Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
File:                     RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json)
Hash identifier:          BZ4HzD67ZW9GaST1533YbIwblnfnoJHejGyyWeu7jVA=
Subject key identifier:   08:FF:26:BB:C5:C5:D3:5C:B4:8E:76:D8:8F:D3:19:E6:62:00:9D:94
Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90
Certificate issuer:       /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
Certificate serial:       030A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
Manifest number:          0306
Signing time:             Sun 01 Mar 2026 02:03:05 +0000
Manifest this update:     Sun 01 Mar 2026 02:03:04 +0000
Manifest next update:     Sun 08 Mar 2026 02:03:04 +0000
Files and hashes:         1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: tebEfsTT5dFhJ0z5kc6Nj+nlbUg1+K2j0z06E5hqCUc=)
                          2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: M5cm8ltbxVdRcxdqwX20eH12vgkHWhKoQMG7Vy7tBQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl
                          rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
        Validity
            Not Before: Mar  1 02:03:04 2026 GMT
            Not After : Mar  8 02:03:04 2026 GMT
        Subject: CN=69a39e59-915c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:94:31:46:f7:c4:84:b3:48:1c:da:cf:c6:c0:
                    2b:0a:4e:a1:f6:b9:89:d3:1d:42:c1:c6:e7:cb:12:
                    1d:1b:dc:29:27:2b:7e:a7:98:4b:21:be:e1:38:16:
                    34:07:94:ad:53:d2:f8:ec:96:b2:65:94:ef:1b:42:
                    ba:cf:45:ef:96:89:32:d7:32:f1:fc:7e:af:9b:64:
                    22:a1:37:b8:ee:26:7e:a6:70:db:50:84:2f:a1:b1:
                    6d:38:26:3a:4a:d8:e8:4f:3d:b2:c7:9c:69:c9:86:
                    03:57:d1:32:16:41:96:3c:f9:3e:a4:99:0a:0a:26:
                    da:1c:37:ee:da:e5:c4:b1:33:36:db:c9:79:81:3c:
                    da:a4:db:6c:13:db:58:9e:2e:99:99:70:ee:f1:ef:
                    7a:6c:5a:2b:d9:81:22:80:c4:f9:d6:45:8f:54:06:
                    94:55:06:99:ab:1d:4f:b8:2f:02:9e:ef:36:ff:9c:
                    fe:64:14:70:54:31:96:51:7e:d3:dd:a0:e0:41:4e:
                    f9:60:21:77:ca:b2:9d:61:4a:79:06:5e:41:bf:c4:
                    5e:43:0e:f6:53:e0:04:e0:05:49:af:e0:16:34:5f:
                    d4:1c:db:d1:7f:50:c2:cc:2c:f4:15:43:9c:f8:de:
                    c1:a7:f1:4e:a9:6d:ab:b4:ba:fe:5e:87:8e:b3:38:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FF:26:BB:C5:C5:D3:5C:B4:8E:76:D8:8F:D3:19:E6:62:00:9D:94
            X509v3 Authority Key Identifier:
                keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:48:39:57:ce:07:04:2c:7a:8d:a5:55:09:20:61:62:30:26:
         f2:55:05:14:97:d7:a9:85:6e:70:0e:35:f7:65:11:96:ed:e2:
         6d:d2:ce:2b:7c:d8:f4:88:52:1c:70:02:d6:43:05:6a:51:dd:
         9d:87:bb:90:db:40:8f:62:99:a9:af:57:61:de:7c:25:5b:1b:
         db:8a:38:78:02:6d:7e:bf:38:98:a5:66:d3:b3:74:e2:63:96:
         45:cf:cd:ad:9e:2e:10:e1:44:de:3d:d7:d6:94:ec:6c:98:73:
         6f:da:7b:c2:b6:a1:c4:cc:fc:bb:4f:f5:85:02:bf:72:82:80:
         82:ef:d6:6f:23:a8:16:c8:51:a3:1d:f6:9b:2d:a7:54:92:95:
         83:cc:4d:cf:7f:23:e4:53:16:c0:e4:9a:b9:29:b3:c5:2e:37:
         7e:53:45:6d:b3:51:a0:71:a1:60:c2:6d:43:08:7f:95:5f:b5:
         bf:c9:1b:ac:02:2e:23:97:8e:7d:1c:f6:1f:1b:fc:38:4f:81:
         71:d3:6e:08:38:17:d1:67:7f:a1:56:74:df:9d:d9:66:a1:53:
         47:30:3b:55:e9:3c:db:f4:6f:34:f1:2f:13:dc:6e:5f:d8:b5:
         e2:21:a6:99:24:e8:e2:42:77:1f:b1:ea:65:43:17:3c:8e:38:
         14:e2:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:54:04 2026 by rpki-client