Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
File:                     C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json)
Hash identifier:          qcGz1n10SD10/qCACwAVbTrjuK43IB1MXj39lx0Om4o=
Subject key identifier:   53:6F:1D:DC:01:9B:82:85:95:BE:3A:9F:D6:61:A4:0A:E2:C5:8B:39
Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
Certificate issuer:       /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Certificate serial:       1B44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
Manifest number:          1B2B
Signing time:             Sat 28 Feb 2026 16:19:51 +0000
Manifest this update:     Sat 28 Feb 2026 16:19:51 +0000
Manifest next update:     Sat 07 Mar 2026 16:19:51 +0000
Files and hashes:         1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: E/q0FAMQMTI4ZugRqgIF6OazOGrtAJpQrugtNs8jPn0=)
                          2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: VxTzxn1U/OXB+CWBddl3uRVosJ2/DdLLOs7eSbWCVE4=)
                          3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: cOF8JZVjOiBr4JiE8EO1rOQQwXV4Z3nniDklK+R3JE4=)
                          4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: BfNK79rwC7mJWHyNf4je/JUK8nGDNnAVVEA5gBoGvSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
                          rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6980 (0x1b44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
        Validity
            Not Before: Feb 28 16:19:51 2026 GMT
            Not After : Mar  7 16:19:51 2026 GMT
        Subject: CN=69a315a7-7532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:b2:71:55:c0:fd:93:cb:a1:96:07:79:a8:
                    ad:0c:37:a5:f9:08:1c:e6:41:f3:be:70:0d:fe:4c:
                    70:92:3d:f3:0d:5a:1c:aa:5d:5f:a0:ac:1d:45:19:
                    73:cb:db:ec:7a:18:2c:d4:75:2a:d5:87:61:86:91:
                    71:82:da:60:4b:bf:99:40:c2:aa:62:7d:5d:5b:8a:
                    83:ff:18:32:ab:3a:18:8c:f9:9c:39:be:d1:e5:63:
                    2c:56:f9:4c:b9:6d:d3:0f:96:d2:8c:f6:8a:98:17:
                    84:9a:cd:4d:e9:9c:3f:e7:6c:24:42:9b:2f:d3:d4:
                    1c:7f:c1:93:e5:4c:52:19:aa:6e:d8:b9:9d:ec:9d:
                    38:e0:f7:75:aa:f5:96:3c:6c:58:3e:44:b0:88:96:
                    c9:59:73:5a:5f:e5:dc:0f:60:ac:6c:da:be:0a:a0:
                    5c:d7:8b:8e:e5:ee:69:86:1a:ba:2d:2f:b6:ca:9f:
                    2b:8b:9d:8e:51:40:79:73:68:3a:d2:35:69:e9:b1:
                    51:5d:34:74:ec:9d:85:58:27:d0:cc:34:9a:a4:ba:
                    a1:88:9c:14:fa:d8:5c:f9:18:0b:14:de:44:ef:04:
                    66:5a:16:20:58:34:21:4a:75:6b:c0:aa:ca:08:e0:
                    14:6e:dd:2f:9a:e5:41:9a:d5:2d:aa:38:79:72:2c:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6F:1D:DC:01:9B:82:85:95:BE:3A:9F:D6:61:A4:0A:E2:C5:8B:39
            X509v3 Authority Key Identifier:
                keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:32:af:dd:de:aa:31:ec:83:be:8a:06:62:80:5f:3d:15:b3:
         c4:2f:1e:6c:e4:01:8b:d6:75:06:01:f1:ff:48:78:8a:02:b5:
         72:60:98:ae:e6:45:12:d6:61:42:02:62:33:22:0c:12:f2:10:
         3c:98:0e:f0:f9:c2:b6:81:7f:76:10:60:f8:5e:1e:78:28:2d:
         3e:37:67:d5:ac:0f:c3:35:8c:f5:37:d1:d5:d7:f7:6a:92:f7:
         3e:81:6c:b8:e5:ef:54:d2:f9:d5:c1:bd:5f:80:da:85:0d:6b:
         73:1a:e6:16:97:23:93:25:a3:0b:ec:d4:bf:ae:a6:04:39:e7:
         53:09:21:ad:25:12:4b:71:68:3a:ff:39:81:02:11:47:ce:d7:
         7b:73:9b:29:f9:9e:e5:7a:cd:4f:9f:64:ce:7d:90:88:1e:2e:
         35:77:1c:7e:71:49:ae:d7:2d:58:fc:61:2e:5e:8b:24:76:bd:
         32:66:11:b1:0b:42:4c:bb:73:2a:9a:e4:79:ca:99:c0:f5:38:
         dd:42:7f:2b:f9:98:be:46:fe:23:46:9f:e7:95:8c:f7:c4:30:
         17:88:b7:a1:8a:64:a8:15:43:4a:00:72:61:08:4b:f1:87:a2:
         5a:6c:cb:03:d1:73:2f:d6:6d:57:4a:1e:65:f6:41:d4:a6:c1:
         f3:eb:af:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:02 2026 by rpki-client