Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
File:                     HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json)
Hash identifier:          8CG1ds8nYAYWRkpkzSejJcupYS7JEWZQKcqndEsQVt0=
Subject key identifier:   B9:4B:A1:1A:AB:C6:EE:00:D3:51:96:83:63:B5:F1:D5:66:F1:42:7D
Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
Certificate issuer:       /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
Manifest number:          0103
Signing time:             Sun 01 Mar 2026 07:10:52 +0000
Manifest this update:     Sun 01 Mar 2026 07:10:52 +0000
Manifest next update:     Sun 08 Mar 2026 07:10:52 +0000
Files and hashes:         1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: 5u8BxzpuMxAt3CN79ZqM7FqqA7idyvW1F+rEOrPSBsQ=)
                          2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: X+68fVuVtHa5fnoo84w/HjubbFGCJvnyWNu2O/OuVfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl
                          rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
        Validity
            Not Before: Mar  1 07:10:52 2026 GMT
            Not After : Mar  8 07:10:52 2026 GMT
        Subject: CN=69a3e67c-5004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:ad:0e:4c:26:9d:5b:49:13:63:2b:85:1a:
                    9b:50:48:ba:4f:89:37:c1:9a:ed:a0:09:be:c7:5f:
                    95:0a:bc:e6:ac:f4:8c:da:24:b7:23:d1:b7:60:6b:
                    32:1d:66:e9:47:6e:f5:ee:58:9c:7a:58:e2:e4:4a:
                    7e:4e:b5:0a:be:7a:8f:e8:cc:88:5a:43:d3:02:f6:
                    74:57:b1:8e:b3:97:4c:63:80:a8:59:5f:bd:79:63:
                    a3:fb:4a:bf:ad:94:06:2a:13:99:94:fc:9a:5f:6f:
                    08:1b:4b:8f:aa:1c:0d:e1:2e:3a:be:c5:44:43:13:
                    ee:81:56:3d:96:47:3c:b8:17:a6:df:46:94:dd:f4:
                    9a:d2:a3:02:84:1a:93:ec:a2:47:cf:d1:7e:7c:71:
                    19:f3:c0:1c:9f:87:98:fb:cd:0d:3c:60:c0:8f:3d:
                    a2:7e:8c:9d:91:51:df:1f:d3:1d:f5:21:2f:a5:a6:
                    28:db:8b:45:86:08:bf:c2:5e:b6:a6:9e:01:f3:ba:
                    a9:93:f7:f6:a2:b0:e8:d8:ba:b0:7a:b4:99:48:11:
                    28:34:a1:35:fc:da:78:30:c3:bc:8f:97:b9:c2:3b:
                    b7:ee:2d:fd:24:72:d6:d7:63:c5:86:df:a7:9b:fe:
                    53:e3:a4:c3:b6:b5:72:e0:e0:20:e5:69:f5:b5:1c:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:A1:1A:AB:C6:EE:00:D3:51:96:83:63:B5:F1:D5:66:F1:42:7D
            X509v3 Authority Key Identifier:
                keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:5b:22:93:f5:11:02:23:40:a8:eb:dd:97:2e:f7:64:2c:
         7b:bc:b9:8a:3a:f3:17:ef:47:3a:d8:50:07:47:e5:72:fa:a4:
         f0:e6:12:9e:11:78:4c:09:29:6a:8b:b1:68:12:47:36:d8:1f:
         a8:b4:ab:7a:e0:0c:3a:9e:79:db:10:96:c9:16:53:04:91:a8:
         25:ff:85:1c:03:ef:ee:4b:dd:ec:07:69:a0:05:67:08:4d:fd:
         58:fa:8d:47:66:66:b2:c8:db:dc:55:e5:6e:bc:ca:cb:b0:aa:
         3b:b0:de:6f:54:1d:88:55:ed:cd:05:ad:50:d4:9e:3d:d2:c0:
         40:83:8e:cd:f2:46:70:c2:6f:e5:0d:5b:d3:8a:39:22:03:e2:
         1d:7a:1b:60:9c:65:74:be:e3:5d:c9:5e:50:52:1a:75:e2:34:
         d9:de:26:81:e2:32:ce:b6:3e:fd:53:be:0b:37:9d:cd:03:31:
         25:6a:35:6f:d6:ae:15:9e:2e:e5:62:cb:64:c6:e1:1b:f1:24:
         b5:6f:be:8b:0e:b1:94:3c:ac:a6:2a:95:71:79:b7:90:3f:86:
         61:cc:9e:47:c5:fb:5f:07:30:26:24:d0:32:6a:f3:36:a0:a9:
         45:dc:af:42:91:79:a7:da:13:68:1f:1c:74:0f:0c:ea:9e:d3:
         8c:58:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:57 2026 by rpki-client