Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
File:                     09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json)
Hash identifier:          kRfLnOancGn+an8wOW2VSx2J68sWQ/3p4e4NqcT+9PM=
Subject key identifier:   7E:D6:81:6A:3E:36:64:15:55:37:57:1E:41:1F:D1:B5:29:E0:62:D3
Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
Certificate issuer:       /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
Manifest number:          010E
Signing time:             Sun 01 Mar 2026 22:27:00 +0000
Manifest this update:     Sun 01 Mar 2026 22:26:59 +0000
Manifest next update:     Sun 08 Mar 2026 22:26:59 +0000
Files and hashes:         1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: CawVNDFzTXVmYaf7ARRv7Zoh5hnyf5eIyec/+t2ZTb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl
                          rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
        Validity
            Not Before: Mar  1 22:26:59 2026 GMT
            Not After : Mar  8 22:26:59 2026 GMT
        Subject: CN=69a4bd34-7629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:e3:3b:d0:41:9c:ea:28:04:0c:5b:2f:11:
                    9a:27:ec:1a:63:2d:fb:1c:d0:c5:ff:8b:96:85:47:
                    82:22:01:3d:33:86:f1:c3:b0:72:04:45:04:e1:47:
                    90:cb:b2:3d:df:2d:b0:ed:0c:2b:f5:f9:60:84:46:
                    c2:3d:6c:4a:98:c2:36:03:14:16:09:98:a6:53:c3:
                    37:b9:6a:11:97:42:0c:5e:a9:8a:4d:5b:1d:58:16:
                    33:7f:a6:9e:88:d9:f3:73:90:16:57:d3:a9:74:f9:
                    70:75:bb:d3:1b:9b:91:3b:4f:3a:10:d7:ff:7f:40:
                    42:8c:55:8a:c3:fb:ce:96:c6:13:68:51:2d:ad:d5:
                    12:61:17:b3:0e:a5:25:31:13:e9:9a:a1:d3:27:26:
                    c7:9e:73:a1:77:f1:c2:9c:1c:6c:0a:db:9d:bb:a2:
                    9c:45:45:64:66:ac:ef:65:15:39:96:a6:8c:17:da:
                    94:ee:bd:29:db:47:47:ab:ee:4e:ce:06:ab:5e:58:
                    b5:4e:67:2b:3a:ad:58:e5:cd:0a:9c:97:24:c5:d1:
                    b1:24:d8:8c:a8:a7:6d:da:f5:ed:0f:61:62:5f:29:
                    41:c9:f2:c5:6c:3e:b4:9c:99:bc:31:b9:69:6d:ae:
                    66:92:ef:2b:74:6b:75:cc:3d:ad:cc:79:f2:06:77:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D6:81:6A:3E:36:64:15:55:37:57:1E:41:1F:D1:B5:29:E0:62:D3
            X509v3 Authority Key Identifier:
                keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:92:e6:21:e6:23:d6:ec:26:56:5c:ab:60:af:3d:96:93:d3:
         31:4b:16:8a:84:92:48:89:6b:ee:f8:d3:54:13:5c:ae:a5:4c:
         71:c2:75:88:73:58:3b:ee:a3:fe:c2:30:aa:c0:e5:73:4f:47:
         9b:18:69:41:bc:41:b5:34:78:b1:5d:4b:19:45:0e:f6:1b:f8:
         e2:54:7d:dc:eb:c7:e8:3d:c2:f1:82:2e:90:f2:59:b2:a2:e6:
         37:0e:71:45:6e:31:2e:3a:7a:40:2c:55:22:fa:05:1f:12:f4:
         c8:e9:ef:36:54:cf:02:fc:15:57:22:ae:4b:f2:d3:dd:b3:b3:
         28:ee:fc:ef:80:4d:7f:1d:4d:d6:c5:90:4f:c3:12:17:7b:1a:
         4a:ca:34:1a:7f:86:06:b1:d7:65:86:a8:a7:fb:b7:c0:5e:7b:
         f0:e4:e7:fa:39:ea:ce:83:a5:bb:6c:a4:81:23:c5:dd:97:15:
         62:3c:cd:2b:46:14:6b:de:46:7c:0f:d1:b3:f7:30:7b:93:2e:
         0c:b1:2f:2d:da:22:1c:83:de:dd:78:c4:61:f0:c1:83:30:7c:
         95:fb:ce:a1:1c:ed:79:77:b8:7f:7c:4f:52:4c:97:f9:02:3e:
         d2:9e:c8:be:45:fe:12:36:08:5e:51:dd:d9:43:0e:06:14:e8:
         f8:c5:0a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:32 2026 by rpki-client