Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
File:                     rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json)
Hash identifier:          DruS9QUEYmouOoffEjqYCeldHvpeu9/OEQGS2bDMED8=
Subject key identifier:   7B:B2:44:EB:E1:6C:81:5A:C3:F5:11:E8:AB:55:5D:65:7C:B7:99:53
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Certificate issuer:       /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial:       2539
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
Manifest number:          251A
Signing time:             Sun 01 Mar 2026 23:56:31 +0000
Manifest this update:     Sun 01 Mar 2026 23:56:29 +0000
Manifest next update:     Sun 08 Mar 2026 23:56:29 +0000
Files and hashes:         1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: w4CtW/CvST1iOorxWXeTVduLYHwi90Dp3ln2MZ5oJ7w=)
                          2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: xKKHcAd3EgZ3AY/vIRBsZ9z+syexMW6jFrkknKhX0G8=)
                          3: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: xw9T3a2Z489pZsdQ4x8tWBqT2E0wqOqSqnMIFsl4bOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
                          rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9529 (0x2539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
        Validity
            Not Before: Mar  1 23:56:29 2026 GMT
            Not After : Mar  8 23:56:29 2026 GMT
        Subject: CN=69a4d22f-01bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:d6:ad:b1:1e:e2:4b:9f:f0:b8:13:a4:48:
                    6e:a0:20:98:e1:28:76:62:d1:f0:bb:66:45:d1:28:
                    20:1a:14:b8:2e:78:e3:2c:fd:b2:50:fb:58:f9:95:
                    6f:88:05:46:5c:f0:29:28:d5:0f:5c:16:26:28:51:
                    63:2c:eb:f4:82:61:a8:71:ea:a4:4e:80:48:23:24:
                    9f:1d:93:73:a9:04:3c:83:91:f5:43:49:9d:3f:9f:
                    5c:8f:2f:f0:9a:ac:4e:e7:c4:d7:cd:2c:44:80:f9:
                    d2:14:59:2d:e7:3c:54:d0:8c:35:58:ea:21:c7:a0:
                    47:fb:1d:fd:49:90:c8:18:7b:7f:e7:4b:cf:25:11:
                    66:82:30:cd:84:3a:86:e9:eb:fb:2b:f4:3b:14:d1:
                    78:7c:38:4c:49:73:11:ae:78:f7:79:a5:b3:cb:6f:
                    7d:b9:6f:08:d8:78:e1:09:ef:2b:1e:1c:67:11:c5:
                    1a:83:45:1d:18:61:59:bf:ec:9b:76:8e:63:ec:0d:
                    ad:5d:26:ae:20:21:4f:df:68:94:08:ec:ab:62:6f:
                    73:d0:98:59:da:57:09:c4:28:ac:56:a4:ce:bc:cb:
                    f0:f8:df:97:34:ca:29:ad:30:69:e1:32:77:8e:8a:
                    c0:f1:63:d5:a4:b5:8a:2a:1c:b4:9c:c9:3c:5a:30:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B2:44:EB:E1:6C:81:5A:C3:F5:11:E8:AB:55:5D:65:7C:B7:99:53
            X509v3 Authority Key Identifier:
                keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:49:fb:c6:aa:63:59:c2:9c:f9:50:3f:b6:fb:dd:ce:4b:13:
         68:d5:13:10:b6:d3:88:84:ae:d0:e1:79:3f:d4:d0:9e:18:54:
         d8:9d:82:42:65:91:90:de:10:70:2d:41:6b:eb:5b:3b:14:27:
         84:eb:07:a2:c2:2b:49:bd:40:a1:00:f4:26:22:b5:15:2c:9f:
         0b:7e:af:87:65:4f:4c:63:92:af:a1:64:86:c7:3b:74:08:86:
         58:79:a8:8b:4a:93:46:75:56:8f:78:5b:b1:5f:d9:02:18:65:
         1c:30:65:63:ff:00:e3:d8:4e:0b:56:4e:00:3e:1f:3b:fa:5a:
         83:ff:58:75:11:91:fc:b4:4e:68:4c:32:1d:98:b6:84:bf:fb:
         22:e5:1f:2c:78:7b:ba:dc:c4:b6:12:29:49:46:ea:c3:ce:f5:
         06:c1:ba:a3:06:06:1a:3d:57:27:47:74:3a:a3:22:e5:3e:98:
         e0:7b:ff:f9:83:0f:d6:2d:cb:e6:44:74:17:79:63:49:ff:7a:
         10:c2:66:ab:77:c0:fb:6c:0e:41:3d:6f:a9:cd:de:3f:f1:f1:
         12:27:10:9f:19:e3:cf:ce:e4:25:1c:0b:b0:d0:98:c6:88:5b:
         89:37:f0:87:47:0e:b4:d4:54:7d:c2:24:4f:52:60:a5:c8:0d:
         f9:0e:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:31 2026 by rpki-client