Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File:                     Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier:          fTkvh4ow97u65C1mIIFZTE+4t8Mb+ndMeMvIRhr4ZyA=
Subject key identifier:   62:16:1D:16:E3:72:EA:02:AA:5A:00:BF:94:2C:A0:7B:14:C0:88:98
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer:       /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial:       07D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number:          07C6
Signing time:             Sun 01 Mar 2026 23:45:55 +0000
Manifest this update:     Sun 01 Mar 2026 23:45:54 +0000
Manifest next update:     Sun 08 Mar 2026 23:45:54 +0000
Files and hashes:         1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: Ej1L6742fwbHqSoW9w07T88jkOCX1Jzqfl24dpETM0o=)
                          2: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DvRNqYY5l6FpteItAXjTYDN+vegpciEIGblmsQkvg/A=)
                          3: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: fwi+10rELM2ReD7ENwWww/f80u0EgCVFyBC8s9Jx27U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
                          rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
        Validity
            Not Before: Mar  1 23:45:54 2026 GMT
            Not After : Mar  8 23:45:54 2026 GMT
        Subject: CN=69a4cfb3-72a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6b:56:63:cc:24:f1:0e:a2:7d:aa:6d:f9:02:
                    99:7d:ba:15:a0:2b:dc:c1:b4:3a:ae:69:d0:95:2b:
                    88:c4:45:aa:2e:56:72:f6:94:1a:62:dd:e5:ce:e6:
                    5e:4d:65:54:cb:a9:a2:51:af:9b:b2:7c:6d:8d:d7:
                    09:8d:ec:00:87:c2:5a:2f:54:e8:75:fb:11:ff:e4:
                    a8:dd:36:f8:36:a2:c7:c8:64:11:55:00:80:49:45:
                    77:2f:75:a8:56:d3:94:a9:0f:ca:3c:40:6a:0f:1c:
                    21:b2:b4:34:7a:21:06:c7:62:50:35:64:49:7f:2a:
                    2e:fa:d2:04:05:87:a6:9c:a6:76:40:bf:b8:5f:c1:
                    c0:a8:85:60:f8:3f:ad:20:44:04:d0:07:59:4c:65:
                    0e:bf:d4:d4:80:7f:44:fa:cc:c9:f6:96:1c:1d:61:
                    7d:2c:98:9c:01:f4:e4:ec:c4:7e:a8:66:5f:8f:3d:
                    e0:11:04:31:36:10:07:67:f5:fc:b4:9f:07:43:12:
                    47:df:8d:3b:69:82:27:fa:5e:ec:83:ab:83:f3:c1:
                    bc:e9:92:4e:01:1d:82:85:90:f3:5c:86:a0:5f:12:
                    5c:ab:e6:ae:6e:17:24:33:98:ab:0d:8f:de:1b:27:
                    ea:44:97:6b:72:22:1c:63:04:04:3e:a0:72:ba:7b:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:16:1D:16:E3:72:EA:02:AA:5A:00:BF:94:2C:A0:7B:14:C0:88:98
            X509v3 Authority Key Identifier:
                keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:69:3f:05:e1:41:1e:8f:fb:75:d7:21:fc:b1:b9:46:c8:c2:
         a1:c9:06:a8:32:c0:37:ce:e6:f2:09:d3:82:33:89:7f:06:d9:
         1d:96:78:44:08:2b:eb:d3:65:80:22:b9:15:d7:9a:26:86:f6:
         bb:c0:6b:af:8b:78:8d:d5:cb:0e:1f:df:16:c4:53:b4:ef:f1:
         cd:87:62:51:32:cd:4e:78:b4:11:5d:60:bd:8c:10:c0:d4:5d:
         87:56:7a:83:08:dc:ab:d3:7b:10:ce:6d:29:ac:de:38:b9:72:
         12:16:57:14:56:83:a4:18:41:8c:6b:39:cc:07:2b:5a:31:e9:
         34:c2:2c:54:23:de:7a:7b:89:3e:35:81:a6:7b:1b:49:df:9c:
         8b:94:69:71:7c:05:a6:01:14:51:d4:16:0c:da:a5:40:15:92:
         12:09:7f:ef:c1:ea:fb:89:38:62:6a:5c:80:5d:ca:c3:ee:a8:
         81:4d:b9:3d:12:32:7b:04:3c:fa:e8:9b:a7:84:94:20:d0:f8:
         d1:38:4b:73:c2:38:82:cb:96:5c:90:5f:18:a1:80:92:b5:40:
         d8:3d:01:6b:72:44:7d:0a:7a:08:a3:18:7b:56:24:fc:7e:bd:
         1d:75:57:eb:18:3a:b4:cf:3c:50:7a:41:6e:d3:70:eb:c0:e0:
         ad:c9:76:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkU1MDExMTAvBgNVBAUTKDQzQjM5QzhGQTMzNDZENjMxOUVBNDlCQzVBMDY3RUVG
RTBEMzQ0NkQwHhcNMjYwMzAxMjM0NTU0WhcNMjYwMzA4MjM0NTU0WjAYMRYwFAYD
VQQDEw02OWE0Y2ZiMy03MmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7WtWY8wk8Q6ifapt+QKZfboVoCvcwbQ6rmnQlSuIxEWqLlZy9pQaYt3lzuZe
TWVUy6miUa+bsnxtjdcJjewAh8JaL1TodfsR/+So3Tb4NqLHyGQRVQCASUV3L3Wo
VtOUqQ/KPEBqDxwhsrQ0eiEGx2JQNWRJfyou+tIEBYemnKZ2QL+4X8HAqIVg+D+t
IEQE0AdZTGUOv9TUgH9E+szJ9pYcHWF9LJicAfTk7MR+qGZfjz3gEQQxNhAHZ/X8
tJ8HQxJH3407aYIn+l7sg6uD88G86ZJOAR2ChZDzXIagXxJcq+aubhckM5irDY/e
GyfqRJdrciIcYwQEPqByunvIFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIWHRbj
cuoCqloAv5QsoHsUwIiYMB8GA1UdIwQYMBaAFEOznI+jNG1jGepJvFoGfu/g00Rt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTUwMS8yQjJEODgwNDJG
QjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJXTVo2a204V2daLTctRFRS
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1E3T2NqNk0wYldNWjZrbThXZ1otNy1EVFJHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTUwMS8yQjJEODgwNDJGQjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJX
TVo2a204V2daLTctRFRSRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABGk/BeFBHo/7ddch/LG5RsjCockGqDLAN87m8gnTgjOJfwbZHZZ4RAgr69Nl
gCK5FdeaJob2u8Brr4t4jdXLDh/fFsRTtO/xzYdiUTLNTni0EV1gvYwQwNRdh1Z6
gwjcq9N7EM5tKazeOLlyEhZXFFaDpBhBjGs5zAcrWjHpNMIsVCPeenuJPjWBpnsb
Sd+ci5RpcXwFpgEUUdQWDNqlQBWSEgl/78Hq+4k4YmpcgF3Kw+6ogU25PRIyewQ8
+uibp4SUIND40ThLc8I4gsuWXJBfGKGAkrVA2D0Ba3JEfQp6CKMYe1Yk/H69HXVX
6xg6tM88UHpBbtNw68Dgrcl2iw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:43 2026 by rpki-client