Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File:                     DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier:          9MnBdDdGmgUy5lVYSLk1amoIJkM7EcslRAes4mVwlyQ=
Subject key identifier:   8E:40:2F:A8:A9:8B:97:9A:F5:82:26:8C:E2:4B:CE:28:CB:8C:EE:38
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer:       /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number:          0123
Signing time:             Sun 01 Mar 2026 23:30:44 +0000
Manifest this update:     Sun 01 Mar 2026 23:30:41 +0000
Manifest next update:     Sun 08 Mar 2026 23:30:41 +0000
Files and hashes:         1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: 0f3ulxBKt8LYn6FwgBOnxl/fs9lBttzYqk8Z7q6zcCM=)
                          2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: tMsqu6nSNXbRdgdOGNgxf6SRIE8d03QJp/vSSHoCY4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
                          rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
        Validity
            Not Before: Mar  1 23:30:41 2026 GMT
            Not After : Mar  8 23:30:41 2026 GMT
        Subject: CN=69a4cc23-7bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:01:3a:40:ee:e0:eb:61:fd:6c:2e:52:97:
                    e7:68:4e:94:64:19:0e:d6:16:5a:bf:51:f9:19:27:
                    f7:cc:d8:74:ce:74:2d:35:ca:9c:cc:ff:cd:6a:52:
                    11:17:5f:94:f7:64:29:f2:63:80:9c:2a:a3:67:40:
                    d8:32:c2:a7:d8:bc:27:c8:0a:1f:e5:06:31:bd:35:
                    49:8c:85:9a:66:69:24:3d:dd:7e:de:f7:23:8f:17:
                    d5:2d:2c:d4:9f:b1:4a:0f:ce:9d:51:99:dc:56:38:
                    75:b7:a1:e8:d4:32:45:59:06:40:ff:f5:fb:e2:f2:
                    df:fa:cd:bc:02:37:c5:9d:58:d0:9b:ea:d8:de:6a:
                    3f:1b:27:cd:b3:dd:07:82:9f:69:d7:bb:43:4f:d3:
                    82:22:b7:64:cd:5f:79:7e:9c:90:83:c0:67:09:1b:
                    64:a6:e7:3d:32:fb:fe:93:c7:55:68:61:68:7f:15:
                    74:5c:24:00:7f:7b:a5:a3:63:55:d6:33:e4:cd:16:
                    a9:5f:6f:28:d5:22:7d:12:51:15:d8:52:49:15:d7:
                    80:e0:59:93:24:26:d0:63:5b:95:a1:0c:56:6c:95:
                    2d:e6:c1:68:a2:45:aa:5c:bc:50:b0:c3:94:93:fe:
                    97:62:af:6e:a5:5d:14:e6:de:87:8a:95:21:81:b3:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:2F:A8:A9:8B:97:9A:F5:82:26:8C:E2:4B:CE:28:CB:8C:EE:38
            X509v3 Authority Key Identifier:
                keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:b7:d8:59:32:72:a5:c1:9a:af:86:fd:e2:82:75:0f:fe:4f:
         88:76:93:a3:1f:c9:8c:96:38:91:a1:f3:ae:8e:49:ad:83:a0:
         e0:03:bc:be:1b:c1:79:7e:eb:34:63:c8:ed:0c:f2:24:2a:95:
         2d:05:3c:19:0b:dc:99:60:ce:92:82:90:cc:20:47:bc:15:93:
         76:a1:00:43:69:19:ab:7c:a3:7f:30:d8:2b:60:19:e3:ec:6b:
         db:b7:bf:be:93:5f:e3:62:d4:7c:67:f8:49:f1:ab:8a:bb:50:
         26:b6:2c:c4:13:c3:ff:b1:6d:7b:27:09:c9:f0:ad:f3:56:72:
         5b:da:e3:f5:a6:fb:20:f4:72:3b:2b:cb:39:67:01:27:af:5b:
         cf:3e:e2:45:81:4a:f4:94:02:67:76:b1:52:e8:d3:5b:83:91:
         8e:71:82:7a:38:d6:6c:bb:ca:02:fe:a7:e2:29:5b:4c:4a:c5:
         3b:17:45:1d:d9:8f:3e:75:38:ee:8b:f3:39:90:d2:c7:d5:4f:
         fe:a9:2b:da:c9:9a:f5:67:25:e3:98:49:1f:51:ae:59:30:63:
         33:9d:b2:3c:97:e4:f1:aa:60:45:78:b5:8d:78:04:96:3c:5a:
         5b:7b:a8:c7:77:0d:7b:4e:be:78:54:ec:b0:fe:6f:bb:b2:68:
         44:2b:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:42 2026 by rpki-client