Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
File:                     RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json)
Hash identifier:          bjroZc+jomSmYmAQPwpTSAYErKtMtqeIwDDEDfXRPU8=
Subject key identifier:   5C:9B:81:2D:77:9C:66:E7:76:95:62:15:0A:8F:7B:FD:3B:DF:CD:52
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Certificate issuer:       /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial:       076D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
Manifest number:          0765
Signing time:             Mon 02 Mar 2026 01:38:12 +0000
Manifest this update:     Mon 02 Mar 2026 01:38:09 +0000
Manifest next update:     Mon 09 Mar 2026 01:38:09 +0000
Files and hashes:         1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: /9qJdRdkYqqGV0MrW1vnDv0yQNyyERDaEGiBDs+TF0s=)
                          2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: sbyF3KrKZsJPlhcWGIocE8R+wXMDx5Dh9kMEDZMegNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
                          rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
        Validity
            Not Before: Mar  2 01:38:09 2026 GMT
            Not After : Mar  9 01:38:09 2026 GMT
        Subject: CN=69a4ea03-bd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:b4:0f:6e:e7:9c:e6:2f:3e:97:d9:a7:a4:
                    29:1c:e6:67:ed:14:83:fc:c4:fa:2c:8c:ee:03:c2:
                    0b:3b:12:db:c8:77:57:80:82:0b:db:86:39:63:fb:
                    31:21:e8:31:8c:1b:92:26:46:59:d1:67:db:22:df:
                    8b:4d:12:c3:8d:ab:16:16:3c:62:a6:b3:14:12:70:
                    42:eb:c9:68:33:51:4c:7a:d7:38:17:e5:65:17:9d:
                    14:4c:23:a5:a6:12:5c:91:64:21:f8:3d:b8:75:d7:
                    1b:dc:fa:1e:23:2b:6a:e7:68:d4:7f:ae:86:b9:c6:
                    45:3e:5f:98:35:c3:be:92:70:da:8f:b7:d9:18:7b:
                    b8:99:ea:b9:b9:6d:49:a7:8c:33:57:32:bb:40:b3:
                    0c:df:74:46:a9:f6:3c:92:90:78:9c:41:de:db:9e:
                    06:d2:38:6e:f8:c3:83:85:4b:fa:91:ae:6c:fb:3c:
                    f5:9e:fc:89:13:ab:9b:95:9b:e5:0b:90:03:c5:0c:
                    80:4f:49:c4:6a:5e:c0:8c:0c:7a:22:5b:90:cf:8e:
                    89:c8:e8:aa:c7:37:f2:e1:bd:02:3a:33:bd:83:ec:
                    e3:46:6d:7b:f5:5d:55:cf:70:91:bd:e5:e6:44:65:
                    7e:05:3e:27:ed:92:9b:10:df:e8:74:19:43:a4:20:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9B:81:2D:77:9C:66:E7:76:95:62:15:0A:8F:7B:FD:3B:DF:CD:52
            X509v3 Authority Key Identifier:
                keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f7:c0:28:2f:7e:5f:87:d0:af:a4:70:00:c6:1e:c9:45:00:
         2c:cd:45:fe:47:91:8d:8b:b9:8f:e6:97:a5:64:58:e5:4b:a8:
         d3:f1:4e:27:c5:0b:36:1b:52:fa:bd:66:cc:be:1f:47:0f:92:
         33:94:24:3e:c3:5e:94:10:29:48:da:42:d6:fd:ca:01:99:48:
         d9:42:5a:42:a7:e9:f6:26:71:70:fd:5b:42:a2:df:08:6c:51:
         4b:e9:e4:20:3c:d0:25:14:54:a1:89:de:2e:a3:39:cc:51:d9:
         e5:55:b4:98:d6:59:81:a7:1b:47:9d:c4:2e:e9:b2:1a:63:b8:
         e0:97:ef:1d:47:f3:3f:53:3d:5f:f5:ff:6a:ed:68:6d:40:b9:
         0e:79:d7:f1:6e:2c:34:63:3c:c0:dd:2d:fb:9a:e9:67:33:e0:
         57:85:85:99:2f:15:5f:f7:db:b4:74:2b:8f:5a:82:73:5e:de:
         74:12:5a:c0:15:89:6a:ac:c8:f2:ec:67:ad:98:e0:63:48:20:
         89:66:81:67:14:ff:95:15:42:ca:ec:c5:1e:32:9e:ff:c6:c1:
         d7:d9:7f:db:48:bc:0b:33:c5:36:cb:ae:23:43:78:ae:c6:7e:
         8f:ec:ef:03:e8:ae:2c:e0:da:90:d2:c1:59:45:95:1c:22:56:
         6d:d3:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:58 2026 by rpki-client