Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File:                     X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier:          eWSgNdayO29fYSstB07lbRfIYiwfoY0PbWpTh6LcG8Y=
Subject key identifier:   9F:4D:DC:55:7F:F5:AB:EC:00:FB:FA:D9:41:CB:26:81:72:FD:50:63
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer:       /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial:       07C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number:          07B0
Signing time:             Mon 02 Mar 2026 00:05:13 +0000
Manifest this update:     Mon 02 Mar 2026 00:05:12 +0000
Manifest next update:     Mon 09 Mar 2026 00:05:12 +0000
Files and hashes:         1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: qK+JBTinhIra8USC5gaH2mLvI43Rq6foTRTAiGLALaw=)
                          2: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: FiJS4cFwnxf/JxN138pQZVaNHd2K178xuIIaltslIoU=)
                          3: FA93793637C011EB97405947C4F9AE02.roa (hash: ldXQuS9J+x+tniCGZo6XJVyJ4zu+DPyHUrx89zjZ/Vc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
                          rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1985 (0x7c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
        Validity
            Not Before: Mar  2 00:05:12 2026 GMT
            Not After : Mar  9 00:05:12 2026 GMT
        Subject: CN=69a4d439-f89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:99:2b:44:5c:13:ff:71:47:61:fe:99:f9:
                    12:90:ad:0f:96:45:03:39:21:5e:2c:00:6e:21:77:
                    28:94:54:0f:fe:3d:c2:e8:b4:80:9c:0f:45:77:56:
                    11:76:ad:0f:70:93:5b:c6:02:51:76:dd:b6:5e:43:
                    3a:ff:64:e8:7d:28:f2:91:57:9b:04:99:8f:e4:a7:
                    9e:86:bd:43:65:cc:d6:f3:b9:43:23:1b:9c:cd:ec:
                    87:3a:7e:02:1e:67:4b:db:48:a7:6c:4e:e7:72:f1:
                    f8:4f:e6:f1:3a:61:1b:c9:0d:bf:e4:b3:b3:63:f7:
                    4e:70:ed:22:2c:a6:c2:cb:18:c4:e3:22:64:48:34:
                    c6:45:40:d2:6d:5b:1e:c0:a5:7d:ef:50:7f:ab:8e:
                    85:9d:52:90:cb:54:9b:4c:29:3c:a0:7e:54:ce:69:
                    eb:ea:f0:75:4d:08:8c:00:6e:b5:d2:53:cf:7f:8e:
                    0b:ef:6c:be:38:3f:70:7f:2d:5d:1c:f5:65:58:9e:
                    41:f9:57:9d:92:e3:3a:e7:ca:8d:c4:52:24:05:0f:
                    46:9b:7a:b3:22:26:3b:98:31:c3:c5:2c:fa:11:d0:
                    e7:98:0f:09:3b:f0:db:72:75:a9:5c:a7:6f:61:cd:
                    d3:77:c7:a0:06:f6:e6:96:63:a0:d0:73:b7:9a:33:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4D:DC:55:7F:F5:AB:EC:00:FB:FA:D9:41:CB:26:81:72:FD:50:63
            X509v3 Authority Key Identifier:
                keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7c:73:a0:01:19:6f:20:a8:c3:b5:04:da:06:63:c7:90:9a:
         75:e1:64:16:b5:8a:63:eb:aa:66:bc:e3:9e:7c:22:8b:35:08:
         e4:f2:f5:4d:f4:03:b4:13:e9:14:e5:ce:33:e6:14:00:aa:af:
         3a:1e:b2:cc:e7:74:dd:a6:97:b7:cd:1e:a3:57:51:be:8a:b1:
         aa:50:d3:39:64:39:e1:60:2c:9f:69:ef:28:04:e1:24:59:8f:
         ee:65:94:b1:69:9a:9d:f9:61:6c:41:6a:0c:39:ab:8c:75:15:
         94:53:09:84:81:7e:96:3f:af:d5:26:59:c1:c6:43:66:75:e5:
         e9:5a:39:77:59:ea:ba:01:d0:43:a2:b2:92:70:c6:b4:fd:33:
         bc:1c:b5:d8:0c:89:0f:aa:b1:31:bd:a3:bb:4a:31:bd:4e:25:
         b6:7e:da:fe:aa:d4:d8:14:a4:9d:b9:93:00:91:70:4a:89:bd:
         72:08:92:43:bc:9f:fa:0a:02:46:8d:a1:0d:02:2e:7a:9b:92:
         47:7a:e5:19:99:f4:11:41:98:16:2e:df:aa:3d:54:d5:67:d0:
         b0:f0:7c:d7:4f:6b:bc:2b:a8:20:b0:ff:b8:c0:00:5c:43:2c:
         8f:e9:07:62:29:0c:4a:40:e3:4c:7f:ec:13:37:8b:de:c8:ee:
         e7:3d:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:58 2026 by rpki-client