Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File:                     fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier:          fXadcmR0zjI0LfUdtUNK2mWJl9PRVaDHTMpYAL48PiU=
Subject key identifier:   59:3B:5E:9E:AD:5F:5B:4D:4F:38:09:9B:75:2C:B5:37:09:19:9C:E2
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       0404
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number:          03F1
Signing time:             Sun 01 Mar 2026 01:23:21 +0000
Manifest this update:     Sun 01 Mar 2026 01:23:21 +0000
Manifest next update:     Sun 08 Mar 2026 01:23:21 +0000
Files and hashes:         1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: e9VqsJ3tw4w/WtRFN/7z7V/KZdLqhzaZpt9LmHQlu/s=)
                          2: A201A06CB42B11F0849A7A7AC4F9AE02.roa (hash: naDT4mj+S+S7gTqhgPY4e5xWl/al1LzU7j3FtO35LsA=)
                          3: 791CD4FEFAE511F0B461E4A0696F56BC.roa (hash: zI9HkNVbs8d7RA5Sp/3yXRIliEGtk0JpLgOnjigy6SI=)
                          4: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Mar  1 01:23:21 2026 GMT
            Not After : Mar  8 01:23:21 2026 GMT
        Subject: CN=69a39509-d2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:8d:a1:7a:fe:c5:92:2e:6e:64:1b:f4:7d:
                    6a:0f:1f:d2:4e:6d:6c:aa:82:93:63:1e:98:63:36:
                    ed:7b:98:b8:b6:cc:48:e5:42:ef:27:e1:07:2b:e6:
                    d1:b4:b6:56:13:48:65:a0:07:2d:f9:28:6d:31:6b:
                    d6:e3:47:d8:92:3f:2d:1b:02:56:70:f4:d1:52:b9:
                    b3:39:1a:85:5b:98:25:60:d7:50:6c:0b:ad:33:4d:
                    32:05:46:31:15:9b:44:65:46:24:bd:c2:65:7f:31:
                    fa:5f:2b:58:9a:23:b0:6c:6c:7d:ce:3b:5c:88:e4:
                    03:4a:05:0e:0a:b2:dc:c1:22:95:a5:87:36:e7:86:
                    fc:89:4b:22:11:0c:f9:a7:a2:88:53:89:4c:46:96:
                    7b:dd:d1:2f:5c:c5:67:3a:20:2e:39:ce:52:0d:bf:
                    f3:7b:9d:50:3b:88:2e:95:3b:c3:7a:a0:76:cb:66:
                    c4:53:49:cf:63:a1:be:61:b2:9a:4f:47:27:03:f1:
                    24:a8:b0:c4:47:d8:57:91:d1:89:ea:09:bf:db:8d:
                    a8:ab:49:98:0c:27:0f:bb:1f:2b:4c:b0:8f:ef:7c:
                    e5:50:e2:0b:60:ba:14:3d:99:cb:3d:b3:51:45:ce:
                    70:c2:98:23:bd:8e:af:a2:41:e7:57:23:60:c8:3d:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3B:5E:9E:AD:5F:5B:4D:4F:38:09:9B:75:2C:B5:37:09:19:9C:E2
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:03:66:cc:f5:75:b3:5c:af:be:03:bc:e7:0d:57:f1:3c:c1:
         f1:9a:d1:62:29:0f:b2:44:c6:41:2c:da:3c:12:28:7c:1a:12:
         20:1d:d0:ae:6d:59:21:00:9d:7f:2d:1d:1a:34:b7:e3:50:01:
         c3:e4:4f:c8:92:fd:b6:21:f1:7d:8f:ee:79:a8:fb:01:fb:8a:
         38:9b:93:2f:59:44:56:31:cb:bb:5c:1d:98:56:ef:3b:e2:33:
         49:31:5d:5f:d1:4c:60:24:db:87:f0:72:d0:dd:bd:8d:b6:4e:
         50:b0:24:9f:9d:75:f2:9e:30:c8:60:b5:7c:22:20:a9:14:7c:
         15:ed:08:55:69:3a:63:70:6e:6e:79:b1:3a:56:9e:45:9c:36:
         68:d0:8a:20:72:5a:21:90:a3:15:07:36:a2:0a:f5:7e:10:5f:
         ef:65:0e:1a:21:07:41:9e:6c:20:d3:97:d4:36:4e:2f:c2:20:
         79:13:80:3f:bf:c2:f8:2f:55:33:eb:fa:8a:be:8d:51:50:4c:
         c0:13:9f:96:e7:07:e3:c3:ea:15:e7:61:8a:e5:6d:dc:9c:ef:
         36:dd:88:87:09:78:17:ce:e2:4c:82:fc:77:9a:80:df:2c:85:
         a0:2a:c9:4c:f7:37:bf:5b:3d:38:c1:88:78:2e:2b:34:b7:7f:
         4e:5a:d3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:47 2026 by rpki-client