Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft
File:                     Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json)
Hash identifier:          hSl/XWLPpbkCUSH3ZtJ6Z9LRgEPaAyt+bPc6kNhlfR0=
Subject key identifier:   9A:58:8B:5F:4C:8F:92:8B:9B:4F:7B:A1:D7:EF:DF:A5:41:20:DA:EE
Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46
Certificate issuer:       /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46
Certificate serial:       0B55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft
Manifest number:          0B4B
Signing time:             Sat 28 Feb 2026 19:27:08 +0000
Manifest this update:     Sat 28 Feb 2026 19:27:08 +0000
Manifest next update:     Sat 07 Mar 2026 19:27:08 +0000
Files and hashes:         1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: qnqlqzfzN5B7Ta/2AUUbpBkLxxABstCgJ5xO8/f7cXo=)
                          2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: aVacR7/wj1VIzGBrnaOluTH3f3VZ8UIKZ24oS1wFsTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl
                          rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2901 (0xb55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46
        Validity
            Not Before: Feb 28 19:27:08 2026 GMT
            Not After : Mar  7 19:27:08 2026 GMT
        Subject: CN=69a3418c-528f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:00:2e:73:8a:d2:2d:72:49:b9:a5:0e:08:
                    19:c8:42:59:5e:fb:33:41:d9:fc:61:e3:c8:4a:94:
                    79:75:bb:dd:cb:c3:ec:d9:b1:70:6d:4e:68:ca:ab:
                    45:24:f1:b3:6f:0b:47:f5:83:5b:87:1d:ce:69:e9:
                    ee:75:48:29:51:27:59:12:6a:28:68:43:17:03:23:
                    50:88:bf:9b:14:02:1a:98:00:fe:c7:a6:34:51:db:
                    95:08:b9:b7:ae:77:77:02:40:3a:7b:2e:b7:4c:3b:
                    53:7a:ac:51:80:e9:50:6c:94:57:3f:8b:a8:d8:b3:
                    f3:05:8a:1d:56:82:ed:01:6d:c5:bf:24:93:18:19:
                    9d:07:28:7d:02:34:f2:53:82:fb:6e:09:90:5e:26:
                    72:ec:f0:25:0c:4e:d4:cd:1a:c4:6e:bb:0b:99:cf:
                    e4:39:f9:c5:08:0d:42:ec:7c:8e:95:aa:04:63:9f:
                    a9:7d:e2:5c:64:ad:c1:38:ac:87:da:b0:7b:02:24:
                    98:b4:e3:1f:56:90:f6:a5:55:d3:d2:4d:b0:9d:e6:
                    fd:4e:c9:d7:f0:ac:fb:b8:5c:c0:b3:1b:b7:93:1b:
                    0f:7e:71:af:b7:1f:ef:e4:f6:9d:42:48:ba:6c:75:
                    ad:35:7d:2c:d3:23:c1:3d:89:d4:cc:56:93:86:d3:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:58:8B:5F:4C:8F:92:8B:9B:4F:7B:A1:D7:EF:DF:A5:41:20:DA:EE
            X509v3 Authority Key Identifier:
                keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1f:0a:6a:81:d1:90:85:33:10:52:6a:50:3a:35:aa:98:80:
         69:eb:2e:4e:31:1c:f1:38:30:3d:5f:2f:22:06:75:84:7a:41:
         19:de:36:e5:bf:8c:e2:ae:3c:ec:29:6a:92:bc:3f:de:3e:6b:
         33:6d:41:55:4f:46:c7:19:3e:60:1b:be:35:cd:6b:d4:67:dc:
         f8:1b:9d:7a:20:f0:61:59:ef:8d:31:dd:ca:45:9b:b2:b6:cc:
         46:3a:af:b1:5b:a6:9c:90:04:2b:41:c4:b4:5f:e3:8c:43:a6:
         5f:b9:00:15:77:23:3a:ef:53:ad:98:1e:7f:81:4a:4b:1c:28:
         e3:f7:cb:35:e2:e6:e8:cf:e0:19:a1:b9:3f:ec:ba:18:a7:e4:
         24:2b:e5:ec:17:17:9c:f8:a6:c1:34:dc:e9:48:97:4c:fa:4a:
         b1:ed:c3:a2:c3:31:84:89:52:90:99:da:e6:e7:b7:f7:6f:7a:
         a4:56:6a:1e:53:1c:c3:87:b4:d8:64:8e:a2:7d:0c:25:54:70:
         ac:1d:a6:25:48:b3:6b:2a:b8:ec:91:39:ee:96:d5:d0:93:ea:
         71:ec:1c:ba:39:3d:a6:40:be:ef:d4:a0:8e:d9:1d:d1:0c:22:
         0d:8d:50:f0:36:4b:c7:de:02:0f:7f:8b:7d:8f:33:69:df:86:
         0c:be:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:21 2026 by rpki-client