Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
File:                     7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json)
Hash identifier:          IjH5KOHH0ox01BF/oc5mE+piqxug00PsBgmS2Ch41ek=
Subject key identifier:   49:EA:85:12:17:19:A7:E1:2B:84:1B:1E:1B:A1:12:F8:49:00:9E:05
Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Certificate issuer:       /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
Manifest number:          013D
Signing time:             Sun 01 Mar 2026 06:20:27 +0000
Manifest this update:     Sun 01 Mar 2026 06:20:26 +0000
Manifest next update:     Sun 08 Mar 2026 06:20:26 +0000
Files and hashes:         1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: XkN5+FA5dSzLFGHADGehYaE+bac5M6g9kIsa+HE6TQc=)
                          2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: C2fRd73u6c1TtG+Y4uQ1VIRzkyl10Cv6nEiy2Ao9xH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
        Validity
            Not Before: Mar  1 06:20:26 2026 GMT
            Not After : Mar  8 06:20:26 2026 GMT
        Subject: CN=69a3daab-30b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:99:bb:00:56:75:82:b1:95:4a:6d:a7:31:
                    42:4f:76:4b:5f:c6:f1:21:ff:d7:f9:c7:1e:04:ba:
                    41:79:c6:7b:25:4b:ed:9b:40:a7:b8:9e:be:da:88:
                    9d:f6:3e:83:44:a8:0c:11:09:30:65:8a:ed:03:d4:
                    a9:0d:c6:08:8d:8d:c6:26:2a:96:72:dd:c3:a1:32:
                    12:5c:b0:c5:f4:76:a3:81:d2:fa:c5:05:c9:08:a8:
                    63:ed:86:28:16:66:c9:d9:c6:3d:bd:8f:07:54:80:
                    24:ed:71:c2:7e:48:e4:6d:c9:da:a3:0b:5c:23:bc:
                    42:f9:b1:c6:e6:3b:f7:5f:00:2b:c3:13:46:27:f5:
                    3d:38:59:c5:6d:7c:5d:8a:53:28:6a:e9:3f:9c:6b:
                    99:a0:f2:10:1c:67:f6:8a:c4:03:95:93:1e:19:30:
                    a0:23:c4:21:64:a6:30:ec:37:41:22:57:68:19:52:
                    8b:36:17:ba:7d:8f:d1:db:df:00:f3:a7:5e:b2:1b:
                    cb:e6:41:5a:2a:0e:84:7b:b8:a5:fb:19:e3:47:98:
                    9c:19:18:c0:2d:ea:82:cd:7b:d5:dc:4a:0b:6a:94:
                    31:98:8d:8a:94:c9:83:33:60:f4:27:a5:fa:b0:d6:
                    a5:2a:34:aa:94:bb:c8:9a:a9:42:98:06:95:78:34:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EA:85:12:17:19:A7:E1:2B:84:1B:1E:1B:A1:12:F8:49:00:9E:05
            X509v3 Authority Key Identifier:
                keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:7c:86:e4:93:d5:83:6d:09:f8:e0:11:49:5b:c6:e4:ad:8f:
         60:85:ae:80:4e:1a:14:dc:4f:de:82:1c:83:04:d8:f1:5e:c8:
         3a:dc:f3:59:2a:a4:f5:64:fa:19:a7:65:91:24:6a:57:a2:63:
         2e:93:21:c0:5e:b7:7a:86:f0:70:e7:12:c2:39:52:1d:7d:14:
         c7:3e:51:db:32:1f:17:91:6a:35:5a:3a:96:1c:9c:5d:e8:93:
         0a:b4:52:f3:60:41:ae:2e:62:ee:2e:ef:88:2d:20:64:5c:ab:
         85:fc:28:07:3c:9c:99:e2:4d:6e:fc:03:d2:80:df:6a:74:23:
         cd:87:de:38:9a:d3:11:2c:4c:0c:e7:55:59:8d:da:57:21:fc:
         fc:40:4d:c2:af:12:64:9b:84:66:cf:40:15:39:21:80:d3:a8:
         0e:d2:1e:cf:85:76:16:b2:e7:b9:85:89:27:02:5e:47:eb:90:
         86:84:b7:3a:fc:72:20:18:64:4c:20:f9:c3:95:5b:42:bc:6e:
         58:db:c5:f9:4a:1c:d1:e0:1d:27:7c:0b:cb:03:b2:4e:b2:58:
         92:aa:a2:b3:6e:61:21:8a:2a:c3:ef:cc:cd:f1:99:76:84:ee:
         5a:c8:6d:0a:4e:77:d5:a0:52:8f:43:d6:25:b3:3e:2b:d9:cc:
         c0:30:57:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRCNzIxMTAvBgNVBAUTKEVDRTJFMDE2MDE2MUI2Rjc3RkM3NDk3NkZBN0Q0NkMz
RTQyMzJERUYwHhcNMjYwMzAxMDYyMDI2WhcNMjYwMzA4MDYyMDI2WjAYMRYwFAYD
VQQDEw02OWEzZGFhYi0zMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzSKZuwBWdYKxlUptpzFCT3ZLX8bxIf/X+cceBLpBecZ7JUvtm0CnuJ6+2oid
9j6DRKgMEQkwZYrtA9SpDcYIjY3GJiqWct3DoTISXLDF9HajgdL6xQXJCKhj7YYo
FmbJ2cY9vY8HVIAk7XHCfkjkbcnaowtcI7xC+bHG5jv3XwArwxNGJ/U9OFnFbXxd
ilMoauk/nGuZoPIQHGf2isQDlZMeGTCgI8QhZKYw7DdBIldoGVKLNhe6fY/R298A
86deshvL5kFaKg6Ee7il+xnjR5icGRjALeqCzXvV3EoLapQxmI2KlMmDM2D0J6X6
sNalKjSqlLvImqlCmAaVeDRazQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnqhRIX
GafhK4QbHhuhEvhJAJ4FMB8GA1UdIwQYMBaAFOzi4BYBYbb3f8dJdvp9RsPkIy3v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi83RDk5QUNBQzMx
RjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2ZF94MGwyLW4xR3ctUWpM
ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdPTGdGZ0ZodHZkX3gwbDItbjFHdy1RakxlOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REI3Mi83RDk5QUNBQzMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2
ZF94MGwyLW4xR3ctUWpMZTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzHyG5JPVg20J+OARSVvG5K2PYIWugE4aFNxP3oIcgwTY8V7IOtzzWSqk9WT6
GadlkSRqV6JjLpMhwF63eobwcOcSwjlSHX0Uxz5R2zIfF5FqNVo6lhycXeiTCrRS
82BBri5i7i7viC0gZFyrhfwoBzycmeJNbvwD0oDfanQjzYfeOJrTESxMDOdVWY3a
VyH8/EBNwq8SZJuEZs9AFTkhgNOoDtIez4V2FrLnuYWJJwJeR+uQhoS3OvxyIBhk
TCD5w5VbQrxuWNvF+Uoc0eAdJ3wLywOyTrJYkqqis25hIYoqw+/MzfGZdoTuWsht
Ck531aBSj0PWJbM+K9nMwDBXEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:23 2026 by rpki-client