Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
File:                     XAo1I_02RadjWvJRmtzQAuEy-84.mft (raw, json)
Hash identifier:          DXF7H7R5JC2z3hzqLcxCnUPqUwRAQ0LZDo/m0Asvb/Y=
Subject key identifier:   9A:C5:AA:AC:B8:B6:3A:DA:B0:D4:5B:FE:70:CD:ED:62:F8:70:75:AC
Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
Certificate issuer:       /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
Manifest number:          CE
Signing time:             Sun 01 Mar 2026 08:08:29 +0000
Manifest this update:     Sun 01 Mar 2026 08:08:29 +0000
Manifest next update:     Sun 08 Mar 2026 08:08:29 +0000
Files and hashes:         1: XAo1I_02RadjWvJRmtzQAuEy-84.crl (hash: hbB2nC+wz/zcYa8rFasmmnFFZqxIXDdbP5tlcEV0krE=)
                          2: 304DD002EFAB11EF97C9610FC4F9AE02.roa (hash: t1JjvZDB24X6k3Mu8SErmmJoER7kOsUM0Jx228MJLJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl
                          rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
        Validity
            Not Before: Mar  1 08:08:29 2026 GMT
            Not After : Mar  8 08:08:29 2026 GMT
        Subject: CN=69a3f3fd-7c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:4a:48:a1:e9:06:69:53:19:34:fc:1a:3b:
                    f9:dc:5d:10:64:61:c8:8b:cb:5f:36:1f:37:e5:18:
                    e9:49:5c:cd:76:6f:6e:75:24:95:1a:8e:1f:85:fe:
                    2d:d4:01:6f:bf:5f:4f:61:c1:09:60:a7:83:09:64:
                    df:1c:d8:17:51:8b:3a:94:23:9a:ca:35:7f:e5:83:
                    e2:fa:c8:13:14:0f:c0:8c:ea:7e:bf:3a:2b:03:96:
                    1d:06:85:f5:be:74:e5:52:71:91:7a:a3:95:49:df:
                    88:26:fc:f1:42:79:2d:dc:67:b5:43:ad:40:e8:f0:
                    f7:2b:b3:e9:2b:ab:0c:f8:87:e5:62:80:dc:74:26:
                    74:c1:34:d3:04:f8:22:f8:88:0e:bd:a0:de:02:ab:
                    b7:c3:23:a9:5a:45:e4:64:1b:c9:39:b3:ba:5d:2d:
                    e5:6d:99:2d:c2:e8:a8:18:a9:3b:3d:09:82:3c:19:
                    75:da:10:5d:5f:55:c8:e4:d1:cc:5d:fb:62:e6:ae:
                    63:8f:b6:d5:38:96:e6:ce:f6:a3:b1:9f:f6:57:6f:
                    19:14:48:f0:b6:d3:a0:79:95:20:5f:96:14:8a:99:
                    b3:12:94:e0:15:3a:7b:ae:14:6b:93:68:aa:68:da:
                    cb:52:df:09:12:31:b1:d3:a5:51:1c:be:c2:51:60:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C5:AA:AC:B8:B6:3A:DA:B0:D4:5B:FE:70:CD:ED:62:F8:70:75:AC
            X509v3 Authority Key Identifier:
                keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:12:3b:ae:68:0c:b1:95:df:34:27:27:5c:bb:22:30:3d:7c:
         7b:f6:d2:34:b6:7b:f9:dc:ed:c8:0e:de:8e:54:92:a1:b5:6e:
         44:53:8d:5e:c7:08:9f:c1:ba:7d:c3:42:c6:76:f7:f6:88:61:
         12:3e:05:c1:2c:f5:37:ae:25:f5:48:e4:81:c3:a7:b1:ab:e9:
         b3:b2:99:54:dc:7f:44:65:db:6e:dd:17:82:26:67:44:c3:1f:
         69:1a:6a:42:dc:d3:90:54:48:00:52:01:21:4f:ce:f5:ae:b2:
         37:d7:b2:3a:e4:19:bf:ff:56:c9:f9:25:74:89:00:9a:6a:81:
         c0:8a:d4:ff:b0:25:43:01:28:89:d3:28:75:7c:99:93:32:86:
         84:44:da:cc:80:d3:0f:28:8d:1c:5d:6c:12:40:65:9d:15:87:
         c7:8a:fc:00:47:50:6b:a0:a8:e3:c4:d7:33:fd:d3:0b:d1:66:
         6d:51:ac:0b:2f:95:4d:96:ab:da:4d:f9:d6:e4:22:ea:76:9e:
         61:ff:06:8b:7f:a2:38:3a:ca:3e:e1:6a:5b:16:5b:b0:d7:8d:
         d2:73:95:12:d5:90:5f:eb:23:5d:54:50:af:c0:e6:54:da:c3:
         7b:f3:31:f8:8f:2b:0b:54:92:a2:b2:0c:a1:fa:1f:f5:a1:a4:
         68:b3:3a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:52 2026 by rpki-client