Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          k4KXDer+wpTYLHoiWw23y/nD4BJmcitPugn83Yn4tII=
Subject key identifier:   AB:77:C6:A7:31:52:A5:BD:E7:EF:00:03:A5:1A:DF:15:3E:2F:F1:2D
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          0260
Signing time:             Mon 02 Mar 2026 01:08:30 +0000
Manifest this update:     Mon 02 Mar 2026 01:08:28 +0000
Manifest next update:     Mon 09 Mar 2026 01:08:28 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: DGXu6MkpLMwCt89Pc+aAG+xDOukKtALMIfWSplx1iW0=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: a7dxXCx6MYR+XHKV7x8741sygGvBY9tuPGBJ3I6LZes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Mar  2 01:08:28 2026 GMT
            Not After : Mar  9 01:08:28 2026 GMT
        Subject: CN=69a4e30e-9538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:a2:8c:99:bf:fd:22:40:60:66:5c:1c:2f:
                    0c:63:b8:68:13:7b:ba:cc:61:b6:24:dc:d3:97:81:
                    39:7d:fd:d1:55:2d:c9:a2:3a:e5:e7:76:1f:ec:3b:
                    29:02:13:c6:51:c7:a7:b9:ca:2d:1e:3b:40:a9:57:
                    25:8c:e1:a9:b5:e9:59:e6:1c:ce:1b:e9:d3:44:79:
                    97:62:be:71:ae:94:16:ec:02:4f:97:dd:66:70:8b:
                    e0:d6:d6:77:ce:e9:9e:59:14:bb:93:bb:4b:95:db:
                    f6:c8:2c:6f:6b:80:4f:7d:30:4b:13:51:9d:c0:90:
                    98:cb:df:9d:4d:3a:11:11:b8:8c:a5:9b:33:df:34:
                    e1:d2:49:f6:e3:d9:2e:49:9b:fc:3a:c0:4a:c8:2f:
                    5e:f4:46:cb:39:47:c8:7c:e2:31:5b:49:57:ba:13:
                    05:bf:70:8c:95:2d:0e:30:8a:ac:9c:a4:95:8d:bd:
                    24:63:22:2a:d3:a0:37:10:a9:de:d3:84:91:a0:d7:
                    91:15:d1:8c:c5:9b:6e:41:32:f1:2e:b0:bb:fe:e3:
                    66:12:7d:10:65:ee:ea:50:c9:21:d9:7f:88:1c:b3:
                    a9:b9:a5:f1:5d:b6:65:4b:e9:56:83:8a:d5:66:df:
                    a2:6e:2f:66:4b:d4:6f:b7:9e:49:a2:6f:f3:a0:45:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:77:C6:A7:31:52:A5:BD:E7:EF:00:03:A5:1A:DF:15:3E:2F:F1:2D
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fb:13:eb:3e:d4:74:0b:ec:43:9c:b2:4a:1c:dd:70:97:b6:
         b3:35:cf:02:72:72:e1:31:ea:a0:45:58:7b:9a:f2:ab:bf:92:
         11:8a:a7:46:e5:5f:d1:cb:38:f2:80:48:43:1a:18:01:09:82:
         ac:8c:6c:3c:ef:aa:39:af:a9:7b:87:42:d6:90:53:bd:33:08:
         74:13:c9:c8:7b:09:db:ad:6b:b7:5a:9e:2d:25:39:7b:75:e2:
         04:bf:a9:72:23:43:4c:8a:15:1a:a5:81:a2:db:3a:e6:42:0b:
         c0:2f:82:4a:4f:b1:37:ec:45:d5:e5:72:c2:e2:4d:c4:88:64:
         6c:40:f7:7b:b5:69:a6:b7:e9:d0:d1:e3:a3:66:78:db:13:a9:
         1e:80:5f:82:ac:75:a2:db:fc:7f:a4:7c:c3:e0:5c:f6:4c:95:
         f7:40:e4:86:08:17:be:04:1a:6e:1d:e8:9b:27:9b:e8:02:6f:
         b7:d0:9e:58:ca:4e:07:f6:75:d0:1e:c0:d5:a4:2f:d9:46:4b:
         38:75:94:87:d8:33:6d:f4:80:43:65:46:ba:b9:9a:f7:bc:0d:
         22:23:b3:2b:59:d9:94:e6:45:76:bb:11:10:fa:11:35:26:92:
         97:e6:93:fc:ca:6d:23:03:1b:55:8f:4d:be:69:c6:9a:cb:bc:
         03:ce:48:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:58 2026 by rpki-client