Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
File:                     d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json)
Hash identifier:          +Q6/3q/voIrPWG7MwL56kK6/RIGUDcgWy6BKq2Tp9vw=
Subject key identifier:   8A:DA:5F:76:07:58:12:1E:3A:73:F4:C7:DC:6C:02:C2:85:09:ED:7E
Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
Certificate issuer:       /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Certificate serial:       06E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
Manifest number:          06D9
Signing time:             Sat 28 Feb 2026 22:40:47 +0000
Manifest this update:     Sat 28 Feb 2026 22:40:46 +0000
Manifest next update:     Sat 07 Mar 2026 22:40:46 +0000
Files and hashes:         1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: 83bijIOamQuEXsFmU63v6oTYRO9RwXXgPi8l8Np+azQ=)
                          2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: /i9RofZ06AYBMENjcaJpNwKG22jU3wGWaEpuwf3htx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
                          rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
        Validity
            Not Before: Feb 28 22:40:46 2026 GMT
            Not After : Mar  7 22:40:46 2026 GMT
        Subject: CN=69a36eef-a728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:fa:a9:e5:bf:ef:fb:9b:a1:b6:d1:99:f1:
                    7b:92:cd:bb:2c:76:f2:00:dc:1d:68:63:2d:9c:c9:
                    4a:54:ff:d1:c4:41:fa:b9:df:21:06:d6:cd:85:f9:
                    ba:2f:ac:c3:0b:c7:26:5b:da:30:fd:86:37:e0:d7:
                    ce:a3:e7:fa:cc:bd:8c:53:7a:76:4a:ea:06:48:69:
                    e2:9c:29:fb:a7:1f:8f:ee:63:8f:5a:82:ca:f4:a1:
                    13:94:6c:73:db:e1:7e:0b:76:8c:f8:6a:a6:83:6d:
                    af:d7:49:bb:ef:15:0f:a6:67:98:5c:43:dc:1d:67:
                    12:19:15:64:98:eb:85:a4:e6:7e:35:20:d0:a9:61:
                    55:d1:7b:2e:71:81:03:10:bd:ac:84:3b:2b:51:7b:
                    5d:72:c7:cd:db:6d:64:02:62:ff:07:20:af:95:22:
                    9f:2f:f8:33:d8:34:32:fb:ca:8c:44:81:0b:d4:2c:
                    13:63:c5:01:33:37:17:bb:14:32:dc:98:4f:5f:cc:
                    14:11:85:13:79:20:9f:b1:b5:84:ea:b1:35:49:9d:
                    85:71:cb:16:f5:aa:f9:2d:01:8e:60:67:31:ae:0a:
                    0f:4e:cd:92:da:05:99:9e:93:eb:e6:c7:1d:83:d0:
                    e8:b0:79:ae:26:0d:d3:83:93:c0:b0:a5:e0:6f:05:
                    31:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DA:5F:76:07:58:12:1E:3A:73:F4:C7:DC:6C:02:C2:85:09:ED:7E
            X509v3 Authority Key Identifier:
                keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:02:60:84:82:e2:99:66:61:09:57:0b:d7:b7:1f:93:61:17:
         a2:d5:a0:a1:6e:da:3c:83:f4:ad:61:c9:a4:bf:87:a9:7a:8a:
         3c:1c:54:4f:fa:44:e0:fb:7b:86:01:ac:7d:b0:25:48:9d:7d:
         d8:07:f2:b6:96:cb:08:61:96:f5:63:3e:49:2f:b5:3e:d1:4f:
         5d:8f:03:62:53:fd:d2:b7:90:a2:26:ea:65:7a:dd:fd:b8:29:
         74:e6:0b:d8:68:ad:4c:2d:a5:14:f6:90:cf:a2:f1:68:20:96:
         95:3c:58:b6:45:2a:93:89:4c:e8:29:84:73:89:ec:5a:84:1e:
         1e:57:27:62:54:62:c8:19:18:02:e6:2f:8d:9a:f8:46:94:96:
         1d:ae:27:ee:83:5f:22:6e:60:e3:4e:9d:14:bd:91:b5:7d:2c:
         6b:01:8b:e0:af:a2:64:16:7f:b1:bd:86:15:d4:9d:5b:d4:49:
         a1:ab:da:20:cb:f6:2e:fd:ae:47:ef:0f:bb:a9:34:16:35:55:
         44:06:3d:cb:16:8b:b2:53:ec:8c:a4:c3:2e:a6:ae:9f:f6:90:
         fc:11:3d:64:07:fb:91:7f:2f:3a:9e:7d:30:3f:a2:3c:be:a6:
         e1:b2:a8:df:ef:aa:3b:ba:fa:60:c5:df:c9:5b:22:b0:af:9a:
         bd:3d:d8:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYzMTcxMTAvBgNVBAUTKDc3OUNEOTIxNTY5RTkzRjlEMjZCMTNBNUFBN0UzNzZD
RkI1RjA2OTAwHhcNMjYwMjI4MjI0MDQ2WhcNMjYwMzA3MjI0MDQ2WjAYMRYwFAYD
VQQDDA02OWEzNmVlZi1hNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs1v6qeW/7/ubobbRmfF7ks27LHbyANwdaGMtnMlKVP/RxEH6ud8hBtbNhfm6
L6zDC8cmW9ow/YY34NfOo+f6zL2MU3p2SuoGSGninCn7px+P7mOPWoLK9KETlGxz
2+F+C3aM+Gqmg22v10m77xUPpmeYXEPcHWcSGRVkmOuFpOZ+NSDQqWFV0XsucYED
EL2shDsrUXtdcsfN221kAmL/ByCvlSKfL/gz2DQy+8qMRIEL1CwTY8UBMzcXuxQy
3JhPX8wUEYUTeSCfsbWE6rE1SZ2FccsW9ar5LQGOYGcxrgoPTs2S2gWZnpPr5scd
g9DosHmuJg3Tg5PAsKXgbwUxQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIraX3YH
WBIeOnP0x9xsAsKFCe1+MB8GA1UdIwQYMBaAFHec2SFWnpP50msTpap+N2z7XwaQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjMxNy80RkQ1NzY4MDhD
NkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtfblNheE9scW40M2JQdGZC
cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q1elpJVmFla19uU2F4T2xxbjQzYlB0ZkJwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjMxNy80RkQ1NzY4MDhDNkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtf
blNheE9scW40M2JQdGZCcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEQJghILimWZhCVcL17cfk2EXotWgoW7aPIP0rWHJpL+HqXqKPBxUT/pE4Pt7
hgGsfbAlSJ192AfytpbLCGGW9WM+SS+1PtFPXY8DYlP90reQoibqZXrd/bgpdOYL
2GitTC2lFPaQz6LxaCCWlTxYtkUqk4lM6CmEc4nsWoQeHlcnYlRiyBkYAuYvjZr4
RpSWHa4n7oNfIm5g406dFL2RtX0sawGL4K+iZBZ/sb2GFdSdW9RJoavaIMv2Lv2u
R+8Pu6k0FjVVRAY9yxaLslPsjKTDLqaun/aQ/BE9ZAf7kX8vOp59MD+iPL6m4bKo
3++qO7r6YMXfyVsisK+avT3YQA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:46 2026 by rpki-client