Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
File:                     f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft (raw, json)
Hash identifier:          m6Km0Kba9hI0giQRHQTfTVJPmU585XuwJqNETmJQc3U=
Subject key identifier:   CB:CB:EC:50:4D:5C:95:9B:6C:12:5C:13:71:1D:5E:85:DE:1D:7C:62
Authority key identifier: 7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C
Certificate issuer:       /CN=A91A7D50/serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
Certificate serial:       0469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
Manifest number:          0463
Signing time:             Sun 01 Mar 2026 00:53:32 +0000
Manifest this update:     Sun 01 Mar 2026 00:53:32 +0000
Manifest next update:     Sun 08 Mar 2026 00:53:32 +0000
Files and hashes:         1: f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl (hash: iHGl3PMAvLNNPNvaQas4OWrSurhImyJsIPxE2GtiJWg=)
                          2: 95EE2A18A8C511EC8F560C42C4F9AE02.roa (hash: 9bIT9Wti4Q16RNara0yjrmc8CnpGQxIQgk88L2RqepI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl
                          rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D50, serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
        Validity
            Not Before: Mar  1 00:53:32 2026 GMT
            Not After : Mar  8 00:53:32 2026 GMT
        Subject: CN=69a38e0c-3055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:b1:00:59:79:44:72:55:08:c7:fe:55:c0:
                    64:ff:82:dc:d1:0d:cd:ee:e2:0a:01:2a:50:68:ee:
                    66:0d:e7:a7:b4:2f:a1:46:07:67:34:66:96:2b:26:
                    c8:ad:31:b4:82:c4:f4:fd:f1:00:4d:33:93:f6:05:
                    a0:b4:ed:f4:23:da:c7:9b:9d:37:3c:aa:4c:0a:66:
                    65:7b:de:48:09:71:c7:da:d7:d5:57:da:6e:27:a3:
                    bf:71:98:c3:9f:4e:e4:97:5f:c1:a1:15:94:5e:0a:
                    cf:e2:8e:57:fd:31:a5:5c:de:af:45:70:4b:51:8f:
                    34:8b:cf:71:16:c9:88:c4:56:69:d0:8a:36:55:65:
                    5b:33:23:8c:e4:37:d0:5c:2a:8f:0e:f8:60:30:d9:
                    0a:6f:81:f2:c0:45:77:7d:5e:b0:34:d0:a8:a3:ad:
                    e1:21:2a:d3:ac:11:3f:16:f4:70:b0:cd:e1:92:80:
                    dc:5c:a0:f2:ea:19:5b:40:42:36:13:08:3f:c4:b2:
                    af:73:3f:e6:77:f3:26:4a:55:b3:e1:36:1e:3e:cb:
                    5e:7d:9a:c5:66:42:68:4e:8f:2b:30:24:74:28:a3:
                    ae:91:1c:3d:af:73:e1:14:7c:cb:a1:ab:17:fb:02:
                    83:27:32:fe:03:63:63:81:33:f9:43:7d:20:5b:2a:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CB:EC:50:4D:5C:95:9B:6C:12:5C:13:71:1D:5E:85:DE:1D:7C:62
            X509v3 Authority Key Identifier:
                keyid:7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:23:0c:33:d6:5c:b0:0d:d0:82:b7:a4:46:64:05:90:e9:45:
         71:2c:3b:47:92:c8:94:e3:0f:da:a1:e5:da:47:a0:2b:5c:ab:
         a3:02:98:4b:06:47:90:c1:03:cb:55:86:69:59:b9:7f:6f:6b:
         d9:82:0a:1e:95:9b:71:67:81:85:97:8e:d1:06:4f:02:6a:ff:
         31:05:89:26:aa:b3:18:56:46:77:d5:86:23:78:44:7a:d9:be:
         74:2b:35:43:87:85:b3:13:d0:d8:16:5b:f9:81:f8:0f:25:8b:
         f5:35:d5:7b:5d:a3:d7:f9:9d:ba:bc:7c:71:db:9a:d9:87:62:
         3c:cb:17:8f:00:f2:c9:60:c6:46:b8:45:cc:fe:6c:bf:ac:6c:
         a3:a2:ad:63:6d:55:40:ae:67:5e:aa:72:be:4f:f5:75:00:79:
         e4:d1:47:25:17:00:f7:91:fb:8d:8d:f8:17:bf:53:1b:ba:60:
         29:31:9e:76:a3:8c:23:cb:38:57:02:33:e8:00:02:e5:17:2e:
         de:ce:94:7c:21:0e:58:1d:3c:8f:ad:ca:5f:ec:2d:d7:97:ee:
         3d:ce:f7:5a:29:e0:29:04:21:b0:12:55:9e:9a:33:be:be:8f:
         15:f9:8b:02:a6:9f:0f:7e:44:ae:d4:93:cc:07:14:12:ef:ee:
         19:be:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:09 2026 by rpki-client