Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File:                     lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier:          +DauIY/ok0qISfhqzHRsis8nhg6yLzsyNwdEIS0sYY0=
Subject key identifier:   79:58:71:BB:5D:08:A2:7A:B5:D8:49:5A:4F:3E:80:8D:2C:47:4F:8E
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer:       /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial:       04FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number:          04F7
Signing time:             Mon 02 Mar 2026 00:49:38 +0000
Manifest this update:     Mon 02 Mar 2026 00:49:37 +0000
Manifest next update:     Mon 09 Mar 2026 00:49:37 +0000
Files and hashes:         1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: qZuo0io21EYmwDooFz4mow+Rpy3SxRQEw6cVIsvAzj0=)
                          2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
                          rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278 (0x4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
        Validity
            Not Before: Mar  2 00:49:37 2026 GMT
            Not After : Mar  9 00:49:37 2026 GMT
        Subject: CN=69a4dea2-bd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b7:bd:da:84:91:df:f1:19:25:84:f2:a4:e7:
                    8d:a2:27:f4:4e:69:fe:73:09:d8:dd:11:ea:ce:50:
                    0a:8a:5a:06:80:fb:3e:6e:21:3f:1f:41:7a:a3:71:
                    aa:fc:b3:80:59:fa:45:74:4b:40:bd:ce:88:e1:87:
                    ab:ee:d3:f9:b3:4a:63:4c:20:c6:98:49:b8:ab:56:
                    b2:15:c4:6f:c5:3b:94:1c:d5:f9:67:e0:33:4d:09:
                    5c:db:27:08:30:c8:c1:59:a0:7e:8b:6e:2d:56:64:
                    25:c3:32:1e:61:19:eb:f5:c0:c0:68:a0:6c:7e:26:
                    77:b2:8c:5f:bb:01:e2:d1:89:dd:8b:5e:ca:aa:45:
                    77:0b:22:21:78:fd:ea:e8:4b:0a:69:6c:ef:ea:60:
                    64:b7:95:b4:d6:4d:ab:30:fc:e1:70:a9:67:c0:d5:
                    26:ab:e3:68:92:33:ff:d7:6d:3d:84:fa:b5:95:35:
                    fd:4b:84:b7:b3:92:63:05:93:c9:2b:0f:fd:c3:37:
                    33:86:e6:01:38:67:ce:1e:b0:a7:d1:87:f7:a9:2b:
                    9c:25:54:a8:4b:1e:70:55:e6:c8:38:63:cb:72:e2:
                    1d:aa:88:fd:49:80:6c:94:d1:ee:6d:da:f0:47:14:
                    a2:bb:ea:14:3c:79:5c:b3:52:a4:76:e7:70:78:1f:
                    ed:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:71:BB:5D:08:A2:7A:B5:D8:49:5A:4F:3E:80:8D:2C:47:4F:8E
            X509v3 Authority Key Identifier:
                keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a6:f6:44:c9:b1:f8:1b:aa:c6:35:10:7f:03:5e:71:a1:fe:
         21:0f:f8:eb:00:62:f3:3e:58:ab:be:b7:ef:04:78:c1:4e:90:
         98:df:4d:67:a1:3b:0f:66:77:da:66:79:a6:be:45:5e:17:25:
         90:5e:a1:13:08:e1:41:9c:ba:48:5a:8c:64:37:b4:9b:93:d1:
         1e:38:6b:20:c4:d1:a8:c2:54:23:76:ea:b9:2a:57:cb:78:95:
         77:9f:84:1e:19:0f:e5:e8:f9:55:dd:11:ca:91:45:e0:dc:a8:
         bf:fc:fb:1f:f7:16:d4:5a:30:5c:f7:63:e1:aa:b0:1d:a5:d4:
         b5:fa:81:6c:4a:2a:9f:26:90:8b:31:72:02:2c:1d:59:cb:93:
         14:3b:09:40:1c:e1:2b:77:da:4e:e1:9c:92:90:db:98:59:d3:
         6e:54:c0:b7:4c:e8:88:03:ee:af:9a:86:70:93:e4:32:94:db:
         2b:37:a3:e7:34:5f:c4:39:94:95:62:34:eb:77:b4:d3:d2:cf:
         fd:d4:c1:bf:62:88:26:63:98:a9:cd:66:a6:02:b1:40:dc:8a:
         d3:7b:6d:9f:a3:a6:17:02:60:ca:8c:1f:62:d7:8d:81:4d:cf:
         77:f6:27:8b:90:bc:ac:96:62:77:83:c6:a0:8a:ad:29:90:0a:
         2b:d6:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:25 2026 by rpki-client