Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
File:                     t3KDxTMROjkeMdlFJxhqz4OZol8.mft (raw, json)
Hash identifier:          tmVGRQjgKMxZydX0VSXGtu+mfA6JYIzzYQ0s8Q10agI=
Subject key identifier:   34:7D:7F:87:52:0C:40:27:45:76:BF:80:D2:EF:AA:26:84:1F:DD:C5
Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F
Certificate issuer:       /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F
Certificate serial:       0B9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
Manifest number:          0B8A
Signing time:             Mon 02 Mar 2026 01:56:17 +0000
Manifest this update:     Mon 02 Mar 2026 01:56:16 +0000
Manifest next update:     Mon 09 Mar 2026 01:56:16 +0000
Files and hashes:         1: t3KDxTMROjkeMdlFJxhqz4OZol8.crl (hash: o5WCnmCSK0mPg7w8C/azcyKix2LpDPiOPg3qkdc8BUs=)
                          2: 02F1850E45A611EA81CD145AC4F9AE02.roa (hash: Xbw7WiHhcCBz0XR3p/8uG8mYkaVvHlya0CN2TyJVfiE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2970 (0xb9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE4B, serialNumber=B77283C533113A391E31D94527186ACF8399A25F
        Validity
            Not Before: Mar  2 01:56:16 2026 GMT
            Not After : Mar  9 01:56:16 2026 GMT
        Subject: CN=69a4ee41-c97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:1b:82:f0:1d:35:10:c6:a2:cd:40:01:28:
                    45:fb:47:c4:fa:86:02:ee:cc:1a:35:1f:1b:50:70:
                    17:11:8f:fb:c9:af:46:e2:e5:37:68:ea:ed:f3:9d:
                    fa:20:eb:5c:8d:cd:a9:f8:d1:da:a6:1a:60:bc:53:
                    c1:31:cb:35:ee:d5:72:46:d3:e9:31:f8:94:8a:1c:
                    5c:23:62:b0:d1:55:c2:31:b5:c6:f0:86:49:33:65:
                    02:ee:12:b4:d0:84:62:83:62:34:f8:b4:d0:37:f0:
                    03:c7:00:38:48:6c:3a:17:f0:6f:20:81:fa:24:1b:
                    98:c4:06:ca:5a:6e:d4:f7:66:0f:0d:c1:fc:8e:4a:
                    31:ab:8a:00:5e:4f:59:b9:a4:a5:d1:15:17:cf:5f:
                    df:6b:99:53:42:f8:88:ae:65:cf:68:f6:a1:78:63:
                    07:ba:87:51:80:ed:b8:51:5c:0c:72:de:6f:91:f0:
                    d5:02:b2:c3:85:7c:51:28:d5:fd:b3:84:c1:74:c0:
                    54:ed:0a:0d:54:48:e4:be:4c:54:6f:44:e9:ec:4c:
                    a7:15:f8:58:0e:9b:3e:02:33:29:43:14:96:26:41:
                    d4:9c:4a:6e:f9:09:e4:72:0b:a1:61:ff:18:9a:b9:
                    d4:f2:62:0e:32:3b:94:4b:01:a9:86:56:ca:5b:c4:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7D:7F:87:52:0C:40:27:45:76:BF:80:D2:EF:AA:26:84:1F:DD:C5
            X509v3 Authority Key Identifier:
                keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c3:1c:e9:86:48:68:04:56:f7:27:24:67:30:ac:79:23:5f:
         03:f5:f8:b3:4c:b4:19:de:c9:03:28:b6:4f:3d:aa:e0:55:19:
         00:bc:24:55:f6:84:ed:f1:69:03:05:f8:ab:46:38:15:2d:aa:
         dd:2d:91:66:40:30:9c:54:56:23:40:bd:ab:2a:39:97:c7:45:
         9c:9f:be:fd:bb:74:df:b2:e5:b8:1b:84:54:14:f0:f3:bc:fb:
         78:eb:6d:c2:cf:38:a7:e2:df:7a:fb:64:22:d3:a0:12:1e:e1:
         4f:91:01:69:de:f9:5e:a3:a2:b9:00:31:62:41:e9:36:62:cb:
         d1:68:9b:d5:09:e8:cd:59:62:86:f0:b0:02:c1:fd:da:c3:fd:
         d9:f0:fe:48:67:fa:d7:f7:66:b7:1b:2b:10:be:80:e5:8a:e0:
         18:28:5a:04:bb:9a:b9:a3:d0:42:52:65:e6:90:59:94:bf:59:
         62:c7:b6:b3:67:d4:34:0c:3a:6a:bc:ee:f3:74:af:ad:d2:0b:
         47:1d:9d:3a:3c:31:ba:96:14:52:f3:c1:c2:84:8b:d7:61:89:
         2d:78:73:a0:f3:10:9a:71:a0:c2:b3:94:97:54:d2:33:e4:1b:
         10:99:0e:d0:37:bd:11:c9:31:3e:60:72:76:38:eb:21:11:e4:
         30:b3:d4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:50 2026 by rpki-client