Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
File:                     tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft (raw, json)
Hash identifier:          cow/dCX4xBBRt9voAINRHUrejZzIHC4z9kno09pZwXc=
Subject key identifier:   39:16:A8:64:36:4D:31:0F:EB:F9:63:36:9B:A8:4F:17:91:7D:54:89
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Certificate issuer:       /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial:       066A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
Manifest number:          0660
Signing time:             Sat 28 Feb 2026 23:08:18 +0000
Manifest this update:     Sat 28 Feb 2026 23:08:18 +0000
Manifest next update:     Sat 07 Mar 2026 23:08:18 +0000
Files and hashes:         1: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl (hash: bOiaqQABe/DAFKGHHlp9KxajSt9T48suEprZwKdJuhY=)
                          2: B3DED5C6BAC911EB8533B615C4F9AE02.roa (hash: DsgHJydaVuiP2/JOiaGz7+8hzbblvMVmJcBWMtJLoOw=)
                          3: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (hash: 0H9iVWOcGuVvN/MVa3XeV+I+PG+LvrsVTNSfk98zbHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
                          rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
        Validity
            Not Before: Feb 28 23:08:18 2026 GMT
            Not After : Mar  7 23:08:18 2026 GMT
        Subject: CN=69a37562-7b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:dc:1a:e3:05:c2:2f:5e:fc:56:43:af:4e:
                    63:13:a6:0c:a8:14:b2:72:b2:3e:5b:b7:35:c9:85:
                    df:9d:4c:4f:7f:04:79:e1:f9:04:31:f5:90:11:77:
                    80:e4:38:72:a9:c5:ad:7c:71:75:11:e9:15:9a:80:
                    a1:03:e8:d5:da:28:06:ee:25:76:af:b6:43:5c:27:
                    45:f2:02:7f:0f:80:bf:b0:c0:98:f4:23:8f:d3:be:
                    68:45:ac:63:8e:1a:b7:c0:bf:d4:f8:41:21:9b:24:
                    a7:b0:57:1e:c9:cd:38:4b:9d:65:ac:cc:9d:55:d1:
                    bd:63:c9:12:af:13:2c:c8:d6:20:23:19:64:22:a6:
                    c5:6c:46:78:61:00:23:a6:f6:5f:cc:28:ec:10:dd:
                    ad:1e:f8:20:85:d1:13:3e:24:b7:4e:6b:07:29:43:
                    4d:5f:9d:c1:70:13:62:1c:0a:21:81:f0:cb:57:0a:
                    71:24:88:83:59:a5:60:98:8e:95:20:c6:d4:4f:64:
                    2f:8d:a5:3c:31:20:36:8e:03:2a:a7:3e:4f:ba:b4:
                    69:c3:d5:28:ac:0b:ed:42:3c:79:d7:f4:97:42:d1:
                    9e:52:fb:96:ee:47:84:37:bc:c1:13:ca:a0:00:2e:
                    cd:64:e6:29:61:3b:56:75:31:d0:3b:8d:12:e0:9c:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:16:A8:64:36:4D:31:0F:EB:F9:63:36:9B:A8:4F:17:91:7D:54:89
            X509v3 Authority Key Identifier:
                keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c3:d0:12:6e:25:a5:57:2d:fd:b3:b2:a5:3a:ed:03:92:51:
         5a:b8:68:e7:d3:5a:f4:c1:80:ca:07:5c:41:c5:1e:c9:17:52:
         21:62:95:35:82:2a:33:ac:51:53:a2:c4:72:d5:0d:07:44:11:
         f3:ed:95:d8:cf:e7:37:30:ad:d1:64:6a:1a:0a:22:d0:c8:b6:
         b8:bd:c1:81:ab:d1:98:9d:50:7f:ce:ca:5f:1e:f2:e8:c9:ba:
         d0:a9:35:57:46:cf:d6:bf:18:15:ad:e3:93:30:e2:ff:9a:d1:
         98:14:09:f6:48:32:9a:a0:e2:9f:bb:59:2a:d2:ab:9f:2c:37:
         da:a4:1b:f4:7f:db:5a:11:ed:87:d5:81:d1:19:3e:83:29:de:
         b5:bc:8b:fc:c9:6e:bb:68:f2:bf:fe:34:69:d1:e4:f9:2f:0e:
         ec:7d:73:71:9f:4a:c9:34:a9:0a:f0:f6:bf:8e:6c:72:b2:06:
         65:bd:d7:c5:8a:f4:8d:4a:bd:97:07:3c:dd:d7:4e:da:4d:80:
         be:86:e8:ef:0b:62:dc:89:49:50:2f:e4:53:d5:60:7c:c4:79:
         fa:95:20:00:11:3c:7e:d1:97:28:0e:65:2b:b1:7b:a6:69:53:
         fb:f1:f9:4a:ea:a6:55:e4:f8:19:eb:d1:37:ba:64:61:5a:eb:
         9a:70:f4:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBDOTUxMTAvBgNVBAUTKEI0OEU0MDczQjgxMEJDRjlDNzk0ODE5QzgwRkRFNzFE
NTNGMkRFMkMwHhcNMjYwMjI4MjMwODE4WhcNMjYwMzA3MjMwODE4WjAYMRYwFAYD
VQQDDA02OWEzNzU2Mi03Yjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzMHcGuMFwi9e/FZDr05jE6YMqBSycrI+W7c1yYXfnUxPfwR54fkEMfWQEXeA
5DhyqcWtfHF1EekVmoChA+jV2igG7iV2r7ZDXCdF8gJ/D4C/sMCY9COP075oRaxj
jhq3wL/U+EEhmySnsFceyc04S51lrMydVdG9Y8kSrxMsyNYgIxlkIqbFbEZ4YQAj
pvZfzCjsEN2tHvgghdETPiS3TmsHKUNNX53BcBNiHAohgfDLVwpxJIiDWaVgmI6V
IMbUT2QvjaU8MSA2jgMqpz5PurRpw9UorAvtQjx51/SXQtGeUvuW7keEN7zBE8qg
AC7NZOYpYTtWdTHQO40S4Jy8cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkWqGQ2
TTEP6/ljNpuoTxeRfVSJMB8GA1UdIwQYMBaAFLSOQHO4ELz5x5SBnID95x1T8t4s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5NS9ERTJGRjFGNEJB
QzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQbkhsSUdjZ1AzbkhWUHkz
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RJNUFjN2dRdlBuSGxJR2NnUDNuSFZQeTNpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEM5NS9ERTJGRjFGNEJBQzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQ
bkhsSUdjZ1AzbkhWUHkzaXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADsPQEm4lpVct/bOypTrtA5JRWrho59Na9MGAygdcQcUeyRdSIWKVNYIqM6xR
U6LEctUNB0QR8+2V2M/nNzCt0WRqGgoi0Mi2uL3BgavRmJ1Qf87KXx7y6Mm60Kk1
V0bP1r8YFa3jkzDi/5rRmBQJ9kgymqDin7tZKtKrnyw32qQb9H/bWhHth9WB0Rk+
gynetbyL/Mluu2jyv/40adHk+S8O7H1zcZ9KyTSpCvD2v45scrIGZb3XxYr0jUq9
lwc83ddO2k2Avobo7wti3IlJUC/kU9VgfMR5+pUgABE8ftGXKA5lK7F7pmlT+/H5
SuqmVeT4GevRN7pkYVrrmnD0DA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:17 2026 by rpki-client