Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
File:                     7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json)
Hash identifier:          4fYGl+LEX2eTlJxJrq2rSJnmQd//GpPyy6GYwJa57sE=
Subject key identifier:   A4:45:8F:C9:E5:22:16:EF:17:78:06:6B:65:A3:C9:DF:29:74:14:FF
Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47
Certificate issuer:       /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
Certificate serial:       052D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
Manifest number:          0527
Signing time:             Sun 01 Mar 2026 00:09:28 +0000
Manifest this update:     Sun 01 Mar 2026 00:09:27 +0000
Manifest next update:     Sun 08 Mar 2026 00:09:27 +0000
Files and hashes:         1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: 13xhfrvKOYMGSTXDvKn9pW7dDkTEHacyJTqcZnv8qT4=)
                          2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: huK/eSbLEeBq0f9Sx8G/qA8oLun9QFfZjCe5ZwMe1ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl
                          rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
        Validity
            Not Before: Mar  1 00:09:27 2026 GMT
            Not After : Mar  8 00:09:27 2026 GMT
        Subject: CN=69a383b8-d40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:d3:bf:1f:ad:73:71:20:86:65:ef:66:9c:
                    a3:d1:c8:74:3f:08:87:cb:fe:d6:ff:e5:9d:e3:23:
                    98:62:07:0c:d2:fe:0b:92:41:c6:9b:d2:89:a2:74:
                    ed:56:44:f6:4e:d3:8b:f9:ac:6b:d6:27:3a:55:57:
                    6c:e7:2f:ec:5f:ae:71:44:ab:58:3c:db:e1:f5:99:
                    da:83:1c:a4:83:d0:b2:68:05:b3:06:f8:76:b6:cc:
                    3f:67:d8:01:b4:03:e1:0b:71:45:4a:48:c3:17:c6:
                    a7:ad:b9:68:02:e9:6a:aa:88:53:ed:8a:8b:e6:d5:
                    92:6a:01:c3:22:af:56:3e:e1:e1:f3:50:e5:9b:85:
                    e8:10:48:03:6c:ba:53:a4:27:07:02:85:7b:9f:4b:
                    05:a6:e8:87:c1:2c:c2:a8:8f:c2:8c:5b:8c:7d:eb:
                    6f:b2:29:25:8e:5c:0d:d1:c9:4e:bd:cd:cc:f5:b8:
                    9c:7a:62:4d:5c:88:48:36:35:89:67:d2:76:ec:87:
                    9a:73:cc:65:df:a9:65:14:d1:57:d6:0b:09:ee:5a:
                    99:87:ec:d1:71:a1:3c:a6:ca:c5:9e:48:22:51:b8:
                    f5:20:75:b5:00:d0:e2:1d:2c:5f:64:59:91:ab:7a:
                    2f:61:07:34:61:c1:bf:f4:79:2b:a5:73:f1:38:9f:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:45:8F:C9:E5:22:16:EF:17:78:06:6B:65:A3:C9:DF:29:74:14:FF
            X509v3 Authority Key Identifier:
                keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b4:2e:bd:3a:d2:d5:02:a1:e0:24:90:c6:8e:cb:59:58:94:
         e0:9b:b7:50:1b:8c:c0:f8:30:23:fd:42:5b:b1:ea:b2:f8:cb:
         24:53:09:46:b2:55:ff:d2:ab:a7:2f:15:e6:f8:8c:49:2a:a7:
         58:29:c3:4b:c8:48:1f:ce:58:55:df:b7:e4:ee:34:db:39:a3:
         31:a2:cf:92:f8:b2:8c:f2:31:ae:40:c5:e4:9a:f6:c0:db:2f:
         29:0b:ce:2c:31:9b:0b:47:26:13:3a:bb:a4:0a:93:04:f8:0c:
         03:84:ca:84:b8:4d:7d:0e:b8:c3:2b:f3:43:62:74:de:ea:07:
         99:05:3a:1c:5f:b5:9d:4d:b9:6e:e0:a1:7b:37:fe:44:22:18:
         ff:6a:8b:3c:94:7a:7f:df:b3:3d:bc:00:c3:f9:25:f0:6a:e2:
         06:37:0d:6b:cf:c5:67:19:41:34:b3:24:59:73:b8:b9:be:b2:
         82:ce:58:40:67:5a:0c:fc:54:60:2c:1c:28:1f:55:9a:0c:ae:
         1b:1f:0f:06:f7:65:46:c2:7f:5c:60:36:fd:e2:86:88:b4:a5:
         b3:65:b1:82:e1:eb:b2:b7:9e:d8:fb:7e:24:97:1c:e9:06:0b:
         64:f6:be:36:9a:c8:7e:ff:4d:16:d7:64:36:7e:4e:35:b6:06:
         09:6f:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:07:23 2026 by rpki-client