Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File:                     7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier:          H8XvSywETNTcsUlmKAtmFDwaSTV4vuArDVihwAzMfgU=
Subject key identifier:   85:87:55:C5:B3:76:84:B6:DF:3D:12:5D:14:02:7F:D8:7F:6B:8B:BA
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       0352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number:          0339
Signing time:             Sun 01 Mar 2026 01:55:43 +0000
Manifest this update:     Sun 01 Mar 2026 01:55:43 +0000
Manifest next update:     Sun 08 Mar 2026 01:55:43 +0000
Files and hashes:         1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: OKojY5xyCcOBdNeS17NzpESssSKeLT+HD/bs9aBAi6w=)
                          2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: BW5tT5Fwnb90kCw3kdyCo6pAhP8PZLajj0fwMdIDbDA=)
                          3: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: 2FTQfXCf5iEijrWaIGoqW7OkD23cYHWReHvkr3RdiVo=)
                          4: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 9Lyfdf8jewXKDNNSejND0Fdao81XqhdSmTyOn0pVCEo=)
                          5: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: z4aaUTQPt4LTmxBrxqPbGwAQr9ekPHI1lkNmNVVH7mw=)
                          6: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: zUxzk8PVVaES9EMN0VkIqcIxDvXdbV+4WJwr6H3F2mM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
                          rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Mar  1 01:55:43 2026 GMT
            Not After : Mar  8 01:55:43 2026 GMT
        Subject: CN=69a39c9f-25e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:0f:de:9a:10:7c:93:61:3f:a3:44:81:b8:
                    94:23:08:6c:da:87:e3:64:c3:c6:db:f5:b0:96:c3:
                    47:a9:bc:b0:60:7a:7a:74:87:93:e3:1b:d0:fb:b2:
                    3d:70:42:dc:7c:0a:e0:f7:3d:d0:70:52:86:cb:97:
                    67:1a:83:6f:9b:7a:a7:14:b0:62:9a:ea:ea:ef:72:
                    2e:0f:c8:c7:0a:94:51:a1:19:04:9a:bc:e5:a7:9e:
                    1e:14:99:a6:1b:69:25:d2:3b:4a:23:45:2f:ce:b4:
                    bf:69:6a:31:3b:60:ee:06:c1:83:23:e2:b0:23:68:
                    94:f7:fd:74:ae:ff:57:44:eb:d2:80:2c:5f:5b:71:
                    44:1a:d1:bc:7e:6a:26:ea:9e:6d:6a:10:e2:77:91:
                    20:19:9c:82:fc:92:5f:b8:87:95:57:fc:84:83:9f:
                    36:8c:ca:c1:61:4a:5e:c4:1e:1f:a2:bb:5c:d8:c6:
                    9d:ae:56:03:65:87:be:4b:6c:66:aa:de:2a:d6:9d:
                    3f:7a:98:6f:57:67:01:7f:db:3f:db:90:40:f8:6b:
                    c1:2c:28:6f:00:84:a6:09:d8:03:e7:67:f3:a6:18:
                    fb:20:79:25:f7:dd:1b:ac:a9:ed:bf:50:a2:6e:ae:
                    cf:1a:c5:fd:e1:c2:33:9b:6e:e0:55:fa:e3:bb:7f:
                    8e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:87:55:C5:B3:76:84:B6:DF:3D:12:5D:14:02:7F:D8:7F:6B:8B:BA
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:99:10:94:2b:44:15:d9:b2:cf:bf:41:e8:a8:3b:2a:2c:
         45:39:94:f4:a6:56:98:4b:b3:d4:45:39:19:3a:11:75:bd:30:
         ab:e4:0b:b0:13:77:a2:94:4e:27:7e:ce:a6:9f:01:ba:8a:29:
         2a:9b:03:2c:7c:6c:8f:87:b9:60:90:76:1e:02:7e:78:41:e2:
         33:b9:6a:27:5d:71:83:26:a6:9f:9a:0f:2b:b7:63:ab:67:d2:
         40:69:8c:cc:c0:91:75:d9:6f:70:cc:d6:e7:fa:62:f6:e2:70:
         0a:76:e8:d8:d4:31:8f:56:3e:64:33:cd:fd:0c:2c:76:4b:0c:
         46:ae:9a:e1:dd:52:ce:34:f4:ad:77:55:59:18:61:a4:b3:9b:
         86:1f:a0:70:a9:5d:20:a5:ce:12:52:5e:f4:59:78:58:ab:59:
         82:7b:1b:3d:95:2d:a0:60:60:eb:dc:cf:55:23:04:a2:e8:98:
         f8:4b:3f:d8:8e:36:e6:a2:b0:2f:c4:04:6c:44:5a:0c:0b:d7:
         61:91:c8:01:cc:50:27:de:c0:45:80:ad:d3:da:ad:da:80:da:
         4a:e8:cc:6a:75:5e:44:bd:67:c9:90:40:b3:b4:21:59:57:9d:
         bf:7d:e1:9c:e8:9f:f8:1b:75:e9:43:9f:8b:0b:7f:1e:96:44:
         0b:ab:f6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:26 2026 by rpki-client