:cd:71:ab:ed:82:45:95:85:36:c2:4d:45:61:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:99:33:85:1F:DA:A7:26:44:6B:61:27:68:9D:7C:3C:85:51:CC:CC
            X509v3 Authority Key Identifier:
                keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d3:37:4a:3c:ce:30:72:da:34:23:36:f7:38:35:66:90:db:
         83:34:ac:fe:3f:aa:98:18:69:d0:07:b2:97:02:10:2e:f9:1f:
         e8:61:55:17:47:5d:87:f8:0d:77:b2:6c:81:69:48:13:d9:b0:
         c3:a7:1f:7b:6c:56:27:01:b9:a1:35:62:b1:2a:34:82:88:23:
         ff:d4:d4:4c:7f:12:23:5e:1b:c9:ea:66:bc:cf:4d:9a:a3:ca:
         b3:a6:53:f3:ef:d2:9f:c2:1d:fb:2a:58:70:69:00:fb:ac:97:
         48:e2:eb:e9:1c:f2:1e:7f:8e:be:d0:da:32:8c:3d:3a:d7:82:
         85:d5:9c:61:70:45:17:56:7b:db:12:8c:d8:96:4d:95:b0:5d:
         dd:2f:4b:05:88:1f:12:94:ce:5a:5b:49:60:de:04:1c:f2:53:
         06:76:18:bc:f6:c5:a3:5e:8e:7d:37:54:60:6d:23:d9:5f:b7:
         3f:5b:43:1d:8d:cc:bd:93:f5:ed:36:4a:bf:e3:0b:2d:5b:be:
         1f:d0:3e:f7:a2:27:ca:7a:c2:e2:1a:88:ef:0e:1f:5b:f1:77:
         a9:2a:44:bf:ea:7b:0c:f8:2a:ed:60:d4:87:4e:4e:cf:17:99:
         b2:a2:df:50:0a:29:e7:3c:e1:dc:fc:e7:5f:4a:0b:65:2a:a7:
         fa:24:85:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:49:20 2026 by rpki-client