Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
File:                     aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json)
Hash identifier:          aBCRAJCXzeg2KFjrTjPDnQoM/bCe8+xdxAIVHBUm/sw=
Subject key identifier:   3E:35:F1:B9:44:15:A2:E5:A3:22:05:4E:37:FE:FC:84:66:5D:D0:6F
Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
Certificate issuer:       /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Certificate serial:       045F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
Manifest number:          0457
Signing time:             Sun 01 Mar 2026 00:59:42 +0000
Manifest this update:     Sun 01 Mar 2026 00:59:42 +0000
Manifest next update:     Sun 08 Mar 2026 00:59:42 +0000
Files and hashes:         1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: N4l3FHEQTvwWbO1IBcxcgc6Ug0vlHOSdBb34oHi3ALQ=)
                          2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: ULNDeIC1QzBL4zb0qx8UTp3klkuCMpDktLL9H7/yLDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
                          rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119 (0x45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
        Validity
            Not Before: Mar  1 00:59:42 2026 GMT
            Not After : Mar  8 00:59:42 2026 GMT
        Subject: CN=69a38f7e-5586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:01:7f:36:e4:98:a7:a2:06:7d:88:24:68:
                    d7:4e:ec:6c:b9:9f:20:41:f7:28:f7:7a:69:3f:78:
                    b1:e4:ee:05:83:f7:10:2b:a6:95:ce:65:af:09:0c:
                    f8:ed:dd:07:be:0e:8e:12:5c:79:94:d9:cd:a3:1f:
                    da:ae:c1:45:81:d9:ef:a5:32:04:4e:ef:a7:9e:ea:
                    49:12:3b:1c:90:39:bc:39:5e:f8:78:32:b6:8c:c2:
                    fc:73:f9:3c:64:52:02:51:bd:c9:d9:51:0e:7f:56:
                    29:8c:1d:f4:06:75:8b:2a:fc:20:e7:cd:d0:d7:65:
                    00:56:df:ad:5c:13:87:27:93:93:e0:ae:f9:e5:8a:
                    f6:0a:c4:a6:39:c8:1e:31:08:41:c6:a0:26:63:76:
                    32:6e:be:8e:db:db:40:a5:52:59:7d:ad:2c:00:85:
                    14:df:89:8b:47:d0:34:0e:60:2a:e7:51:ed:9f:97:
                    a8:8e:4c:ee:96:e9:f3:29:29:34:05:3f:e5:2a:74:
                    20:81:8b:f7:04:78:b1:99:e5:4e:67:fe:56:18:41:
                    ba:b9:9c:ed:96:e9:71:91:34:f1:0b:82:11:df:a5:
                    fe:68:30:87:e4:64:8f:fe:16:c8:81:08:64:18:7d:
                    e0:61:67:36:99:81:c4:b4:80:e2:aa:44:57:55:b7:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:35:F1:B9:44:15:A2:E5:A3:22:05:4E:37:FE:FC:84:66:5D:D0:6F
            X509v3 Authority Key Identifier:
                keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e4:0b:40:db:88:68:21:cb:b7:0f:e9:21:0d:d6:4a:db:67:
         9d:a0:3b:30:0c:93:27:9b:55:7c:72:32:2d:1c:cd:4a:03:6a:
         d6:76:e6:b5:5c:2a:6d:71:57:04:d9:ce:ac:f3:ff:d9:9d:52:
         45:57:c8:7f:1e:cf:d6:c1:8e:0b:6c:47:af:8b:11:d6:24:81:
         fe:6e:76:d0:2c:f0:99:23:b8:e4:c4:28:f1:01:81:84:3d:63:
         ac:f5:63:b7:44:ed:81:02:90:93:b7:33:ba:0f:8f:a3:11:39:
         df:4e:59:19:bb:76:0f:5e:26:08:e5:c6:05:bb:b7:46:1c:da:
         75:a1:fd:3b:21:8e:69:0f:80:54:51:72:5e:e7:8f:14:2d:18:
         76:19:d7:3a:5d:2f:4e:31:0e:db:7b:7c:46:86:99:f2:10:dd:
         4c:b8:44:02:61:cd:40:69:86:96:8a:e0:95:bd:4a:da:39:76:
         6c:5e:c2:fb:f7:b6:ed:89:1d:f9:67:25:fb:e6:8a:7f:a6:ff:
         3b:cd:eb:3d:9c:9d:28:6f:c3:2e:be:8d:52:15:82:09:2b:0b:
         09:f7:2d:4a:4e:55:98:13:50:4a:2e:93:4f:dd:96:a4:b1:28:
         e5:e6:a2:3c:42:9b:b1:f3:56:c1:0b:a0:6c:e3:6c:9d:7f:05:
         d7:e5:cd:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB
MUE2RkVBM0EwHhcNMjYwMzAxMDA1OTQyWhcNMjYwMzA4MDA1OTQyWjAYMRYwFAYD
VQQDDA02OWEzOGY3ZS01NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2xoBfzbkmKeiBn2IJGjXTuxsuZ8gQfco93ppP3ix5O4Fg/cQK6aVzmWvCQz4
7d0Hvg6OElx5lNnNox/arsFFgdnvpTIETu+nnupJEjsckDm8OV74eDK2jML8c/k8
ZFICUb3J2VEOf1YpjB30BnWLKvwg583Q12UAVt+tXBOHJ5OT4K755Yr2CsSmOcge
MQhBxqAmY3Yybr6O29tApVJZfa0sAIUU34mLR9A0DmAq51Htn5eojkzulunzKSk0
BT/lKnQggYv3BHixmeVOZ/5WGEG6uZztlulxkTTxC4IR36X+aDCH5GSP/hbIgQhk
GH3gYWc2mYHEtIDiqkRXVbfvqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD418blE
FaLloyIFTjf+/IRmXdBvMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF
NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODlBMi9GQjUyRjY0RThFNjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFR
b0RlQkJTcmQ0dXlocHY2am8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI+QLQNuIaCHLtw/pIQ3WSttnnaA7MAyTJ5tVfHIyLRzNSgNq1nbmtVwqbXFX
BNnOrPP/2Z1SRVfIfx7P1sGOC2xHr4sR1iSB/m520CzwmSO45MQo8QGBhD1jrPVj
t0TtgQKQk7czug+PoxE5305ZGbt2D14mCOXGBbu3RhzadaH9OyGOaQ+AVFFyXueP
FC0YdhnXOl0vTjEO23t8RoaZ8hDdTLhEAmHNQGmGlorglb1K2jl2bF7C+/e27Ykd
+Wcl++aKf6b/O83rPZydKG/DLr6NUhWCCSsLCfctSk5VmBNQSi6TT92WpLEo5eai
PEKbsfNWwQugbONsnX8F1+XNWw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:27 2026 by rpki-client