Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File:                     tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier:          KG/MXAlQE46um5Yx24u3Whxf28Km0zzLBSLUk9GcYRY=
Subject key identifier:   08:53:70:C0:B1:A3:CB:12:AD:CD:88:16:71:C3:1E:CB:A3:7D:A5:15
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer:       /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number:          015D
Signing time:             Sun 01 Mar 2026 06:02:14 +0000
Manifest this update:     Sun 01 Mar 2026 06:02:14 +0000
Manifest next update:     Sun 08 Mar 2026 06:02:14 +0000
Files and hashes:         1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: 41PT2AyGYmz41GsMTs/mY9Svi1ABCradP+Idhr/gHmY=)
                          2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: SSYQhoePXSEZdBWsz2dSUFdjtoPBSwBZmvZLvzmRmE0=)
                          3: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: 81XCmtMAkz8d5MFKkbARa3r3fmwCBxTjGKLV+BXxDFc=)
                          4: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: P3/wZ7DQvbJJfKWvdajqCfHfPIC9vT8MvrKGyjWYukc=)
                          5: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: ZSCw86aRTNxpcp5h59Ua7FuiYhnQ7JZYo+fxXzI0qEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
                          rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
        Validity
            Not Before: Mar  1 06:02:14 2026 GMT
            Not After : Mar  8 06:02:14 2026 GMT
        Subject: CN=69a3d666-5b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:2f:fd:d6:96:e4:00:4a:b8:f7:74:67:b5:
                    50:08:20:34:29:de:ed:6c:ef:d3:f8:de:62:ef:10:
                    d5:b7:6d:0b:64:76:ed:19:cf:0f:64:9f:d7:7d:04:
                    35:33:e6:f4:2e:3d:a6:5b:65:8e:50:dc:06:d1:18:
                    56:3e:ea:62:8e:cd:88:4f:6f:72:f3:bd:9b:be:ed:
                    c1:1a:89:8f:66:c3:26:6d:f6:48:c0:b4:e9:38:95:
                    0b:86:ab:c6:6d:ae:cc:45:22:5c:b4:28:a2:9d:34:
                    3f:23:07:f1:1d:80:a1:e7:68:dc:de:b1:a8:c5:4e:
                    1e:7b:b4:da:a8:1f:1d:55:f5:b9:a7:e1:7f:29:77:
                    e9:08:ee:33:f5:ad:35:f3:8f:a6:2b:10:4a:f2:52:
                    9c:4d:4f:00:7c:5c:a7:96:bc:25:2c:15:95:d2:9e:
                    23:e5:ab:81:e3:56:0f:dd:ef:b5:22:4a:54:73:95:
                    9f:61:9b:fb:b3:20:98:63:6e:ba:e2:d7:d2:4e:4e:
                    b6:87:b1:a6:44:fc:48:20:af:b4:1f:ed:c4:33:64:
                    17:34:9b:1b:6f:77:fc:9f:85:ca:57:64:1d:1f:27:
                    0e:fa:df:3b:42:0c:6e:2d:46:e2:83:45:bf:18:b7:
                    ef:2f:01:40:c3:36:82:3f:89:05:98:0e:5a:0a:27:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:53:70:C0:B1:A3:CB:12:AD:CD:88:16:71:C3:1E:CB:A3:7D:A5:15
            X509v3 Authority Key Identifier:
                keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:79:9a:c0:36:3f:c1:4f:0a:16:80:27:f9:1a:ac:b1:72:c5:
         1c:7c:d8:19:90:fa:fe:e4:4d:12:8b:55:b3:a1:c0:bd:2b:e1:
         97:5d:c1:8d:cb:2d:c0:c1:75:95:ea:e7:e5:3d:ec:eb:e4:bb:
         7e:d7:6a:5e:cf:ae:d9:23:49:e8:01:bc:51:9c:34:76:db:0c:
         8e:3d:9a:23:4b:df:4a:90:75:9c:75:74:a8:ae:7d:28:c3:fe:
         d4:fe:fe:b9:bb:67:cf:83:d9:34:3d:a2:ac:cf:39:8d:98:b3:
         26:45:91:6e:88:3e:44:85:c1:06:32:ac:0f:fe:2c:1f:03:84:
         b1:2c:10:5c:c2:7f:2c:ff:0b:98:9e:f6:3f:f3:84:81:d8:55:
         ce:cf:b1:78:b5:1e:94:cf:c3:6a:8d:da:98:d2:d4:54:64:f2:
         ea:b3:5f:4f:e2:0f:ee:fc:61:1e:fb:3a:39:d2:e6:40:cc:f0:
         e4:fe:45:0a:82:ff:f4:d9:17:15:6e:22:b0:6d:7b:b2:35:23:
         31:ad:cf:0c:20:a4:e2:96:0a:fa:b8:08:bb:70:d0:77:98:42:
         ba:4b:d7:7f:f7:d6:7c:df:a9:e4:41:05:2e:6a:fa:ce:ff:b1:
         49:a7:6d:dc:bf:69:d8:b4:b4:22:71:43:c3:28:0b:13:23:a7:
         36:3f:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:17 2026 by rpki-client