Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
File:                     XRhbcS2TBWvydLi3qJjGklTruYM.mft (raw, json)
Hash identifier:          AJQjOf8tBGPBEP8DboI7BwxwfpTMbw8Kp/bWAENibkE=
Subject key identifier:   5A:6B:13:6C:CD:BC:A2:D3:99:3A:60:56:93:EF:82:E8:00:FF:9B:95
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Certificate issuer:       /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
Manifest number:          01B1
Signing time:             Sun 01 Mar 2026 05:24:19 +0000
Manifest this update:     Sun 01 Mar 2026 05:24:18 +0000
Manifest next update:     Sun 08 Mar 2026 05:24:18 +0000
Files and hashes:         1: XRhbcS2TBWvydLi3qJjGklTruYM.crl (hash: z3lnBcs8igH3l36D6v4F0zzwiMC/rsGQpg9yLQub0mE=)
                          2: 749BAA209BC911F0B2979527C4F9AE02.roa (hash: C9Jv/Uq2OB5j76pUfpVUgNkJDsXVeicuF4bcmmtVO0Y=)
                          3: DCCEA912A3EB11EE8049E335C4F9AE02.roa (hash: y+HCWWMgID9/86zt/KUjxdKSJOKDq2B9HJoVNSYH0wM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE972, serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
        Validity
            Not Before: Mar  1 05:24:18 2026 GMT
            Not After : Mar  8 05:24:18 2026 GMT
        Subject: CN=69a3cd83-297e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:fb:3d:d7:bd:b7:7e:4f:48:40:1f:85:e2:
                    ad:d6:ce:26:fc:02:54:2e:df:6a:52:ad:54:e4:d9:
                    24:d7:be:ca:0e:51:44:96:0d:2b:72:90:a2:b2:67:
                    97:ea:74:38:81:78:96:0a:30:c6:78:7b:69:53:b3:
                    8c:a4:83:14:81:66:72:2c:b5:3b:dc:f1:d3:4a:62:
                    c4:ba:08:23:0c:77:cc:ec:1f:67:55:39:e6:70:6d:
                    f5:fc:9f:87:91:53:18:6b:99:ce:bf:a6:ef:d5:51:
                    b6:7b:97:96:a8:a6:0a:08:06:3a:b3:5c:47:7f:16:
                    cf:17:62:7e:6d:d8:54:0c:49:c2:fe:f1:ce:5e:87:
                    aa:1d:d5:cd:af:b5:17:91:12:1d:30:1e:ff:56:3f:
                    18:4b:7b:2c:0f:cd:85:5c:d1:28:9d:7a:65:52:21:
                    d9:3c:b9:86:c4:95:e3:bb:0c:93:8c:0e:fb:4f:9a:
                    04:51:43:67:6b:cc:50:b4:b4:f5:6b:e8:cf:71:70:
                    00:b7:13:6e:b5:01:9e:71:5a:90:01:6a:22:8f:69:
                    01:63:d1:2c:00:9a:01:80:9f:d9:8e:57:14:6d:c4:
                    dd:79:4e:c7:e3:17:bc:66:9e:ec:75:29:d4:a4:b8:
                    83:f2:2b:db:f6:33:02:dd:ca:6e:74:bf:09:97:57:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6B:13:6C:CD:BC:A2:D3:99:3A:60:56:93:EF:82:E8:00:FF:9B:95
            X509v3 Authority Key Identifier:
                keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2c:3b:ad:f1:66:c1:f3:c4:5f:f4:97:fd:bb:aa:f8:5f:ad:
         84:6f:17:02:3b:a2:4f:73:3b:ce:55:d9:04:07:d0:9f:d7:60:
         18:b9:93:3b:f9:b8:75:11:a8:63:10:f3:c4:50:47:90:65:74:
         07:22:63:a7:4f:c9:fd:6e:3c:02:b9:9d:af:2d:f3:c3:8e:f6:
         ae:c7:be:45:0b:3f:84:b5:63:d0:c3:19:f6:39:83:5f:2c:ec:
         28:26:99:cc:d9:1e:f6:d6:6e:a6:04:b7:d0:b5:8d:97:0a:04:
         c0:65:5d:fb:2e:da:70:2a:e2:bb:b3:ab:8e:fe:7b:e2:f8:7f:
         07:9f:ff:49:6a:46:99:ec:5c:8a:25:13:07:5f:03:fd:77:82:
         e5:ac:34:9a:ea:24:6a:5b:e7:16:05:a6:a7:32:97:94:a0:53:
         92:3c:03:f2:b3:4e:88:e5:42:f5:c4:8f:34:30:ad:61:25:ff:
         1b:1f:54:38:e7:99:0a:7d:51:12:e4:dc:1d:06:5d:13:ac:c7:
         c2:4a:cc:b1:a6:a8:ff:c9:28:b7:66:2b:75:c5:14:f2:e0:0c:
         df:5e:04:9f:54:1b:89:8e:c8:32:84:f3:d8:2f:56:e3:93:2a:
         73:5c:ab:0f:c0:19:80:3a:52:a7:d1:9f:a0:71:ba:2a:58:b5:
         59:f9:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:00 2026 by rpki-client