Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
File:                     sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json)
Hash identifier:          GgL1tLuF9kGgGZsXUCsUWyiuOBD04q4/uGPPmMTocMg=
Subject key identifier:   E1:FB:DC:D7:B4:58:FA:5B:C0:55:0A:39:24:2D:09:DB:B6:C6:1A:4E
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Certificate issuer:       /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial:       07A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
Manifest number:          0B2C
Signing time:             Mon 02 Mar 2026 01:57:00 +0000
Manifest this update:     Mon 02 Mar 2026 01:56:59 +0000
Manifest next update:     Mon 09 Mar 2026 01:56:59 +0000
Files and hashes:         1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: 6+441RpnmDe2Zgp5cJRyvKP4hqLTtGtfEBOLC3Hf0YY=)
                          2: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: +q1Hzxn4Bkv23nWCZgVmh7vcZuLYlqRRNFA8T1wc+f8=)
                          3: 13B5A626CEB811F09E67F582C4F9AE02.roa (hash: mO8S1AIuP5D0jmzeJHd4aSV8W/Nhasm8k/Q5HQJUWxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
                          rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1957 (0x7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
        Validity
            Not Before: Mar  2 01:56:59 2026 GMT
            Not After : Mar  9 01:56:59 2026 GMT
        Subject: CN=69a4ee6c-c2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:10:91:9f:b4:70:ee:36:f0:9c:66:7c:41:
                    9c:10:f4:fd:a6:91:a6:2c:10:11:1b:8a:9b:67:b2:
                    ef:ef:7f:80:77:92:30:38:51:52:c2:da:db:0d:47:
                    b4:51:28:da:d2:3f:53:b1:25:e1:2d:54:23:ae:af:
                    b6:a8:e7:75:32:27:de:57:4c:2e:89:eb:94:92:70:
                    09:d1:0f:43:62:20:c5:e3:2c:cd:ab:4b:a1:6c:0e:
                    3f:50:7e:a0:ce:63:00:14:b1:5d:6d:7e:48:15:1f:
                    02:5a:33:e1:64:74:b4:9f:16:8a:9a:35:e9:43:32:
                    5f:03:5b:5d:50:b6:57:fb:05:d3:31:73:9e:5f:f9:
                    32:04:ad:fe:06:20:95:51:51:54:3c:13:a1:c7:d4:
                    bd:d4:17:72:ef:cb:02:e9:70:25:a5:c8:d8:83:9c:
                    0d:10:1d:dc:2b:69:6c:71:76:2e:f0:5d:72:1b:3d:
                    04:58:d2:ad:bb:9e:20:5e:63:29:ed:b5:b4:18:92:
                    b8:1a:57:a6:1e:87:81:e8:df:26:e3:fa:01:3c:57:
                    3c:21:cb:7b:7f:e3:2b:5b:cf:ed:45:e2:79:a9:73:
                    10:e0:7b:3d:f8:5c:03:da:4f:41:75:21:d5:e1:ef:
                    b2:6f:37:ee:6a:83:99:b6:92:88:07:36:8f:1b:43:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FB:DC:D7:B4:58:FA:5B:C0:55:0A:39:24:2D:09:DB:B6:C6:1A:4E
            X509v3 Authority Key Identifier:
                keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:2a:fc:93:66:9c:d8:77:d1:0a:3c:a9:bf:8a:2a:c1:f8:
         3d:25:d7:b1:7e:bc:74:63:ac:c5:cc:fb:80:ff:22:0f:c4:29:
         d3:a5:ab:b7:a4:fb:f6:d0:45:7f:09:87:14:6a:bc:a8:9c:45:
         6a:69:7b:93:e3:8f:07:6f:c8:af:f8:ef:6f:29:c5:47:dc:2f:
         22:01:09:e6:60:9f:55:52:fa:ee:41:d7:6d:d3:f0:95:cd:7d:
         f9:94:c2:d6:bb:00:c2:ea:f3:d7:34:ad:54:36:b9:67:9a:80:
         6c:bb:c8:84:25:55:13:83:53:52:36:65:51:0a:08:ee:1b:6b:
         6f:5c:8a:cf:b0:87:a4:70:5c:c8:26:58:c0:87:cf:15:4f:a7:
         ff:98:c0:f6:d4:82:60:04:b9:07:8a:83:d9:4a:b8:ce:b0:d7:
         cd:07:60:94:07:f5:3c:6d:bc:3e:3a:b8:be:12:d5:b8:56:35:
         bf:24:b0:28:e6:38:9d:2b:e9:40:a0:94:22:07:0f:59:41:0f:
         79:f8:f6:98:33:e2:9d:f6:47:f2:ae:57:59:f9:fc:12:d3:35:
         78:e5:98:3d:2d:2f:dd:aa:07:23:9e:cd:d2:9b:65:5f:61:be:
         86:51:95:6e:d5:5d:93:a5:b0:b9:05:38:b5:6f:90:f8:70:02:
         0a:a6:8f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:00 2026 by rpki-client