Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File:                     dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier:          9RxrPoBoIm3wgR57Ee+5H2MD/3XC+15k2lF8Tw6xwPc=
Subject key identifier:   01:67:1C:D1:D4:44:81:63:83:5F:1B:78:04:93:F5:C8:6D:B9:55:CB
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer:       /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number:          67
Signing time:             Sun 01 Mar 2026 09:18:44 +0000
Manifest this update:     Sun 01 Mar 2026 09:18:43 +0000
Manifest next update:     Sun 08 Mar 2026 09:18:43 +0000
Files and hashes:         1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: Jq+cybSF9lnpvSBGQcryAAjo/rWE8jEPRPbtVqWGvvE=)
                          2: BAC878D0799511F098E98265C4F9AE02.roa (hash: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A=)
                          3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
                          rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
        Validity
            Not Before: Mar  1 09:18:43 2026 GMT
            Not After : Mar  8 09:18:43 2026 GMT
        Subject: CN=69a40474-6aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:17:1d:d7:f7:0f:d3:51:ad:51:4d:09:61:
                    4f:df:46:fa:d4:f0:24:7c:7d:1b:56:59:19:91:05:
                    e9:7e:49:10:3e:8e:3e:f9:3a:29:18:f0:9d:ee:48:
                    ba:1b:fc:fd:45:7c:5d:fc:0b:18:ab:83:a6:1a:49:
                    13:a1:f6:67:cf:0b:af:d4:e0:85:00:37:00:c7:a9:
                    e5:4b:36:a4:9a:e5:7b:7f:e7:12:b2:b8:e8:6f:b4:
                    e6:ac:a6:9c:a4:2a:7b:64:f1:24:3f:86:24:2d:92:
                    e9:44:05:2a:8d:b0:0f:bd:48:9c:72:9f:77:f8:f8:
                    f9:11:34:5c:e2:69:b0:96:95:14:d1:4c:48:d3:50:
                    3e:bb:1f:51:a8:01:a9:fc:07:cf:83:9b:8d:01:e4:
                    2b:00:2e:de:39:62:89:cb:9c:76:f8:1e:3a:0c:bc:
                    e8:68:e4:e8:c3:0b:fd:0c:bc:68:13:88:8f:bf:9c:
                    c2:58:a7:47:b1:ec:ab:09:6d:ca:d6:3e:a8:18:29:
                    60:d3:fc:b9:af:5e:f3:4d:de:06:fc:fa:13:31:98:
                    7a:0b:f5:02:b2:12:3d:72:a3:eb:cc:af:ba:03:56:
                    87:bb:e0:df:db:b1:49:7b:da:c4:f0:1b:95:6b:5b:
                    00:be:d6:aa:12:df:1c:72:ee:41:42:50:9a:f8:ea:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:67:1C:D1:D4:44:81:63:83:5F:1B:78:04:93:F5:C8:6D:B9:55:CB
            X509v3 Authority Key Identifier:
                keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:18:c3:f4:cf:ed:25:17:e5:56:93:21:49:9d:b4:e9:33:15:
         b9:32:d0:c1:6b:36:37:1e:bb:0a:c7:89:9c:e6:45:40:d9:24:
         02:6f:55:71:6f:c6:05:d8:d4:49:f9:a2:42:3f:88:b9:80:69:
         98:1d:e2:38:c0:5a:52:9e:88:32:24:0a:3b:dc:04:cc:07:c3:
         3a:65:1c:46:5f:26:56:07:35:96:b0:ae:70:8b:4f:bb:a1:56:
         65:93:d3:db:4f:01:f3:76:f7:f3:2f:2d:2d:34:a2:4c:b4:cc:
         9a:2f:e1:00:bc:09:e1:e3:7f:ab:c1:61:9c:b7:4d:7c:cb:35:
         63:04:42:64:e0:d6:38:97:e8:52:25:c1:30:df:1c:b3:63:b3:
         c2:a8:0e:bb:e5:0a:a6:6b:d7:e4:ba:38:15:d0:54:cb:bb:0c:
         c8:07:c5:ab:85:57:7f:9e:32:2c:c8:81:48:54:7f:c7:c3:3d:
         87:41:b1:76:13:72:eb:ee:82:1e:85:2c:6a:9b:53:0d:5a:cf:
         2e:d2:25:63:6c:83:1e:3f:54:39:7c:9f:8d:9e:a3:5a:84:72:
         d3:2f:95:16:45:51:3a:8c:bf:8c:2c:d4:18:d3:c6:98:54:df:
         33:7d:9d:e9:09:88:3d:c8:84:a0:2e:3a:5e:91:e2:c5:f3:64:
         68:fb:fe:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:49:34 2026 by rpki-client