Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File:                     0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier:          hrRgFJkyuPbD452R4QSvdGhMgXPNTBhBP/Vo/oqVoIs=
Subject key identifier:   84:41:63:58:70:73:F0:AA:2D:42:31:C4:0F:5E:97:25:FB:EB:CE:2D
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer:       /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number:          01BC
Signing time:             Sun 01 Mar 2026 04:39:04 +0000
Manifest this update:     Sun 01 Mar 2026 04:39:03 +0000
Manifest next update:     Sun 08 Mar 2026 04:39:03 +0000
Files and hashes:         1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: 8FqiEyk4O6OAW79a02zqq65AbCt22WrGzquzvJ47Hsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
                          rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
        Validity
            Not Before: Mar  1 04:39:03 2026 GMT
            Not After : Mar  8 04:39:03 2026 GMT
        Subject: CN=69a3c2e7-0f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:ec:44:53:93:ed:30:7a:b5:b6:7f:07:83:
                    6c:65:4f:af:b8:20:05:a6:0b:2d:3a:c2:f2:18:ae:
                    7b:e4:1e:13:fc:6f:b1:51:c9:c7:eb:cb:9c:44:11:
                    9e:58:fc:13:91:6f:f2:a1:3f:c6:40:4c:56:49:16:
                    b6:75:91:3a:3b:e3:f2:a2:fc:a2:6e:19:90:a8:c7:
                    1e:a3:b3:3c:07:dc:be:de:cf:1b:52:fa:e5:fc:11:
                    f0:d0:d2:1a:de:02:73:c9:84:50:cc:ce:e9:a9:1c:
                    50:0b:b0:3a:27:c3:b9:03:99:ad:d5:34:30:80:7b:
                    b2:e3:fa:ec:02:d8:33:bb:4d:bd:51:f3:94:78:72:
                    fe:17:78:4c:f6:08:79:73:a2:fe:f1:6e:79:cd:4c:
                    49:37:d6:b3:e5:62:c8:e9:07:99:08:0c:8f:b4:58:
                    0c:40:a8:c2:69:c2:e7:23:12:da:8c:81:10:d2:b8:
                    f3:45:03:e2:38:51:ff:55:31:46:d9:d7:e8:81:9b:
                    48:12:63:69:c1:d9:e3:69:7e:eb:42:01:6d:9a:7d:
                    bd:cd:39:48:4f:1c:bf:6d:85:87:fb:b6:84:63:bc:
                    1a:65:6e:44:b8:e2:2e:8a:a0:08:fa:d6:1e:30:c5:
                    69:6b:01:9e:f1:f0:25:f7:72:6b:b7:f7:eb:a3:83:
                    91:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:41:63:58:70:73:F0:AA:2D:42:31:C4:0F:5E:97:25:FB:EB:CE:2D
            X509v3 Authority Key Identifier:
                keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:98:87:37:a1:71:18:f9:04:e4:f4:d0:9c:ba:7f:9b:ee:12:
         7e:0b:4e:5d:eb:88:6e:db:f3:c1:60:64:09:12:c0:39:bc:5d:
         e3:38:8c:1b:5d:cc:89:b8:f7:78:bb:92:95:0c:08:21:e3:86:
         da:1f:3f:3f:87:cb:0a:82:c2:22:7f:61:ca:d4:07:4a:fc:6f:
         bd:f2:e8:8f:ce:30:73:98:eb:e5:02:43:d3:33:5b:d2:36:39:
         1c:65:f7:21:ed:3f:dd:84:0c:6c:db:58:30:6b:31:e5:b9:f5:
         a4:fd:41:d7:c0:a2:1f:88:15:ce:28:c2:7f:cb:a1:d6:a3:ad:
         1f:07:14:c7:be:23:04:55:9d:d2:cc:03:ea:7e:92:5c:90:a0:
         bd:59:78:90:8d:4d:16:cd:01:a1:1d:be:97:be:b7:51:7d:81:
         15:3e:78:11:13:77:9f:0f:98:e0:35:f7:7f:83:24:de:a2:5e:
         26:19:20:4b:4b:c7:62:e8:36:e0:95:bb:3a:3d:d0:a0:b7:47:
         0e:f8:5a:a8:d3:54:70:21:a3:e7:c4:e9:e4:27:1c:7a:23:24:
         d2:74:dc:8b:60:27:57:2d:86:1b:10:53:4a:30:ac:f5:24:3f:
         8e:17:76:3c:4b:49:a9:de:0b:3e:06:51:3e:26:f4:80:68:8a:
         aa:ae:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:47 2026 by rpki-client