Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
File:                     lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json)
Hash identifier:          TN6xbx/r1ERJcMMplIbxnrHDG95qb5LHUkOe34+m7ow=
Subject key identifier:   48:16:2B:9C:96:CA:79:9D:C6:ED:16:FE:BD:D2:54:27:72:18:E2:80
Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C
Certificate issuer:       /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
Certificate serial:       1822
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
Manifest number:          20B0
Signing time:             Sun 01 Mar 2026 23:35:12 +0000
Manifest this update:     Sun 01 Mar 2026 23:35:10 +0000
Manifest next update:     Sun 08 Mar 2026 23:35:10 +0000
Files and hashes:         1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: U0pSc3jkTVqVAwx0TKIAOvckTnj9jxgNgClmeXcD4Z0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl
                          rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6178 (0x1822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91582D9, serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
        Validity
            Not Before: Mar  1 23:35:10 2026 GMT
            Not After : Mar  8 23:35:10 2026 GMT
        Subject: CN=69a4cd30-6b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:df:00:46:75:ea:10:6b:29:e5:22:62:aa:
                    e6:8e:88:1a:fc:f8:d4:ac:3d:4c:63:73:e6:eb:47:
                    ab:35:7a:f7:f7:94:34:58:7c:f6:5c:b5:a1:ae:28:
                    b4:f6:3f:62:dc:ab:7e:84:f9:55:67:af:5d:a9:86:
                    28:0b:9d:e4:62:b0:44:61:ab:0d:f6:79:c9:dd:f9:
                    5a:7c:fb:cb:8d:b3:db:14:93:82:ad:9d:93:1c:cb:
                    6f:a9:c6:28:b3:ae:ac:74:da:3f:1a:d8:0f:5e:97:
                    6d:1a:ce:40:5b:18:7c:95:bd:1a:d1:d3:64:a0:f0:
                    21:76:28:3a:8c:1e:24:6c:57:93:6b:06:0c:62:87:
                    bd:01:ce:8d:d9:1e:ea:43:73:7b:53:1b:5d:91:19:
                    17:ff:c8:1c:48:69:84:64:c2:3e:d0:63:eb:6c:15:
                    ea:30:ca:50:cb:73:28:8e:8d:d6:7b:9b:76:5b:af:
                    a1:85:fc:26:c9:ba:86:97:14:00:b6:cc:88:6e:50:
                    0e:e4:2e:07:87:9c:ac:8f:78:31:99:51:fb:80:e6:
                    18:f0:92:02:84:5f:bc:ab:5e:66:31:bd:58:9c:33:
                    4a:ce:4d:b6:5f:2c:dd:7a:ea:b3:6c:b5:ec:02:a7:
                    6d:af:49:4a:3d:f5:31:e7:48:8d:32:3d:8d:33:94:
                    f0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:16:2B:9C:96:CA:79:9D:C6:ED:16:FE:BD:D2:54:27:72:18:E2:80
            X509v3 Authority Key Identifier:
                keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:9d:00:27:41:c1:ea:cf:48:75:f6:5d:33:43:8f:b1:82:
         76:b7:fc:d5:f4:6e:8f:c2:99:46:aa:71:29:b8:1a:90:21:b1:
         35:3e:f6:29:f8:3f:11:18:0d:4a:03:64:4a:87:ef:15:39:48:
         ba:3d:80:07:0d:ac:6f:6d:94:aa:13:c3:4f:f6:f3:20:f8:2b:
         d8:29:5c:d6:80:3b:97:bb:46:f0:de:f3:07:53:55:48:5f:93:
         4c:85:43:da:a6:3e:27:97:1c:c3:8a:b1:e5:02:cc:b6:ab:3a:
         72:8f:50:03:9c:4c:24:b6:6d:c3:7f:e2:cf:8e:b2:89:ce:29:
         06:e1:68:21:72:2f:1b:4b:c4:d5:ec:f7:69:e7:f9:97:09:ad:
         62:cb:1a:a3:af:e4:01:09:cc:8a:54:8a:89:ea:24:19:3e:56:
         67:d2:db:0b:27:19:60:74:0e:58:4a:f5:0c:10:e7:49:35:f6:
         1d:ef:f1:09:22:aa:57:dc:b7:49:fc:cb:7a:1d:e3:9b:ae:f3:
         7f:66:85:71:d5:2e:6d:9f:4b:dc:77:80:ad:5f:94:77:ba:60:
         9e:a3:a6:0c:9e:a6:9d:44:d2:80:af:74:5f:6b:0d:29:6b:1c:
         34:80:a4:5a:c7:30:72:75:62:54:49:0b:82:4c:d4:07:9a:a9:
         aa:59:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:42 2026 by rpki-client