Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
File:                     pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json)
Hash identifier:          DNqtU2Ldw9I7Zh81ZN8AFgxxiSBYh5uv/+B6hqpoAlg=
Subject key identifier:   FB:FF:30:32:BB:52:2C:B5:46:CD:9D:73:CF:34:3D:46:33:C6:DB:A7
Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Certificate issuer:       /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
Manifest number:          0100
Signing time:             Sun 01 Mar 2026 07:13:25 +0000
Manifest this update:     Sun 01 Mar 2026 07:13:25 +0000
Manifest next update:     Sun 08 Mar 2026 07:13:25 +0000
Files and hashes:         1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: otn1SQXSb8KGHGXTXZZ8OKcmgmu0zWrpodfQiVOkxYg=)
                          2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: GgkYKX0rvLLAl9jFjsCJGv7qCn12Qh8j9soV+v0r+iY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
                          rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
        Validity
            Not Before: Mar  1 07:13:25 2026 GMT
            Not After : Mar  8 07:13:25 2026 GMT
        Subject: CN=69a3e715-7bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:19:04:b9:e4:bb:a9:f6:a1:f2:c7:76:f7:88:
                    83:e2:0b:a1:d6:19:8e:fb:80:57:7c:9a:71:8b:88:
                    72:8b:11:b6:c2:95:2b:a2:6d:0f:d1:4f:b8:25:d1:
                    23:8b:20:5d:ba:47:92:3d:82:71:24:94:8d:a9:3a:
                    1b:aa:95:68:6b:19:23:41:23:c1:c9:97:15:50:5a:
                    d2:82:01:ec:ad:bd:ce:46:43:31:8c:87:8b:9c:e1:
                    1e:37:f3:08:c4:ee:05:eb:5e:f9:9a:9f:79:b7:95:
                    70:65:f5:20:3d:4f:69:66:f1:9b:31:90:7a:f3:8b:
                    e7:4f:2c:28:1b:ac:fd:36:21:f4:31:9d:d0:c8:05:
                    ff:6c:ec:5d:ab:41:34:64:06:ce:3d:13:f3:be:e6:
                    3f:57:ed:22:de:a7:85:5d:5b:7d:c7:9d:0d:06:0d:
                    7f:88:c2:58:ff:ec:d8:33:4b:fd:7a:54:ca:0b:23:
                    4e:1f:50:ed:62:19:1a:5d:18:ab:0e:8d:e1:66:73:
                    2a:a0:01:a4:a9:d2:32:55:61:7c:71:77:2b:62:61:
                    5e:29:6a:0b:c9:d6:0c:1b:07:6f:70:92:53:4a:3e:
                    d9:87:04:2a:a4:eb:f7:fe:5e:3c:36:4c:ee:31:e9:
                    9b:c6:b7:e3:31:70:a6:50:da:af:a8:c5:fc:92:d3:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FF:30:32:BB:52:2C:B5:46:CD:9D:73:CF:34:3D:46:33:C6:DB:A7
            X509v3 Authority Key Identifier:
                keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:18:b3:bb:62:8e:4b:cf:a3:13:4d:78:0d:94:6b:91:71:1d:
         d1:0e:a6:e5:27:c0:4d:ce:a0:f9:a5:76:76:db:07:23:c0:5d:
         02:e7:c6:48:d9:dc:f8:26:18:0f:75:96:bf:d7:2b:be:f2:ec:
         4a:4c:85:43:34:11:06:df:0e:9d:ab:1b:bd:39:75:1f:c0:d2:
         80:c2:15:57:eb:d0:00:5b:b9:7f:e2:ec:10:cf:e4:9a:30:3e:
         7a:1e:5d:77:e0:01:52:d0:54:0e:a9:1a:a5:f5:5f:11:3f:15:
         8b:50:fc:42:e0:31:c6:83:d8:38:33:19:75:41:fb:c0:78:1a:
         8f:0e:84:a6:59:39:23:7d:75:0e:82:45:2b:36:42:34:75:7a:
         1a:1c:ad:64:44:b0:4f:08:8e:92:0a:34:0e:0f:65:88:dd:f1:
         f6:e1:f6:70:66:3a:9e:a9:63:67:69:f9:b7:d6:d0:e6:ec:6c:
         0f:29:11:ee:06:ef:4d:8f:21:44:92:c7:c7:a5:29:a2:8c:df:
         c5:5f:e1:e9:37:7c:1c:51:1a:e1:48:14:39:96:16:5f:9a:1c:
         dc:4c:b2:36:e7:55:e7:50:44:e1:76:35:a9:c3:7d:a8:9d:78:
         96:e6:cb:f9:b5:a3:86:50:bb:74:3e:02:5e:8e:07:1e:31:e1:
         ea:e6:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:31 2026 by rpki-client