Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
File:                     W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json)
Hash identifier:          bdwwjKYzGcq14Uz1XhnfHfsLm/A+53xDURUHzjxs1ZM=
Subject key identifier:   4B:61:7C:47:AD:BA:47:9C:F3:82:55:DA:8B:42:1F:2B:FD:41:6E:FF
Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
Certificate issuer:       /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Certificate serial:       02F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
Manifest number:          02ED
Signing time:             Sun 01 Mar 2026 02:09:32 +0000
Manifest this update:     Sun 01 Mar 2026 02:09:32 +0000
Manifest next update:     Sun 08 Mar 2026 02:09:32 +0000
Files and hashes:         1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: ZfWcD55NyKzVVgIxo1AgSLGNssk1DxjkfXK92zEwg6Y=)
                          2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: adnEf98Mcb3FBLEgu6RCjZRZJRsX9673EsNnM8Jow7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
                          rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
        Validity
            Not Before: Mar  1 02:09:32 2026 GMT
            Not After : Mar  8 02:09:32 2026 GMT
        Subject: CN=69a39fdc-344e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cc:e5:79:33:6e:2d:59:32:d5:9e:1d:df:18:
                    eb:07:8b:65:6c:a7:c7:d0:16:67:ba:26:19:f6:a9:
                    6a:ae:ed:80:9d:d8:d9:5c:6b:3b:f9:2d:fb:27:7a:
                    51:46:ae:22:50:ff:6d:c7:94:2b:6d:c3:d6:8c:6a:
                    a8:3e:f3:6c:e1:8c:ab:ab:cf:c2:98:10:3a:72:ba:
                    60:bc:36:15:4d:b6:fa:c3:dd:7e:6b:d9:3f:af:8b:
                    b6:91:e6:68:d8:eb:65:0b:07:e8:11:3d:b4:75:1e:
                    81:5e:74:5b:e8:55:56:f0:3b:fd:04:fd:03:78:b0:
                    50:27:45:43:30:aa:e2:40:33:d9:77:d9:e5:62:1f:
                    ad:6e:de:e6:77:40:08:0c:cb:d4:47:36:ba:50:4f:
                    f2:a3:f9:58:25:6a:1f:59:fc:9e:31:aa:08:46:00:
                    0e:6d:8a:c7:b9:cb:32:ed:6f:bb:31:76:74:3a:96:
                    4a:92:1c:ff:7b:5f:aa:4c:5c:07:43:fd:0b:37:f2:
                    f5:d7:ea:8a:61:37:5f:4f:39:00:c4:cf:6e:57:0f:
                    7e:04:6f:ad:a4:e6:9c:48:e4:ca:81:65:94:45:56:
                    13:59:8a:49:36:0c:ed:a5:2c:2c:bc:23:12:9c:bd:
                    48:75:36:82:cb:6c:c7:90:f2:2d:a7:85:a6:86:1a:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:61:7C:47:AD:BA:47:9C:F3:82:55:DA:8B:42:1F:2B:FD:41:6E:FF
            X509v3 Authority Key Identifier:
                keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:79:00:06:fc:66:35:ef:59:93:86:f6:5a:d9:fd:7f:34:3c:
         86:94:6f:21:7e:29:98:58:0c:9d:52:8d:9a:6a:8b:3c:0a:87:
         b9:48:3f:03:6a:48:bf:e0:6a:77:fb:26:fe:36:a6:d3:d2:ec:
         10:34:4c:ce:6e:8e:df:7a:99:b0:45:9a:04:2b:01:27:82:35:
         5c:b4:90:bc:e1:ab:b4:b8:84:22:2b:47:dc:59:4c:1b:3e:0f:
         4f:2d:9a:0a:5a:96:a6:28:57:87:30:c5:3d:8f:18:97:af:52:
         61:14:50:56:9e:2f:46:bb:5b:48:8a:0d:11:fd:40:c7:52:d8:
         56:a4:94:c4:da:aa:51:9b:f3:d4:28:78:43:28:ef:8e:0a:f2:
         8f:e5:c4:f7:76:e8:8e:99:e6:7d:23:26:3a:51:f3:24:ff:31:
         c6:9e:af:da:bc:fb:15:5a:9b:3d:2f:5e:86:fd:d3:a8:df:43:
         fc:d7:9f:9a:d2:51:c7:84:2f:60:06:2e:33:3c:22:f3:4b:a4:
         57:63:22:41:2b:28:33:de:f7:01:ba:63:22:01:bb:4c:17:99:
         7a:ce:99:47:7a:45:07:9a:89:98:68:a1:d5:d0:f0:ec:ed:93:
         55:21:f2:43:20:96:52:87:fd:cb:07:d6:ce:30:75:f6:24:37:
         8c:20:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:25 2026 by rpki-client