Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
File:                     AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft (raw, json)
Hash identifier:          UYpYPwaBCvvFC5zqfRSPUTWLoay/M0Zot4oh+m+vc88=
Subject key identifier:   4C:A7:23:71:FA:19:CE:8D:1B:02:9C:D8:61:A5:6D:BD:70:A4:17:A2
Authority key identifier: 01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9
Certificate issuer:       /CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
Manifest number:          01B3
Signing time:             Mon 02 Mar 2026 02:14:10 +0000
Manifest this update:     Mon 02 Mar 2026 02:14:09 +0000
Manifest next update:     Mon 09 Mar 2026 02:14:09 +0000
Files and hashes:         1: AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl (hash: 0cmdPYXfJYLOCiqH6JHSEiNmED0bUFgG/gQXksvn7NU=)
                          2: 110A7248841F11EEAF514B09C4F9AE02.roa (hash: WZwK2r73IsiV+oGVGxRJ30SomvnS8YITANsfQ8tCVa0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl
                          rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3C52, serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
        Validity
            Not Before: Mar  2 02:14:09 2026 GMT
            Not After : Mar  9 02:14:09 2026 GMT
        Subject: CN=69a4f272-e4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:92:48:df:16:94:02:a2:06:f9:6d:c5:c1:
                    1a:c3:78:f6:63:2f:b2:6f:d0:d7:8d:9a:99:6d:51:
                    9f:4f:01:8b:3f:b4:b3:9a:7a:3f:9b:06:32:e1:13:
                    c5:10:ca:29:94:95:3a:76:f4:dd:83:d6:4d:d9:fe:
                    90:10:e0:d2:54:12:ce:5a:04:bb:73:4b:38:24:a6:
                    69:b4:aa:b9:89:13:6e:0e:2c:70:c5:42:e9:5c:78:
                    d8:24:f4:66:38:89:c5:7e:43:d4:89:03:dc:de:90:
                    e4:ab:aa:78:0a:a8:51:3c:05:b9:ac:94:2b:f5:c0:
                    7b:05:f4:51:4d:16:be:85:92:56:20:d6:e2:02:1c:
                    12:8c:94:c3:3b:40:99:8c:5c:50:b3:aa:a4:bd:80:
                    af:85:1c:50:97:5e:a0:11:dc:93:a8:5c:14:dc:37:
                    39:51:b9:9a:36:2b:a4:ba:e5:94:73:ac:df:6c:52:
                    ff:01:12:52:4b:f7:3c:8a:d4:0e:0d:06:06:c7:66:
                    15:d6:8d:07:33:bc:f7:2e:ec:b5:2c:a8:35:8f:c1:
                    8b:16:5c:15:32:93:da:9b:0e:9e:24:23:21:4f:05:
                    5e:7e:53:0c:24:d8:cb:75:f0:52:d7:f3:ac:7d:2a:
                    f7:c7:95:c9:e1:e1:ce:d0:1f:bb:51:1c:cd:39:aa:
                    cb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A7:23:71:FA:19:CE:8D:1B:02:9C:D8:61:A5:6D:BD:70:A4:17:A2
            X509v3 Authority Key Identifier:
                keyid:01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a4:74:40:48:5d:46:bf:df:42:24:aa:85:8a:cd:c9:61:ae:
         e1:b1:6c:7f:33:54:68:5f:3a:1b:8c:cc:44:39:9c:99:cd:41:
         e3:9f:83:46:c8:7c:eb:b6:59:59:04:7c:fa:5d:11:a3:6f:77:
         79:28:28:15:8c:1f:b4:9a:2d:8c:52:fc:7f:fe:9d:00:38:f8:
         21:39:4b:4d:37:d4:2e:f6:ae:9a:a5:88:6a:b1:c8:22:cf:29:
         97:ab:52:67:bd:e9:03:d8:06:4b:fd:6d:ca:42:b9:00:8a:41:
         a3:67:2c:b8:26:9d:06:ad:1d:23:7e:98:2e:90:51:82:a5:f6:
         30:a3:ca:a1:f2:c5:25:82:db:1a:96:ae:ed:4d:78:bd:83:b1:
         c5:95:74:3a:33:96:45:ab:62:b6:c7:b2:cc:65:26:e0:f0:a5:
         55:51:a7:de:f3:64:38:eb:f5:d4:0a:5d:ca:f0:15:d9:df:1c:
         5a:99:d5:cf:13:ad:d3:7e:1e:34:75:19:87:38:a6:3c:77:ac:
         a4:f4:a5:bb:f5:45:61:96:c9:d7:4d:fc:de:62:3c:b3:62:96:
         00:c7:ef:2a:99:99:82:d0:33:6a:34:c0:2c:79:31:2c:1f:a5:
         97:85:34:4f:85:72:67:e7:1f:7f:db:ec:68:4b:1f:92:3b:2c:
         6a:55:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:39 2026 by rpki-client