Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
File:                     daQM7SSsrWLFirKOoOD3xeXhx4g.mft (raw, json)
Hash identifier:          Q96pcTsTa5Xh7yRdvYyVllzc6fsb+pGg/14/2oUEKlw=
Subject key identifier:   93:54:1D:4D:4B:EC:E4:5F:20:1B:50:F9:6D:1F:49:30:19:F8:26:3A
Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
Certificate issuer:       /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
Manifest number:          0155
Signing time:             Sun 01 Mar 2026 06:09:07 +0000
Manifest this update:     Sun 01 Mar 2026 06:09:06 +0000
Manifest next update:     Sun 08 Mar 2026 06:09:06 +0000
Files and hashes:         1: daQM7SSsrWLFirKOoOD3xeXhx4g.crl (hash: zp82F/lPieRydESIV1dF4hPG/eUpLRQ7/aWs++A1TSc=)
                          2: F22762F4741011EF9E049760C4F9AE02.roa (hash: iKwlRkuX69d7ZcvWspfzZHclIKmsaCHfYEvd4T/pvns=)
                          3: 118CC10A1E2D11EFBD391A28C4F9AE02.roa (hash: jtXYMGmykeZR7pyJ+hI44NrwSSmB4SbOOgIv0/Ba41o=)
                          4: 7EB19CF81E5811EF8E8F0D3CC4F9AE02.roa (hash: zdRcs/c3Qf+J5jNCXqRvg7j/o5uxm8uN2Ag/dP0TR80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
                          rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA867, serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
        Validity
            Not Before: Mar  1 06:09:06 2026 GMT
            Not After : Mar  8 06:09:06 2026 GMT
        Subject: CN=69a3d803-deef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:a4:2e:8c:0d:ae:18:ea:14:b1:d7:b7:c3:
                    9a:52:a2:c3:76:4a:e6:d9:89:71:d8:94:4e:5d:0c:
                    47:ef:a0:df:ae:0a:14:ca:db:2e:d8:a9:22:79:49:
                    11:25:c9:f0:5e:9b:6a:ff:90:01:33:b6:75:0a:95:
                    7e:63:37:cb:19:d6:1e:9b:1f:83:1d:20:91:6c:da:
                    72:16:f6:c8:ac:55:a0:0e:7c:65:1c:7d:0a:77:b1:
                    3d:d6:a2:f1:c4:1f:d1:b5:71:ba:6f:8c:75:6e:b4:
                    d4:db:c7:d3:d8:03:98:19:7a:30:34:c5:5a:bc:08:
                    c5:44:74:9f:74:23:2c:ba:d6:9c:bb:a5:e4:90:36:
                    49:4b:d2:eb:cd:9a:57:65:8d:15:47:f6:c4:d2:12:
                    93:38:ce:ed:a6:f5:c1:4e:6c:5a:16:59:f7:e8:41:
                    df:ec:52:7b:51:f2:53:00:98:97:54:8b:52:8b:cd:
                    5d:b7:77:f3:02:1f:d3:5a:18:fc:75:b7:61:6e:48:
                    51:ea:c1:ca:96:d5:55:35:f9:eb:9e:49:d2:17:81:
                    87:56:2a:53:5f:bd:d4:15:d6:67:7a:7a:64:5b:19:
                    f2:aa:0b:36:34:44:25:3a:5a:dd:df:e3:5e:08:91:
                    10:9d:0d:16:dd:8a:fb:73:d9:fe:a8:55:51:25:cb:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:54:1D:4D:4B:EC:E4:5F:20:1B:50:F9:6D:1F:49:30:19:F8:26:3A
            X509v3 Authority Key Identifier:
                keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ed:1b:24:e9:6e:b0:e5:bf:94:12:10:66:83:6c:86:9a:c6:
         40:5d:5b:b4:3f:c6:4c:0e:45:5c:ce:5d:0c:dc:a6:f3:26:fc:
         dd:8f:b8:8f:a6:d6:96:ba:d3:6e:24:b8:27:96:a5:a8:43:f3:
         96:cf:9f:40:f2:bc:7a:12:65:74:60:b0:ea:18:b1:6a:33:90:
         52:8b:90:ca:0d:3c:6b:36:76:44:00:74:77:5b:43:d9:e0:d0:
         21:58:3a:33:67:08:93:05:7e:f0:cd:bc:58:9c:b4:7c:59:14:
         cd:f1:59:03:21:d7:da:2e:0e:7a:ab:90:1c:02:03:fe:f5:71:
         7c:ea:97:a3:2e:85:19:8e:c2:28:c2:22:c8:f9:79:e4:cf:3e:
         ba:74:87:81:06:8f:76:51:65:4c:37:25:f3:6c:0f:13:87:bb:
         6c:cb:9e:4f:17:18:5e:86:c2:05:ba:46:52:05:ca:64:a0:b7:
         03:2a:5c:db:ff:4c:ed:69:bb:68:b4:16:b0:a9:5e:ed:e6:57:
         54:15:49:31:75:a7:72:88:cd:86:70:35:54:70:2a:a8:38:00:
         6e:d9:37:9f:02:dc:96:92:28:4d:a8:3b:ff:49:77:af:2a:4d:
         8f:49:b9:b1:b2:b4:b5:66:38:b2:1c:43:e1:31:fa:4b:e0:da:
         59:37:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:21 2026 by rpki-client