Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File:                     AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier:          DiekjQ98/7ko+HjR4uNolQRuJ0FXsfiXx4qw/nKASRo=
Subject key identifier:   7E:43:98:37:95:02:B6:78:E4:DB:6E:D7:F9:12:37:8B:E4:FA:E2:72
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer:       /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial:       09EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number:          09DE
Signing time:             Mon 02 Mar 2026 03:03:31 +0000
Manifest this update:     Mon 02 Mar 2026 03:03:27 +0000
Manifest next update:     Mon 09 Mar 2026 03:03:27 +0000
Files and hashes:         1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: +PQ8ENwAmYmBJ5ugnoQGU1qKCBF7Cb7HHnjjmyIrjc0=)
                          2: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: gXIt2yd0FQgVFoledLc37A0tKse+hQfjfmJoALOtcpg=)
                          3: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: AMw54EUzBoYZAlXkNliaOixSikod3CRFz3MlZVcy56A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
                          rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2543 (0x9ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
        Validity
            Not Before: Mar  2 03:03:27 2026 GMT
            Not After : Mar  9 03:03:27 2026 GMT
        Subject: CN=69a4fe01-a17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:6b:a2:74:05:7c:cc:a4:cf:d2:be:0f:34:
                    d3:a4:6f:9c:6f:8a:6d:8a:7a:5f:e7:4d:f3:a2:91:
                    d5:63:05:10:af:f6:d9:55:e1:d3:d9:9e:30:cd:3d:
                    0d:c3:a1:5a:53:1e:2d:50:19:5e:dd:3f:fc:6d:b5:
                    38:f3:f3:4d:68:2b:2e:f8:43:6c:be:f3:51:3a:5f:
                    31:e3:01:eb:6f:73:f6:33:44:bf:2f:66:9e:97:52:
                    41:08:96:91:d8:99:1f:ff:57:39:8a:0b:63:74:b0:
                    e6:49:20:ee:2e:4e:fd:f8:d9:a1:ed:07:02:22:df:
                    9c:5e:a9:48:57:f8:ee:b1:90:09:aa:08:db:45:43:
                    d4:37:ce:a9:c9:43:c6:94:5f:6a:12:55:d8:f6:02:
                    1f:bd:06:62:24:86:a7:57:9c:7d:e7:13:fb:e9:f7:
                    f4:d7:12:c9:54:b2:59:42:92:3c:79:49:41:15:97:
                    d2:85:f8:49:44:b6:ee:f0:71:42:40:1d:a8:bd:09:
                    41:c9:43:37:79:b4:68:68:97:e2:6d:11:21:55:a0:
                    35:a3:67:33:a5:8e:9b:ca:88:14:1a:7c:20:8d:9b:
                    09:f4:a9:cd:7b:06:c6:43:78:b2:d5:af:26:1a:47:
                    5d:f8:4f:af:4a:c0:0d:0f:12:b8:00:9c:13:3e:fa:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:43:98:37:95:02:B6:78:E4:DB:6E:D7:F9:12:37:8B:E4:FA:E2:72
            X509v3 Authority Key Identifier:
                keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:eb:12:f9:44:da:5e:86:84:10:49:d1:8c:2d:e8:a8:ca:35:
         80:30:80:e2:32:62:99:6a:c3:ff:7f:46:64:bd:2e:4e:87:44:
         80:fa:80:78:8b:f6:67:e6:ee:cb:10:da:0c:8f:ee:e1:74:a5:
         1c:ad:52:de:36:49:4e:88:23:96:ca:0f:53:24:ad:0a:6e:e7:
         3e:b9:8a:86:be:79:e4:f4:e8:ed:ed:2f:16:6e:c4:4a:5f:50:
         db:da:b9:a0:e8:2b:95:27:c6:db:1c:d4:3b:45:b7:20:53:08:
         64:1a:16:57:93:06:0d:0e:5f:18:1f:66:93:eb:42:08:c9:e1:
         ec:e3:0f:7f:9c:8a:36:b8:80:04:d5:d4:c6:cf:d3:a4:6b:00:
         c2:e2:3c:e3:73:b3:0d:96:51:f6:c0:0e:4a:e5:51:7a:ef:b7:
         c9:c5:4e:4f:c4:87:47:9a:37:56:7f:27:d0:78:9c:7a:57:4b:
         b3:45:45:34:87:89:3c:65:e8:b5:4a:42:6a:d4:61:df:45:0b:
         4c:a1:48:9d:44:da:11:e1:20:22:3e:f1:ff:a2:53:9d:b9:1b:
         e9:32:5d:8f:03:74:1f:d0:79:14:61:7b:5e:1a:f8:54:d7:ed:
         e0:c0:ee:26:f3:06:42:bc:80:fb:24:44:95:7b:22:e7:72:94:
         4f:08:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:04 2026 by rpki-client