Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
File:                     EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json)
Hash identifier:          mutSZwN3vKLNM6Ju+/ug/9O+JoFJlUZ+wB1g0TyJgcU=
Subject key identifier:   54:C1:49:3A:30:BE:10:54:98:BD:61:03:75:58:44:E9:43:74:2C:69
Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E
Certificate issuer:       /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
Certificate serial:       12B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
Manifest number:          12A4
Signing time:             Sat 28 Feb 2026 17:08:37 +0000
Manifest this update:     Sat 28 Feb 2026 17:08:36 +0000
Manifest next update:     Sat 07 Mar 2026 17:08:36 +0000
Files and hashes:         1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: Lch+lTKh7PnJ0is+9QyeNHEhN0+wTo4IRnWxe6Mf9to=)
                          2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: MvquEH/a5VRMBe+4/V1Mjgi0bUZmNUfrp5tM0XRFM18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl
                          rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4785 (0x12b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
        Validity
            Not Before: Feb 28 17:08:36 2026 GMT
            Not After : Mar  7 17:08:36 2026 GMT
        Subject: CN=69a32115-491b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:2b:63:8d:60:aa:15:c0:86:26:3c:51:34:
                    28:0f:9f:78:e2:84:4a:12:76:2c:66:9d:bd:15:39:
                    f5:f7:fd:e9:7a:59:8f:a5:a8:a2:51:84:d7:94:b7:
                    09:d0:1b:36:62:89:f4:fc:1d:5b:75:49:eb:aa:11:
                    aa:3b:e4:93:9a:f4:61:67:58:eb:a1:c2:58:16:f3:
                    72:d3:77:50:2d:42:c7:c6:de:0a:d3:4f:d7:ee:40:
                    87:4c:56:ec:8b:ca:23:6b:af:88:01:e3:5c:b1:57:
                    c7:f0:22:ca:51:b4:5f:4f:1b:d0:41:44:4f:41:66:
                    f5:92:f5:0a:07:b5:d5:4c:dc:43:77:ba:71:4a:08:
                    be:ff:a2:d0:37:7f:00:33:31:0b:20:b0:02:51:d0:
                    f6:05:6d:6d:e2:ce:4e:d2:18:d1:a0:b4:a7:6a:30:
                    f6:31:15:0e:3b:19:8d:a4:81:25:e8:45:10:01:f6:
                    37:00:1c:f7:14:28:fd:01:07:7e:77:0f:35:3d:96:
                    13:93:41:d8:0f:41:1b:f3:23:bc:ca:dc:3e:c9:e8:
                    c6:e1:b9:be:8f:2e:7c:65:bc:c1:d4:d7:48:d0:05:
                    f1:07:15:ce:61:fb:0f:2d:a5:0b:46:33:62:79:e5:
                    a7:27:f5:13:ca:28:69:41:05:49:44:7d:45:0c:d4:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C1:49:3A:30:BE:10:54:98:BD:61:03:75:58:44:E9:43:74:2C:69
            X509v3 Authority Key Identifier:
                keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:57:bd:a1:f6:9b:5a:41:74:be:ba:2d:d0:a4:d0:6d:bb:
         02:11:42:4c:e1:57:43:83:28:7c:50:ac:3c:59:b4:9e:ff:0b:
         01:df:9d:08:8f:bc:32:84:5b:12:e7:33:5d:43:c6:ab:7e:de:
         60:92:92:b4:22:31:4b:d6:a7:5a:0b:39:be:54:06:03:d1:34:
         b6:03:6d:83:1c:5d:f9:94:78:66:1d:77:fd:cb:d5:c7:aa:86:
         b6:82:ad:79:8c:49:77:d6:4e:7f:16:23:c1:0c:b6:93:45:f9:
         0c:a6:81:bd:b4:ac:35:bf:71:d7:ed:a1:54:f1:a0:7d:43:2b:
         4d:59:79:bb:86:5c:8b:79:17:b3:6c:c8:75:4c:97:d3:7a:73:
         d4:be:03:5e:32:bb:81:f9:73:be:8d:c2:6c:02:3f:6e:ea:cb:
         f8:d1:f8:82:10:aa:55:d1:fe:58:f8:b5:0f:73:ab:85:0c:79:
         6c:17:37:ae:d1:73:f3:75:d7:55:bb:3f:65:9d:cf:00:a7:1d:
         9f:f9:70:6d:a1:87:39:88:83:c1:a4:27:2a:27:e5:4e:a2:ce:
         f8:6c:37:b0:15:93:8a:e4:9f:97:81:a4:18:05:19:17:36:36:
         4d:20:dc:b1:6b:35:fe:18:03:aa:1c:80:13:1e:08:51:6b:85:
         d7:95:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:27 2026 by rpki-client