Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
File:                     7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json)
Hash identifier:          fSCvT+3e69JH7+zp42hzWSuJDYR1qXhoLuM2Air4W0A=
Subject key identifier:   C7:A6:4C:DD:42:33:FD:BF:A6:77:A0:85:02:53:AE:25:8B:5A:75:FD
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Certificate issuer:       /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial:       3585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
Manifest number:          3545
Signing time:             Sat 28 Feb 2026 14:52:29 +0000
Manifest this update:     Sat 28 Feb 2026 14:52:29 +0000
Manifest next update:     Sat 07 Mar 2026 14:52:29 +0000
Files and hashes:         1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: VaBoPqyrmQuLuP+EGCzk72t+BvG5+4ck+7fL2H90gng=)
                          2: F026CE74927411EDB020A481C4F9AE02.roa (hash: H8RC1kzYLfIY8woPP7gN4uej8dXsy7Jj+j5pLZXc/0Y=)
                          3: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: yis9VVzi8QRwExdYmq7nHD83ZqP/ATPYVFBUyxAnRF4=)
                          4: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: Q9FsVr4Yw7V8aGFlyUG59yrXi1olAITyZrt6BuH1uPI=)
                          5: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: LITexHYBGQfDHaFNmDEvh2QlPnF2urSCL7j/a8BM0Co=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
                          rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13701 (0x3585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
        Validity
            Not Before: Feb 28 14:52:29 2026 GMT
            Not After : Mar  7 14:52:29 2026 GMT
        Subject: CN=69a3012d-550d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:0c:ca:42:c5:67:c7:ca:20:cb:b5:70:82:
                    2e:b0:32:e2:44:72:5e:39:01:52:6d:55:50:3e:40:
                    6d:71:6a:d6:d1:d3:a0:56:6f:1d:46:e1:2a:26:a5:
                    2b:8e:ca:d4:7c:06:97:72:ca:1f:a9:70:ad:8e:09:
                    4e:58:cf:47:20:3f:b0:94:f2:01:72:67:9c:e4:17:
                    1c:fc:cf:26:be:75:33:f4:1d:71:ee:f9:5d:ba:9e:
                    54:32:2e:c2:51:d5:50:3c:62:8b:fb:77:aa:a8:9a:
                    11:d9:65:95:19:70:9e:34:74:d6:9c:f2:ad:ff:b7:
                    78:67:ba:75:ca:dd:dd:ba:71:30:17:ba:b7:db:cd:
                    ea:21:b8:80:3c:44:bd:1e:07:0c:51:20:fa:db:f4:
                    1e:a5:ff:bb:86:d8:90:08:cd:a6:cf:12:4a:63:03:
                    ee:1b:b9:65:4f:2d:0b:21:a7:1a:3b:a4:a9:7a:83:
                    dd:cb:24:f3:76:9e:a3:5a:cc:ac:6b:a7:31:1a:f5:
                    3d:f9:ce:26:63:21:bb:6d:e0:45:38:c3:81:9d:f3:
                    a1:b9:f1:c4:b8:b0:f3:ee:10:59:bf:dc:d7:30:75:
                    4a:03:20:ea:a9:04:3a:a0:de:e0:08:42:c1:93:51:
                    63:4d:33:bd:96:f3:72:2d:4f:8c:13:4a:6d:5e:d1:
                    87:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A6:4C:DD:42:33:FD:BF:A6:77:A0:85:02:53:AE:25:8B:5A:75:FD
            X509v3 Authority Key Identifier:
                keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:0f:2d:4c:76:d1:d4:af:c7:01:ef:24:26:56:5b:11:32:
         ab:d5:aa:79:a8:16:c2:58:a9:c0:c0:21:8c:7c:b3:c4:27:55:
         71:40:fa:98:67:dc:96:b2:c2:c3:0c:fa:31:1e:15:c9:e4:90:
         19:f3:de:6d:9c:7e:7e:08:34:f9:d8:39:eb:a4:88:01:44:5d:
         34:7b:8a:ea:2c:3c:49:99:03:0b:c5:43:24:62:b8:3c:d9:a7:
         2f:fd:be:4d:90:2f:b5:43:cd:fe:1d:42:33:de:47:b2:6a:74:
         e4:ab:86:4e:e9:c6:77:e8:d7:b6:54:11:48:bf:71:09:61:83:
         2f:57:fb:e3:bd:f9:28:36:fa:37:1c:6e:91:29:e4:4e:f8:e5:
         ed:91:35:4f:5a:e4:1e:4b:a6:89:e5:dd:fe:a6:b2:41:51:f5:
         db:b9:22:77:71:b7:a4:4d:0e:27:5c:af:e5:76:68:e2:1d:1a:
         e7:c9:46:77:ce:a7:46:04:9b:1a:81:3b:5f:de:fd:be:fa:cb:
         01:80:8b:a3:4f:18:04:02:71:c8:68:5e:48:52:0b:f8:ed:97:
         5e:38:b3:fe:82:40:99:4b:44:5d:f0:3e:1f:6a:90:35:02:e6:
         79:81:9d:e5:60:64:9c:6f:42:52:ae:4b:32:be:3e:4a:b0:5e:
         de:96:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:37 2026 by rpki-client