Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
File:                     9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json)
Hash identifier:          XfCB//Y26m84mWmQ8ceoIcieQk76IGGtpcnbqiT7wJY=
Subject key identifier:   DE:07:75:5C:C9:FD:54:8F:C7:B7:4A:BB:FF:93:4B:3D:AF:55:7A:B6
Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
Certificate issuer:       /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
Certificate serial:       01B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
Manifest number:          0761
Signing time:             Mon 02 Mar 2026 00:31:15 +0000
Manifest this update:     Mon 02 Mar 2026 00:31:12 +0000
Manifest next update:     Mon 09 Mar 2026 00:31:12 +0000
Files and hashes:         1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: nRLT7ZhvAezxhPEIkxokRSPZNJlczXpKxoKqA7/xsG4=)
                          2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: azVUar1N6hD3UsS78JcQLSff103BlToNlmsvJ16XoGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl
                          rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
        Validity
            Not Before: Mar  2 00:31:12 2026 GMT
            Not After : Mar  9 00:31:12 2026 GMT
        Subject: CN=69a4da52-e234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:4e:0f:45:87:36:0c:d6:7f:14:e1:49:ef:
                    86:d8:d4:53:2b:5a:e1:48:e7:25:5b:36:17:a2:51:
                    52:02:c3:da:c9:f9:80:a6:57:46:69:8f:ac:f5:37:
                    0b:f7:05:80:7e:03:62:cf:74:d9:3c:a3:24:09:e2:
                    76:8b:a1:fe:1e:5a:e8:d4:74:fc:3a:dd:84:18:92:
                    fd:66:e5:2f:75:18:01:04:31:0f:c4:2b:7f:a3:b6:
                    5c:ca:7e:b8:0d:df:75:f9:19:16:e2:c0:b2:fd:e0:
                    b7:7e:39:9b:26:d3:8f:82:b2:d1:67:ed:cc:ac:f1:
                    c3:14:49:b4:16:c5:53:2c:27:db:6b:c7:ed:f4:c4:
                    fe:e8:a1:65:2e:3b:a3:42:81:9c:33:25:83:d1:5f:
                    10:2b:ef:63:07:36:04:68:b6:af:93:d8:b2:e9:dd:
                    17:77:30:52:81:fe:0b:4e:58:a3:93:38:64:a4:0a:
                    8f:5a:60:60:b0:b7:33:7e:e6:ec:b2:8f:41:88:a5:
                    db:79:a1:c7:9b:5c:41:53:15:8c:88:56:11:33:5a:
                    6c:67:9d:c3:0a:e8:48:1d:cb:08:74:b1:fd:66:9e:
                    82:36:ee:df:03:4a:dc:6e:30:80:1a:50:d8:8b:61:
                    cf:b5:08:10:57:c7:7a:cd:cd:88:a1:b3:cf:bf:8e:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:07:75:5C:C9:FD:54:8F:C7:B7:4A:BB:FF:93:4B:3D:AF:55:7A:B6
            X509v3 Authority Key Identifier:
                keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:87:50:cf:df:39:72:77:9c:64:8c:6e:e9:e3:d5:8c:96:6c:
         56:0a:ab:61:17:ad:e8:9c:5a:7c:35:9f:c3:84:c8:08:e5:01:
         38:8b:1d:59:8c:74:cf:eb:52:90:ab:3e:2a:51:54:46:9e:a7:
         30:99:a5:b6:78:10:d1:2a:82:c4:33:c9:1f:c7:1e:c7:74:ff:
         d0:46:41:0f:9c:36:5f:2e:47:7a:f3:b5:7c:88:af:c7:63:3a:
         08:51:c6:2b:17:6f:95:af:19:74:3e:d4:92:b9:b6:3f:68:db:
         b4:dd:92:11:88:e5:83:ee:0d:a4:7c:29:75:38:3f:e1:8a:55:
         93:cc:81:94:a4:72:3e:06:35:63:ed:c7:fa:97:4a:f3:30:86:
         ed:a9:99:7a:10:93:7b:0a:13:56:98:2c:7a:8c:6b:40:ee:98:
         bf:a2:35:aa:a6:47:fb:b0:ee:f9:80:b5:b3:4f:3f:9c:3a:45:
         4b:73:e1:e6:8d:1b:23:1b:6b:db:5f:9c:a7:1f:b9:d6:d6:e3:
         e3:87:b0:07:b2:2b:0d:3e:39:3c:6b:80:21:85:a1:61:9e:9a:
         7c:37:88:a8:49:40:bd:4b:55:96:01:4f:26:3d:99:75:08:70:
         15:03:28:38:92:a7:c1:52:12:73:79:0b:1b:61:a6:19:49:82:
         24:2c:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:51 2026 by rpki-client