Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
File:                     g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json)
Hash identifier:          oNpMdcscmOMWtKCOBUkpJCXXzY10DJYH4WM2kYwSjLs=
Subject key identifier:   0B:81:C3:32:5F:01:F9:B6:2F:C9:AF:84:A5:D6:CE:F6:46:B1:AF:F4
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Certificate issuer:       /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial:       07F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
Manifest number:          075E
Signing time:             Mon 02 Mar 2026 00:24:08 +0000
Manifest this update:     Mon 02 Mar 2026 00:24:06 +0000
Manifest next update:     Mon 09 Mar 2026 00:24:06 +0000
Files and hashes:         1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: m86eMY6bl6VFe+GGCdDnpnEf75R3Z5qu3SgsscgH+Ks=)
                          2: DEA0CC98F49311F0AD6894B8746F56BC.roa (hash: AP8Httvv3MXSN3Zbhstxc7Mc+tY+yxqDGflYpBVgTRY=)
                          3: 756E0BBCEAE711EE88CD8641C4F9AE02.roa (hash: F9qzDXb2ETVj14lcNUq30Z9sFnnvqbyTNgRyrEZdsMI=)
                          4: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: 3XVBS/fTqlRh6IIe7RzFiy/Wa0ZSlvIPzHLw+7wGdvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
                          rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
        Validity
            Not Before: Mar  2 00:24:06 2026 GMT
            Not After : Mar  9 00:24:06 2026 GMT
        Subject: CN=69a4d8a8-bf0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:db:5d:b6:44:1c:92:4a:ac:ab:5b:e3:89:
                    4d:b4:c5:d2:ed:a6:54:11:0f:c2:9a:c8:ff:9e:ec:
                    1b:88:24:63:71:fd:38:21:ef:63:98:fe:73:48:a1:
                    99:6d:6d:61:87:4f:03:c6:2a:ba:30:e5:f4:a3:a6:
                    af:8c:ad:6e:dd:88:ee:72:30:11:a7:1a:af:8c:0b:
                    75:a8:c1:82:68:a8:c9:7c:1e:80:6a:94:c0:18:27:
                    3a:1d:bf:59:6f:7d:8f:d5:27:37:38:e0:97:22:86:
                    24:4b:d2:32:e2:02:8b:63:34:f3:d4:77:e2:e2:ea:
                    79:f2:62:90:63:bf:14:cc:49:df:b0:77:f7:3f:f4:
                    2e:4a:f4:55:7a:d0:1b:b5:c2:82:cc:c6:64:77:20:
                    e5:89:21:93:fa:88:30:f9:89:8b:74:c3:82:4c:41:
                    9f:8e:31:55:99:cb:8f:4d:88:6f:04:2e:32:fd:64:
                    84:f3:94:95:93:27:ae:b9:a8:26:f5:16:3d:85:66:
                    36:13:fa:b0:ab:b3:96:8c:ee:69:ea:8c:de:44:87:
                    26:29:3e:c0:68:48:fb:eb:f6:88:ab:ea:4b:f3:a2:
                    e8:53:2a:5d:b7:04:8e:7b:b8:ec:cd:f8:30:64:2b:
                    1d:54:61:a0:b7:55:95:a8:49:31:51:85:56:7c:00:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:81:C3:32:5F:01:F9:B6:2F:C9:AF:84:A5:D6:CE:F6:46:B1:AF:F4
            X509v3 Authority Key Identifier:
                keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:fe:34:9c:7b:df:9b:0f:bf:f6:75:5a:0c:de:ab:f8:df:
         cb:d6:f1:f2:48:03:c1:a7:7a:db:d5:b4:12:6e:f9:ab:2f:ca:
         78:bf:61:9a:09:89:79:ad:4a:2c:b9:f5:e5:74:df:26:fb:17:
         12:30:6d:04:6e:72:0a:db:80:5b:5f:c1:5b:3c:4f:23:8c:50:
         26:7c:fa:d3:4d:1e:47:1f:28:a9:74:b7:d4:45:4e:68:78:60:
         e5:8c:37:1a:7e:43:4b:58:f2:80:01:eb:2d:79:ea:b7:68:83:
         ce:cd:9e:50:48:d2:e6:63:0f:b8:4e:a2:18:99:8f:6c:62:26:
         49:07:06:94:e6:20:b4:08:f7:74:e6:f2:da:89:04:50:80:e4:
         41:f2:8e:08:98:27:fd:89:89:12:29:8a:fa:ae:9c:bb:af:f2:
         2f:68:5e:54:93:29:d3:0e:e9:14:a7:cd:b8:87:fd:c2:ad:01:
         9d:4d:11:ad:b5:40:3e:83:87:e3:01:f7:7b:21:1e:12:c3:e9:
         10:4d:04:3d:dd:9d:1a:9c:ea:7b:2b:36:cd:f1:6c:3d:1d:b4:
         27:f8:bf:39:f6:a9:f9:f5:03:57:8a:34:18:33:8e:bc:57:51:
         d9:93:7a:0b:7e:b9:16:ee:af:9f:7a:81:33:d4:d1:85:bc:c9:
         4b:10:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:19 2026 by rpki-client