Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
File:                     7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json)
Hash identifier:          dnX5AIFF1LZbb2LWiQtbjd1otGWQIaV//nuk43EkkEU=
Subject key identifier:   37:EC:4E:46:F6:02:51:3F:37:4E:E4:5E:4D:C6:E1:B6:DC:91:B7:D7
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05EE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
Manifest number:          05AB
Signing time:             Fri 06 Mar 2026 15:17:23 +0000
Manifest this update:     Fri 06 Mar 2026 15:17:23 +0000
Manifest next update:     Fri 13 Mar 2026 15:17:23 +0000
Files and hashes:         1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: 7a2IQkEYnHbgwjVSWuhcFWOMs++jbFbazEhkLAwZ2eE=)
                          2: CED17ACA08BA11F182E596311F3D8C67.roa (hash: BeQkPnokkNWqCf4Shm6HGhkTvps7aINDAGBIRbhuSMw=)
                          3: 1BBD8C580BE911F187777A73343D8C67.roa (hash: Khg9wPRObvvayQcBytp6PWB4psgr/LeDDZkUxOQ62uU=)
                          4: 2D1602DA066411F182222C40373D8C67.roa (hash: tF3EoKXHAddcRS9uP57reOt3Rur5sJdGBEzSbzJ+4k4=)
                          5: DB8A251A059411F18B30AAF03F3D8C67.roa (hash: SBSfsDpKl/lvqVEjdgGHbdzCI5Fl+6Fw3TjACuxE6n4=)
                          6: 5ED5CC9815F911F190BF9FBE233D8C67.roa (hash: oa2ypdaPfl23vXPShg1R2vtKyuSLt8nGMoHY1PyZND4=)
                          7: FDAF18600D7511F19C67C433203D8C67.roa (hash: XbGl/vP55wM+Y8CgR4GIXL8OQ1dcAgMZfT/2SPG1rEA=)
                          8: AA77D2C8031A11F18B50B9B7193D8C67.roa (hash: /IeY+RAx/sq7QLFfQCMqAGIlcC4999G1jALHLiHs1K8=)
                          9: 0FDABE660D5011F181251C95143D8C67.roa (hash: ZfaihvXIloTda13RTHQyvpvEb3i/NKjFRUH6tpNvF9s=)
                          10: 7099A354108211F1B8BE851C313D8C67.roa (hash: hKh92vIyKXevAYFStDC8psA0ZlOkqsaoG4drmztVgRY=)
                          11: EC7D444E160411F1968984DF273D8C67.roa (hash: bb8UP9hrazRsE2K8CObQWVVb8F5OILhyWnD7mwzcTSk=)
                          12: 08B1BF36194E11F19D5A7EC83E3D8C67.roa (hash: jTZPy/nCH6riVG2Ook8ezgmYAh8vzggi8tmYrO9ZwkE=)
                          13: 81EF7A300AFF11F1AB9D2207353D8C67.roa (hash: ndPGgvhrVz4QDcv8dyseln1b5rv09HWAn+eOmwGzPuk=)
                          14: 9962399E0E3F11F1809F84CD183D8C67.roa (hash: 4lFqzlNV7STQ3/98Y8ZlA3hQJAe5coNdXxwEnnsQihc=)
                          15: A6762246057D11F1B9448C30373D8C67.roa (hash: iTohXP0s7cVZvnf5fsXfFc5qW8ZEymCXBwgXbpQlAzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Mar  6 15:17:23 2026 GMT
            Not After : Mar 13 15:17:23 2026 GMT
        Subject: CN=69aaf003-4080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:9e:d8:7e:ef:16:73:62:b2:b0:0d:b3:82:
                    fc:42:78:39:36:ff:6c:5a:bd:74:f6:a7:24:57:08:
                    d4:e3:ab:f3:8f:48:88:9c:ef:0c:4c:b1:18:cf:70:
                    b0:29:55:46:62:ea:c6:b3:5f:22:a6:dd:48:f8:e1:
                    36:d6:d5:fb:6a:b2:b2:76:d6:f3:22:ca:07:fa:3d:
                    91:f5:05:1f:92:15:25:98:17:f3:e1:a8:89:53:62:
                    03:25:f7:4b:96:f4:ff:2c:ed:a4:ff:53:f5:f1:16:
                    b7:c2:f3:b8:75:f2:48:54:0b:7a:0f:27:98:dd:91:
                    4f:7f:1a:58:b3:fc:2e:d2:2e:27:70:79:a7:7d:57:
                    7f:d1:e8:d4:c1:87:16:83:a8:b0:5c:04:ac:0c:39:
                    4a:67:62:b5:a7:56:bf:f6:d9:29:6c:01:7d:eb:9d:
                    8a:77:2d:4e:ab:62:17:83:05:af:ce:90:58:ea:e9:
                    13:c8:f2:02:ac:26:38:23:06:f0:6c:db:04:41:da:
                    73:8b:d4:b8:b2:a0:30:17:f5:9c:e8:9c:fb:08:1e:
                    27:20:d3:e7:37:d5:50:93:42:73:c8:9e:2b:6e:89:
                    eb:03:1b:fa:e2:bc:84:49:e5:9e:1d:82:12:e9:16:
                    c8:4f:2e:a6:ba:67:1c:b9:20:e5:45:37:aa:a3:1e:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EC:4E:46:F6:02:51:3F:37:4E:E4:5E:4D:C6:E1:B6:DC:91:B7:D7
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b5:55:da:cb:c7:0a:02:a8:8d:ad:0d:a8:cc:43:cc:97:cd:
         dc:7f:a7:65:82:b8:5d:44:89:b1:f3:1f:6a:78:2b:ea:26:04:
         39:41:ee:43:fe:d1:f1:f1:a9:c6:40:91:67:dd:fb:f1:03:72:
         7d:3c:57:03:e4:8e:92:b9:24:53:b9:60:a5:49:93:7f:c1:31:
         ea:0a:9d:23:55:e3:27:36:f6:bc:d1:3f:5d:ac:6a:e9:b7:13:
         b0:2a:4b:52:26:38:93:16:53:56:6f:eb:00:df:e6:52:a9:9c:
         75:11:ad:07:78:60:8c:cc:54:d3:64:9f:ec:1b:da:2d:30:65:
         fc:f1:4f:3c:20:59:25:06:5d:da:9b:5a:d2:f4:82:d9:a7:48:
         3e:c9:c3:e2:77:76:0f:e0:8e:aa:16:bb:a8:28:89:c1:d9:66:
         ab:b9:ef:2a:16:fb:f4:1e:8a:b8:10:be:d0:31:f0:d9:57:b7:
         25:7f:5e:e4:fe:c3:dd:38:d2:cc:3e:47:8b:c6:25:0b:78:e1:
         0e:38:3a:41:a7:38:b9:12:1f:f9:14:9c:7d:52:5a:1d:28:d3:
         25:87:2b:59:8c:8a:8f:a8:ba:d0:c7:0e:b0:47:47:32:cd:5d:
         92:de:6e:21:91:a0:af:38:0f:60:68:5d:29:56:28:5c:fc:39:
         87:0d:19:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:34:34 2026 by rpki-client