Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
File:                     r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json)
Hash identifier:          A36ufzjU62b3Wcjwn+bAg26K7A5PfoZkyxoPFBx04m0=
Subject key identifier:   06:A3:2F:7B:0B:97:EA:6E:19:4F:59:79:FE:96:34:56:3B:17:F7:BB
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Certificate issuer:       /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial:       1513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
Manifest number:          14F2
Signing time:             Mon 02 Mar 2026 01:37:05 +0000
Manifest this update:     Mon 02 Mar 2026 01:37:03 +0000
Manifest next update:     Mon 09 Mar 2026 01:37:03 +0000
Files and hashes:         1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: O0kBYP7TXNZ5R91zvGgY5SHCQXKcKavkSJGQoa2roo8=)
                          2: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: wr4ofP5mMFinaz8DTSDZad5Pdzym30OKg1hTJ/3F5Bo=)
                          3: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: HD165QlFCv1elFOh9Ifxh8lRJ5m8p87EcQJEZyPTWpo=)
                          4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: V1Y812+sYis/0a3PYa9dyEh6eO9hK34IzoCS2daAero=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5395 (0x1513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
        Validity
            Not Before: Mar  2 01:37:03 2026 GMT
            Not After : Mar  9 01:37:03 2026 GMT
        Subject: CN=69a4e9c1-2a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:e8:c6:8a:a3:a9:47:66:fb:ce:a4:21:ac:
                    13:15:61:6d:cf:dd:18:12:cc:3e:af:d7:03:1e:86:
                    0f:64:da:b6:15:72:00:28:c4:a2:db:1a:0f:4d:f9:
                    46:1e:58:ac:ed:d3:74:3c:ba:9d:2c:1e:01:f3:c0:
                    b7:15:ba:21:d3:dc:b5:b3:e3:42:50:57:7d:eb:75:
                    57:f8:38:91:8c:e9:90:96:9c:52:a2:7e:63:77:4c:
                    4b:75:c9:ce:8a:fe:68:69:39:6a:aa:64:84:96:39:
                    de:b7:85:86:dc:c4:57:97:07:8d:8a:7a:be:a9:17:
                    b1:cc:c4:e9:e8:1f:5c:55:e9:d6:21:9b:28:ff:dd:
                    55:f7:4c:fc:f2:a8:1f:05:20:af:ce:86:30:51:bd:
                    b6:46:8a:a2:8f:1d:51:35:62:a7:7c:02:29:6c:32:
                    2f:74:59:8e:47:07:3d:62:ac:c3:e7:69:97:cd:0f:
                    21:78:3e:71:99:6c:58:50:97:bf:f8:0f:f9:b3:31:
                    61:c4:98:e7:86:0c:f4:be:c3:48:66:1d:61:3f:71:
                    55:82:6d:9b:86:22:96:b4:ee:49:a6:5b:e5:4c:1c:
                    3e:98:9f:41:e9:6f:b6:ac:a2:0f:56:ac:c3:50:23:
                    5a:87:e8:75:ae:7b:b0:a6:ba:2c:6e:15:9e:46:75:
                    50:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A3:2F:7B:0B:97:EA:6E:19:4F:59:79:FE:96:34:56:3B:17:F7:BB
            X509v3 Authority Key Identifier:
                keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:15:49:24:eb:27:4d:c3:2d:b6:1f:4c:d6:15:ff:56:2e:27:
         5b:f8:c5:f5:f2:21:f0:f3:0e:04:f2:8a:14:79:dc:50:ab:65:
         a4:c3:f8:94:0f:98:16:ba:63:ea:08:6d:d5:c7:8d:cf:a5:61:
         ae:29:dd:bb:29:07:3c:cd:98:c3:e2:7a:11:54:d1:58:aa:f1:
         15:2c:50:da:60:c6:66:44:20:10:e1:5c:3a:d9:23:cb:73:35:
         5a:f4:5a:3b:9c:5b:7c:23:02:f4:df:e1:43:d5:58:86:59:75:
         04:5e:b0:d8:6f:82:4d:12:c9:02:b0:ec:b5:8a:dc:41:50:11:
         62:f2:e3:b3:c3:24:51:60:a4:62:3d:42:6c:7c:01:dc:43:2c:
         24:c0:07:5f:64:25:f0:5d:f2:57:14:7e:6e:e3:1f:de:87:42:
         d4:ee:7f:79:82:56:bb:8d:aa:ad:b5:c7:cd:d9:40:2e:63:9b:
         75:e6:12:97:3a:3f:7e:92:c8:b1:23:c0:83:8b:d2:48:a0:23:
         79:e8:25:16:3b:61:5f:78:1e:b4:2f:5f:0a:85:0d:fe:e1:4c:
         56:17:47:70:11:ec:21:c9:5a:4b:96:d9:4d:b5:a5:3f:c6:2b:
         e7:a5:48:6c:d2:34:61:de:e1:e8:51:78:7f:38:a4:12:ee:1d:
         8f:c4:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:30 2026 by rpki-client