Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft
File:                     frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json)
Hash identifier:          NESSH6kTmwwD5nGh1XsV84uvXKqjlnQ89qoRaWsq3eU=
Subject key identifier:   31:1D:EE:08:05:4D:D7:65:2A:6A:33:84:F7:D3:BF:10:12:56:35:BE
Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7
Certificate issuer:       /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7
Certificate serial:       0685
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft
Manifest number:          067D
Signing time:             Sat 28 Feb 2026 23:04:21 +0000
Manifest this update:     Sat 28 Feb 2026 23:04:21 +0000
Manifest next update:     Sat 07 Mar 2026 23:04:21 +0000
Files and hashes:         1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: 4U36cRglsvBb13Ic+SyRzLhe8j2kvhpKC/HF7bbpHSg=)
                          2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 60Txo6gAZcJLQXsyFOEwAUgH1sTvvk2S/lm7zu2sz3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl
                          rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7
        Validity
            Not Before: Feb 28 23:04:21 2026 GMT
            Not After : Mar  7 23:04:21 2026 GMT
        Subject: CN=69a37475-50a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4d:3d:7f:7a:15:69:ce:91:a3:67:2a:cb:c6:
                    7b:66:28:d5:fe:2b:0d:f1:dd:bf:9a:ae:6a:d5:17:
                    ff:1d:36:db:11:d0:7a:c6:b8:ec:cf:37:81:bb:95:
                    73:57:c0:6a:a1:16:a4:07:26:9d:c8:c8:8a:b6:34:
                    23:45:af:fa:2a:bd:68:83:cf:96:cb:21:5a:81:4e:
                    2f:b4:37:d1:d7:65:ef:64:a3:47:8f:d3:25:10:bd:
                    21:55:14:6f:a4:b7:e6:f0:0a:15:70:c3:30:7b:72:
                    70:21:21:f5:dc:e3:7c:86:9c:7c:18:df:08:a1:cc:
                    b1:60:51:10:eb:d8:e7:01:47:e9:e2:3d:5c:6a:fe:
                    74:33:50:0b:be:32:02:f8:53:b4:3d:03:ad:9d:bb:
                    78:bf:2f:1a:8c:0d:e0:6f:4b:a0:8c:ae:a3:52:9d:
                    b6:50:d4:a6:17:35:f5:c7:33:eb:46:67:b9:f3:c6:
                    c9:d3:03:aa:30:f1:b9:6b:7f:07:11:73:be:10:c1:
                    41:58:33:47:17:49:41:d8:bd:59:b7:40:6f:47:92:
                    d0:1f:f4:25:bc:8f:ca:34:5a:8e:bd:28:ce:4a:34:
                    99:bb:15:8c:be:cf:96:f1:f4:9a:31:73:77:0b:0d:
                    19:80:32:3e:5c:5d:56:35:59:5e:1d:63:b5:97:35:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:EE:08:05:4D:D7:65:2A:6A:33:84:F7:D3:BF:10:12:56:35:BE
            X509v3 Authority Key Identifier:
                keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:58:00:ee:d2:c4:6d:66:fd:e0:a7:44:af:75:4b:11:0a:aa:
         18:5c:06:8b:db:0e:66:0a:83:f2:eb:b3:6d:9b:c2:ee:45:90:
         fa:b8:f1:10:4a:6a:da:9f:90:ab:16:28:47:dc:1e:50:bc:28:
         87:85:e6:6e:60:ce:cf:17:a6:18:5b:be:c7:0c:5e:8e:20:9b:
         86:36:48:53:ee:53:61:db:40:77:81:f5:28:6b:84:d6:ec:24:
         f6:f2:7c:a6:0a:02:3e:2c:9b:24:07:d3:36:2e:e5:ac:88:22:
         25:2a:be:db:d9:d1:c6:97:9d:07:0f:9a:91:4a:8f:4f:46:46:
         48:d2:98:08:75:c1:74:a0:92:df:fc:9e:e2:99:ec:27:b4:7d:
         5f:72:03:0b:93:7b:70:b4:bd:84:98:5e:26:51:7e:62:6c:07:
         d4:d6:99:32:74:86:b0:bc:ee:7d:4d:19:80:a9:fb:7d:1b:66:
         74:01:95:4f:7f:a5:cc:a8:65:d9:33:4d:15:1a:3d:2f:f6:5a:
         ec:86:92:3c:54:19:86:b5:f4:e3:ca:4d:99:59:39:98:19:c7:
         01:5d:19:15:5f:02:3b:e3:59:b4:b1:be:6d:7f:78:6d:da:a2:
         bd:db:d4:6a:11:9c:fa:6c:7f:36:b8:71:0f:77:fd:97:f4:de:
         90:fd:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:45 2026 by rpki-client