Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
File:                     rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft (raw, json)
Hash identifier:          zxK+iTpIOdS9n4oQM3a0mwZr/6fcBMafDqdIkj1Evdg=
Subject key identifier:   00:EF:EF:61:35:7F:95:28:A4:8E:C6:5D:0A:29:7D:3B:55:92:AD:41
Authority key identifier: AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE
Certificate issuer:       /CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
Certificate serial:       0700
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
Manifest number:          06F4
Signing time:             Mon 02 Mar 2026 00:55:34 +0000
Manifest this update:     Mon 02 Mar 2026 00:55:32 +0000
Manifest next update:     Mon 09 Mar 2026 00:55:32 +0000
Files and hashes:         1: rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl (hash: gEtqlYuwSj8ieJ0Jh6B7TUrlI2wfxGluT1NN8tfaBnw=)
                          2: 517F49AA822611EB8990276EC4F9AE02.roa (hash: RrZk+p0zNBNmCSRZQeBU2yPZoYmWPxbT7RETjVLD76E=)
                          3: 6AC62B967FD711EBA2ECB43BC4F9AE02.roa (hash: SQFJ7Wc/wjOeD0z1iMaM5gKsZ5f6hkCS3qqNtIgacZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl
                          rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A799E, serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
        Validity
            Not Before: Mar  2 00:55:32 2026 GMT
            Not After : Mar  9 00:55:32 2026 GMT
        Subject: CN=69a4e006-55d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:80:07:46:b2:b8:37:9a:b4:e1:12:ea:48:ef:
                    d4:a5:ef:dd:24:60:d6:79:a6:93:73:e4:e5:51:13:
                    05:2d:1b:f0:b5:41:7b:79:8a:12:10:e1:09:d8:d0:
                    d6:f8:2a:36:98:fb:1a:7a:be:cf:c5:ae:31:13:da:
                    97:0c:a9:30:2a:70:7d:d9:d4:af:fe:1e:16:c8:fd:
                    f3:cb:fc:68:40:b0:26:0d:4f:16:0d:6b:6a:70:f3:
                    2c:24:2a:a1:60:ac:64:70:7f:69:f9:c7:0f:90:ae:
                    f2:a5:74:08:bc:36:cf:70:da:48:6c:e8:b3:9e:95:
                    8f:1f:b0:47:8c:b6:e6:4c:b9:f5:29:20:0b:3b:f6:
                    80:8e:f8:61:82:64:1d:17:dd:cb:8c:8d:50:00:1f:
                    42:07:ba:d3:e0:07:cd:b8:cd:23:a2:49:9e:c9:ca:
                    7d:66:60:fd:be:cf:b5:0a:eb:f3:8f:16:e3:02:19:
                    c3:b3:3f:1b:af:55:03:5a:03:cb:86:dd:f5:3d:23:
                    2f:2b:ef:6c:80:32:0f:2c:64:8b:0d:c6:f4:0f:3d:
                    b1:e7:66:3c:b0:73:57:63:a6:3d:74:7f:1e:ab:d3:
                    31:97:55:bb:e9:fa:3b:92:32:ab:85:7d:44:0d:7c:
                    fd:c3:af:ca:fe:22:f4:63:39:f1:c8:3f:2b:53:46:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EF:EF:61:35:7F:95:28:A4:8E:C6:5D:0A:29:7D:3B:55:92:AD:41
            X509v3 Authority Key Identifier:
                keyid:AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:92:c1:84:46:47:12:70:67:44:5f:8c:8b:48:e5:54:30:40:
         b0:68:d1:8d:2b:db:da:09:5f:aa:5b:12:0c:3d:41:cf:c9:85:
         06:74:19:e8:0a:b5:72:31:66:2e:06:6a:a6:39:96:ee:3b:7b:
         04:ae:34:27:8b:3f:a3:e0:38:f5:98:ca:72:af:f2:e2:c6:80:
         79:f6:26:4c:4f:cc:00:05:10:60:2d:39:a8:06:cd:38:ab:34:
         75:cf:6d:55:f8:4e:94:ca:19:d0:8a:9b:1a:65:89:e1:0c:74:
         02:c6:5a:47:5f:f3:0e:88:5b:a6:69:07:63:46:e7:99:9d:6b:
         e3:c2:1e:e1:66:c2:76:bd:e2:1b:16:82:0a:09:06:fc:d3:70:
         97:9b:0e:fb:6a:e8:79:18:0c:16:2a:cf:76:52:6f:05:49:d6:
         7d:0a:e3:b3:94:10:23:ca:26:14:9e:e6:2f:78:ff:a6:0a:93:
         b8:1f:e7:51:1a:c5:63:8e:5a:82:e1:f1:82:ac:23:54:9e:6e:
         ff:4f:d1:93:3e:96:40:bd:20:f7:e5:fe:4c:1b:c1:3d:80:d4:
         60:9e:ab:a6:26:2a:f7:f7:9e:36:11:e8:f9:f8:d4:ce:e8:da:
         d9:d0:eb:ed:17:f2:6c:88:7e:aa:8d:eb:df:19:27:2b:89:72:
         44:2f:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:57 2026 by rpki-client