Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
File:                     KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft (raw, json)
Hash identifier:          Ec1fplQBIB/v9cVxTGYsgAh4C95QiAiqeuclp+ulwBU=
Subject key identifier:   51:08:71:F4:6F:B8:E9:CC:5C:FF:6F:D5:DE:07:2E:98:0D:0E:B9:9D
Authority key identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
Certificate issuer:       /CN=A9152329/serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
Manifest number:          F7
Signing time:             Tue 03 Mar 2026 05:52:23 +0000
Manifest this update:     Tue 03 Mar 2026 05:52:23 +0000
Manifest next update:     Tue 10 Mar 2026 05:52:23 +0000
Files and hashes:         1: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl (hash: aW824iqUS5Ue4S+OypIzOKhtbRUq4XyBBf/OnAGlmY0=)
                          2: 38161248A26911EFBF6D0319C4F9AE02.roa (hash: AVpmO1XfQqx7osD3xv12YLKG1Ejq79RCs8GNCY34Q2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl
                          rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152329, serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
        Validity
            Not Before: Mar  3 05:52:23 2026 GMT
            Not After : Mar 10 05:52:23 2026 GMT
        Subject: CN=69a67717-2ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:21:7d:1d:5b:68:33:c8:34:c1:78:11:84:
                    39:9c:a6:a5:ff:b3:4c:ac:ef:79:24:7a:f5:cc:76:
                    4b:de:0b:ee:b0:d7:91:59:02:b2:ef:c6:cc:7b:21:
                    e6:e9:36:00:c8:f3:44:02:87:e5:4e:45:7e:4e:69:
                    88:b8:84:11:71:03:0c:1e:6a:36:82:64:cf:6e:35:
                    a1:1d:48:de:f8:45:a5:a0:e9:36:73:82:3b:52:29:
                    dc:d6:9c:61:f7:4d:7b:91:3b:61:5c:c7:b4:26:4e:
                    ff:17:62:32:5f:cd:48:96:00:42:da:fc:6b:d2:85:
                    18:6d:cf:b8:5c:7f:36:8c:46:53:47:88:77:68:a0:
                    c9:30:6c:e2:08:53:12:af:44:67:cf:fb:7e:dd:ab:
                    ab:44:1e:ae:76:fe:b0:ad:e1:c7:58:99:c3:92:6c:
                    d1:11:15:ba:be:ad:27:21:63:bc:cc:11:9a:bb:6e:
                    23:19:ca:d0:b5:0e:9a:2d:4d:1d:99:bc:8c:26:b8:
                    a6:25:f8:b1:18:e9:e4:ae:0b:32:18:45:71:61:f4:
                    14:bf:b4:cb:9e:f9:6c:3d:30:bd:5f:fc:80:27:2a:
                    58:8f:ce:0b:56:13:ad:26:b5:6c:c5:14:a8:c6:49:
                    5c:9b:6e:68:5f:a0:46:57:f6:12:19:51:9a:f6:48:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:08:71:F4:6F:B8:E9:CC:5C:FF:6F:D5:DE:07:2E:98:0D:0E:B9:9D
            X509v3 Authority Key Identifier:
                keyid:29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:df:f0:15:6c:1e:13:df:0f:8f:87:0d:e9:50:8e:75:b1:4f:
         29:a8:e1:0c:68:c6:ea:37:2e:6e:62:a5:88:ee:4d:6e:58:ef:
         15:dd:4c:17:4c:52:c4:9b:6d:af:b0:76:7d:f4:b6:de:30:f9:
         e5:dd:f6:36:7d:50:26:9c:13:3c:90:83:d6:07:5d:b5:26:bb:
         4a:48:48:1f:66:02:43:5e:9f:19:90:77:24:92:90:cd:35:bd:
         24:e6:65:22:a2:2a:e7:fc:3e:e3:df:10:cb:eb:bf:73:1e:00:
         87:4c:1b:6c:38:60:a7:b9:7a:e1:23:ce:37:e6:2e:1b:ed:d4:
         33:fb:49:1e:85:b1:3f:5a:4f:5f:2b:e8:68:74:58:9e:f9:d7:
         68:28:5f:78:ee:b8:f9:9f:6d:11:3d:ae:61:39:fc:c1:d6:cc:
         e2:a1:0d:99:91:34:d6:a4:84:15:aa:09:af:b6:6e:b6:b3:bb:
         79:3b:a5:9a:f3:9c:42:d7:66:ab:cb:a4:ec:66:46:91:8c:d1:
         c3:bd:0c:b9:56:c8:61:be:f6:d4:3d:c5:6f:8e:82:71:a5:84:
         25:03:68:19:1a:85:61:d7:06:25:08:09:59:c1:cd:91:14:03:
         6e:3d:7b:a0:41:63:eb:0f:c9:b2:06:b3:87:a2:9f:56:e7:79:
         c0:c9:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:29 2026 by rpki-client