Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File:                     fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier:          PHVeaYXl2vsZJ6lvuuFrJ5k4RQsGxqawIaZ3L8MUEFo=
Subject key identifier:   04:A7:7B:13:60:B6:6F:B9:B2:F8:86:80:3B:31:B7:70:6E:B5:77:55
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer:       /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number:          0197
Signing time:             Mon 02 Mar 2026 02:59:12 +0000
Manifest this update:     Mon 02 Mar 2026 02:59:08 +0000
Manifest next update:     Mon 09 Mar 2026 02:59:08 +0000
Files and hashes:         1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: Fyin9FMdVWJt62IaVCKyJ+kLo1EbVMzVX7Aplq1aopk=)
                          2: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=)
                          3: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
                          rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
        Validity
            Not Before: Mar  2 02:59:08 2026 GMT
            Not After : Mar  9 02:59:08 2026 GMT
        Subject: CN=69a4fd00-f228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:99:9b:16:5e:61:69:2e:9d:55:13:ae:c6:
                    5e:90:a0:c4:86:be:5d:5c:f6:b4:9b:9a:0d:6b:e8:
                    b4:8c:4a:95:5d:38:d5:41:5b:b8:fa:86:97:04:dd:
                    dd:02:7a:7f:4e:5a:08:e4:cc:77:51:4b:22:04:fb:
                    67:d8:76:6a:dc:ef:90:60:56:9f:58:df:c2:ee:d5:
                    b6:87:3f:ce:18:a4:54:24:52:c1:5b:b3:21:da:01:
                    8a:67:9b:ec:d1:0a:4c:b2:7e:96:a3:cb:96:3e:b7:
                    d6:2f:7a:e2:a5:64:eb:15:a9:e8:ad:32:9d:5b:ae:
                    cc:d2:3b:d4:4c:3b:83:7b:34:39:77:2a:43:2f:2f:
                    25:da:7a:cf:2f:eb:90:1e:27:4a:36:ea:8a:eb:59:
                    60:d7:65:4e:d4:75:f9:3c:d1:d0:33:bf:82:5f:e1:
                    27:ea:49:2c:cf:38:33:61:58:c7:1c:c7:ed:60:44:
                    55:7a:7a:e4:e5:ce:c1:40:3d:05:26:02:b9:90:54:
                    38:c2:d3:4b:39:24:c5:d8:21:d6:a8:7c:51:6d:c5:
                    2c:be:1b:97:01:7f:ce:84:47:6a:78:ea:c8:12:de:
                    39:f3:f4:22:cd:c8:ad:9f:a2:2a:67:27:7d:d8:88:
                    de:07:11:db:2b:e4:5f:f4:c8:7e:8a:a3:52:ac:ea:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A7:7B:13:60:B6:6F:B9:B2:F8:86:80:3B:31:B7:70:6E:B5:77:55
            X509v3 Authority Key Identifier:
                keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:48:02:76:aa:33:53:4a:6f:10:1e:b4:f1:7c:95:1e:6e:4e:
         fd:cb:4a:f1:5c:0a:e1:b7:7b:d3:c4:c4:64:27:be:fb:07:88:
         d9:e1:9c:56:e4:16:5d:75:4b:ac:17:90:de:e8:62:13:3a:bd:
         f9:ed:66:df:47:e6:3b:d5:ec:94:53:2f:5a:3c:8c:f8:7f:22:
         1e:79:8c:b0:d4:fd:db:3c:41:1f:e5:fb:c1:77:8d:4c:8f:6d:
         c0:23:89:95:75:20:aa:66:79:18:38:d4:37:d3:f4:d4:4d:9e:
         a3:2d:2b:20:06:bd:78:62:06:e3:61:3e:26:8e:4a:81:c0:5b:
         fe:f1:ca:e6:e4:40:fb:70:28:5c:64:35:ad:4c:f7:38:f1:2d:
         b7:fa:89:88:d9:1d:4d:a1:11:8a:e7:54:fe:ed:ad:c7:37:25:
         68:4b:8e:c3:50:b6:76:66:c7:42:d9:bc:f2:e0:00:69:77:2d:
         b8:35:f0:31:10:97:d5:e6:70:9e:27:55:24:14:90:33:9a:98:
         ca:c1:be:15:26:a2:bc:5f:57:ea:1d:03:21:fa:53:21:c7:fd:
         07:48:57:df:3d:46:0a:c7:80:73:3b:aa:4c:01:15:88:41:15:
         b0:b1:77:48:71:d9:ff:08:29:63:95:14:a7:75:92:1d:1f:72:
         54:ba:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:13 2026 by rpki-client