Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
File:                     r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json)
Hash identifier:          ATcHGT2mVBw2i+DSkTgsPNqJBOHBA5r5gdjtgl27sXA=
Subject key identifier:   51:4D:D5:76:4E:25:67:7A:99:00:A9:BE:32:9B:0B:ED:52:C7:8C:E8
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Certificate issuer:       /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial:       0482
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
Manifest number:          046B
Signing time:             Mon 02 Mar 2026 02:48:18 +0000
Manifest this update:     Mon 02 Mar 2026 02:48:16 +0000
Manifest next update:     Mon 09 Mar 2026 02:48:16 +0000
Files and hashes:         1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: /Pxsx43GEa16J3ObrXSBt21J7boeKo1W93Wf0/Sjzdo=)
                          2: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: cUenRyh3LsnCMH+orouodtGSeTE07G+8KCh7ABp0SpE=)
                          3: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: zhOnzcs35kb8T2BpNLHNFY38V0O9Fl5sK2LedfhbYBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Validity
            Not Before: Mar  2 02:48:16 2026 GMT
            Not After : Mar  9 02:48:16 2026 GMT
        Subject: CN=69a4fa72-aa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9e:77:f3:1e:f6:c5:3a:34:e9:63:63:45:31:
                    89:7f:86:86:5c:18:ec:25:54:02:37:09:65:5c:94:
                    91:58:9e:ff:df:be:95:0f:6f:04:e3:ac:30:9c:a1:
                    ea:03:85:7c:35:aa:ce:4d:85:7c:96:c5:82:76:a1:
                    3a:c4:a7:29:66:9d:1d:5d:a4:9f:13:f0:fd:e3:ad:
                    5a:2a:6f:9d:8f:a4:cb:98:72:3d:d2:4d:fa:59:dc:
                    f9:4a:81:a0:88:a8:0e:22:f7:fc:3c:8f:6a:73:ba:
                    27:a9:20:17:2f:ff:3a:1b:4a:15:66:4c:18:74:34:
                    59:0c:ae:17:94:de:89:3c:8d:fb:ba:86:18:5b:dd:
                    9f:8f:23:c3:0a:e1:9c:37:21:91:17:f2:13:c0:14:
                    26:92:0e:57:eb:5d:c5:f6:5b:1d:b5:5d:18:8b:f5:
                    20:ef:b2:45:19:fe:20:00:a5:89:af:8b:43:98:9d:
                    27:db:13:92:09:d6:9a:3a:59:1d:cc:75:de:a7:0e:
                    56:b1:23:54:12:88:a8:a8:e5:a5:00:b2:d1:29:e4:
                    c9:42:ad:e6:c2:96:b0:a4:ce:4b:56:d9:d0:45:1d:
                    48:56:3e:d6:98:be:68:c8:a1:14:5e:86:31:76:3a:
                    cd:70:43:85:a9:c1:f9:9b:fd:2b:b2:90:e0:44:06:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4D:D5:76:4E:25:67:7A:99:00:A9:BE:32:9B:0B:ED:52:C7:8C:E8
            X509v3 Authority Key Identifier:
                keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:51:63:e6:ed:c2:ac:2f:67:53:7f:8e:b3:fa:54:16:e9:
         a2:ab:ab:68:99:5e:de:33:61:07:6f:83:4c:eb:02:e7:65:38:
         49:f9:a9:8c:db:07:91:13:e0:10:ee:99:1e:03:61:da:86:8c:
         b8:7b:90:76:22:04:45:84:43:9d:19:b9:b8:fc:c4:14:18:4a:
         fc:6a:f6:7a:5b:5f:c3:a2:3a:a6:81:3c:dc:3b:9a:8b:f2:38:
         92:b3:56:38:04:db:4d:b2:e6:7a:1f:b3:4e:d2:ab:e0:b7:d5:
         64:ba:26:f2:b4:9d:dc:6b:f7:9b:35:f2:9b:42:74:1a:c9:8f:
         e8:59:52:36:85:20:12:32:8a:d5:e2:0b:2d:df:ba:7b:74:d5:
         1a:d4:a5:c1:ec:af:fb:11:70:03:92:cb:7f:e5:a5:26:bf:de:
         18:27:7b:28:aa:33:5f:a4:f4:a9:e2:64:8d:2d:5f:12:0d:07:
         72:30:44:c6:72:6b:72:f4:ea:25:2b:a4:38:4f:7a:26:2d:5e:
         c0:6e:bc:3b:cd:61:d0:18:91:eb:c1:b3:b2:18:88:59:23:91:
         9e:aa:55:81:4a:1e:08:f2:f9:4c:10:df:05:85:9c:3b:12:7e:
         fb:a0:f9:04:67:47:36:8a:2d:9b:05:4a:f6:92:43:00:7d:dc:
         f8:be:68:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:34 2026 by rpki-client