Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
File:                     rN673IrqemETaTGDOGOx454Bfic.mft (raw, json)
Hash identifier:          MXk9yJ3lsEzNrTfhL/lLMVchJ7psGaQOrBx+v1wB9rs=
Subject key identifier:   E1:0E:BA:D2:F4:22:4E:A4:F5:9C:20:24:50:78:F2:9D:2E:21:6A:63
Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
Certificate issuer:       /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Certificate serial:       0B9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
Manifest number:          0B8D
Signing time:             Mon 02 Mar 2026 00:30:25 +0000
Manifest this update:     Mon 02 Mar 2026 00:30:23 +0000
Manifest next update:     Mon 09 Mar 2026 00:30:23 +0000
Files and hashes:         1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: RfP0oPqX1aw55ilirM+C2xmus6gWm0eUeQGBrCgi2Gw=)
                          2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: Tt+/ZFDCBvQEpgRT0vX9Jm9igfEF7EehekjpgCR5Fbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl
                          rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2973 (0xb9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
        Validity
            Not Before: Mar  2 00:30:23 2026 GMT
            Not After : Mar  9 00:30:23 2026 GMT
        Subject: CN=69a4da20-3d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:1c:99:aa:84:3c:72:62:4e:42:a7:7c:74:
                    ce:b5:7f:f4:79:af:78:d7:0b:a2:5c:a7:57:e3:ae:
                    29:70:e6:e2:65:fe:2b:d0:67:62:eb:07:44:5d:e1:
                    40:51:87:a4:83:fc:8c:47:83:da:13:29:46:4d:79:
                    af:86:ba:71:87:e3:a5:fc:c2:d3:16:55:3b:5c:90:
                    76:83:5c:4a:d8:23:e3:11:50:05:e3:d1:dd:32:ee:
                    69:58:82:05:0d:21:8c:17:b2:11:9c:fc:60:7a:90:
                    be:ae:c8:d8:80:7e:58:1b:42:17:4f:45:aa:5f:8f:
                    41:f6:07:46:9c:05:a3:e4:4b:3d:47:5a:ca:b9:c2:
                    67:7e:c1:04:3e:a9:87:59:d5:f2:a3:f1:be:25:9c:
                    16:85:84:6f:ed:1e:b3:7f:97:df:41:b2:6c:b1:e2:
                    2b:2c:88:8e:8b:7e:1e:13:04:02:c9:e9:52:25:8f:
                    0b:cb:44:31:64:45:fe:8b:ca:96:7b:b8:85:a7:0f:
                    14:90:2f:7f:7b:01:bd:05:6b:72:8a:ce:46:95:93:
                    26:7f:35:5c:ba:79:a1:40:3b:b7:e2:eb:06:c8:97:
                    1e:57:5a:cd:a9:06:13:a9:d1:be:e8:bf:e3:f1:1a:
                    f6:0b:14:f1:e2:d6:45:53:9e:f8:3c:96:f2:ef:61:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0E:BA:D2:F4:22:4E:A4:F5:9C:20:24:50:78:F2:9D:2E:21:6A:63
            X509v3 Authority Key Identifier:
                keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2d:89:31:6c:24:06:7b:3e:2c:16:62:ef:ee:d9:3c:3c:57:
         5e:97:15:6c:6e:9f:d6:2a:8c:ba:27:12:81:f9:11:b1:97:e8:
         5e:e7:1f:26:6c:d8:b3:a5:0d:7d:6b:2f:29:7e:8f:e5:f2:8b:
         f6:eb:e1:ca:bd:db:92:69:c2:98:14:ee:64:99:43:93:71:b1:
         1a:b4:88:ed:12:67:c3:e5:ec:94:60:0a:b3:bb:53:06:e2:ec:
         f6:73:4e:9d:84:e8:4b:fb:73:d7:7f:5a:44:00:8a:91:4e:31:
         96:c6:01:3f:bb:e7:b9:6d:c2:8e:ba:85:21:54:b0:4c:6d:1f:
         7f:88:ed:5b:54:ca:27:f2:a4:b8:69:1a:aa:4e:a4:84:ea:d6:
         b6:32:e5:7f:42:1a:c4:e9:4f:af:58:c7:f3:b9:d0:b9:c6:11:
         9e:ff:75:23:86:1f:8a:7b:16:27:59:c5:c2:de:f3:15:4e:5e:
         ab:45:a8:9b:ae:ae:9f:04:77:5e:78:fa:18:ae:0c:74:f9:4d:
         6f:ce:05:35:ac:32:69:5b:ca:ab:22:b9:59:83:c4:4b:12:e8:
         c8:19:10:61:1e:5b:d9:66:e2:5b:d8:0b:03:c6:8d:cf:85:70:
         24:60:e8:7a:31:54:e4:a6:a5:d0:87:6e:af:94:dd:34:7f:d3:
         1c:a8:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:38 2026 by rpki-client