Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
File:                     dgeNNhm3wq-92jOrU2PuX-16hg0.mft (raw, json)
Hash identifier:          3d7RjhV7IvH8Z+vA0Z5B4KC+JTtmTBJG7ljE4TFjAJ0=
Subject key identifier:   6A:67:81:C3:28:03:D3:DE:9E:7D:30:23:FE:98:68:71:4D:62:91:8B
Authority key identifier: 76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D
Certificate issuer:       /CN=A91C5E1C/serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
Manifest number:          5C
Signing time:             Sun 01 Mar 2026 09:28:03 +0000
Manifest this update:     Sun 01 Mar 2026 09:28:03 +0000
Manifest next update:     Sun 08 Mar 2026 09:28:03 +0000
Files and hashes:         1: dgeNNhm3wq-92jOrU2PuX-16hg0.crl (hash: f4lOayov8xjx/lFTqOlxNup+1XT4Fv4QgtKSXrA2i0A=)
                          2: 2A3F7C6A879F11F09F9FAD48C4F9AE02.roa (hash: Axxx6+J8twN5fIfKmfOOFMg3aNjqRhz53eFIdguiEt0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5E1C, serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D
        Validity
            Not Before: Mar  1 09:28:03 2026 GMT
            Not After : Mar  8 09:28:03 2026 GMT
        Subject: CN=69a406a3-3f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:16:c5:67:4d:56:dc:1b:a3:ab:b9:d2:2f:
                    d4:68:ff:72:1e:ba:d7:1a:1b:b0:1d:df:6e:20:c8:
                    0f:96:e7:89:13:2c:64:fb:d7:65:4d:df:e5:ff:ba:
                    46:bd:97:a8:72:eb:9b:94:d3:a7:a6:69:01:d7:d6:
                    e7:cd:4a:df:86:03:ec:2a:44:5a:0b:77:49:56:b4:
                    fe:e5:fc:72:56:89:be:f9:7c:13:b2:2d:4b:17:fb:
                    b4:d9:f7:53:a5:e7:81:2c:f6:90:9b:7d:1e:07:8a:
                    8f:28:95:ad:6a:75:13:0b:4c:a9:d5:e4:e9:75:5d:
                    c7:bf:a6:18:59:79:fc:8c:ec:0e:19:13:94:d2:f8:
                    0f:0c:8e:d2:a1:d8:9d:e6:1e:be:8a:e8:a9:6e:1a:
                    a6:97:be:c5:1c:ea:87:6e:3c:45:d3:ae:ed:6f:3e:
                    21:11:f0:cc:ef:5d:5a:59:d9:c7:ff:f8:92:e1:10:
                    e3:8f:e9:b3:09:d1:67:45:c2:20:14:d4:a4:4c:81:
                    22:4b:ee:e6:97:93:c3:13:56:d0:c9:29:4f:38:63:
                    c8:21:1a:1e:1d:87:1b:6e:9c:1a:65:a3:5b:b8:cb:
                    d6:a1:50:33:83:6f:d2:67:b9:00:2e:0b:5e:88:8c:
                    30:48:4c:eb:14:65:ee:9a:a5:de:2a:e4:7b:22:41:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:67:81:C3:28:03:D3:DE:9E:7D:30:23:FE:98:68:71:4D:62:91:8B
            X509v3 Authority Key Identifier:
                keyid:76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:2b:05:5e:6f:f3:15:c7:ac:aa:58:fa:ea:03:15:97:f5:
         56:66:08:5a:fe:eb:1e:68:78:13:01:49:fb:86:32:80:35:aa:
         7e:ed:d6:43:a8:e3:1c:02:58:66:e9:13:6d:5e:4b:d4:13:71:
         dd:b6:b6:07:4c:13:f4:54:9c:02:09:41:46:ae:04:a6:9f:41:
         47:58:61:d5:b7:12:55:fa:52:75:2d:c8:bf:9c:6d:74:ad:8f:
         49:89:9f:ee:41:a0:54:cb:c5:7d:42:9b:e6:05:e7:d8:5e:3e:
         a3:b0:ef:99:e0:a3:a0:11:d9:53:7f:2c:d6:1c:33:b9:39:50:
         5c:5c:5d:c3:9e:62:11:35:01:c9:6b:93:17:11:d9:1c:1e:e4:
         a4:03:57:4f:c2:ca:10:09:1d:2a:f0:09:d1:c6:18:30:13:01:
         c3:5c:c8:0c:76:6c:db:1c:c9:0a:46:7f:4e:85:f7:d0:2e:7e:
         a9:b9:ce:85:13:d0:c4:a2:b2:bf:fc:8b:06:ff:54:49:ef:c8:
         3c:be:4f:fd:a4:9e:2d:6f:e0:1d:36:83:d0:ac:53:c8:9a:07:
         31:2d:c8:6b:ab:f5:53:fc:4f:0b:fb:32:2c:ad:fc:63:25:63:
         02:2a:ed:f1:2d:aa:26:96:fc:67:03:e7:ea:9a:9e:33:68:b7:
         9d:51:8f:5e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NUUxQzExMC8GA1UEBRMoNzYwNzhEMzYxOUI3QzJBRkJEREEzM0FCNTM2M0VFNUZF
RDdBODYwRDAeFw0yNjAzMDEwOTI4MDNaFw0yNjAzMDgwOTI4MDNaMBgxFjAUBgNV
BAMTDTY5YTQwNmEzLTNmOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoKhbFZ01W3Bujq7nSL9Ro/3IeutcaG7Ad324gyA+W54kTLGT712VN3+X/uka9
l6hy65uU06emaQHX1ufNSt+GA+wqRFoLd0lWtP7l/HJWib75fBOyLUsX+7TZ91Ol
54Es9pCbfR4Hio8ola1qdRMLTKnV5Ol1Xce/phhZefyM7A4ZE5TS+A8MjtKh2J3m
Hr6K6KluGqaXvsUc6oduPEXTru1vPiER8MzvXVpZ2cf/+JLhEOOP6bMJ0WdFwiAU
1KRMgSJL7uaXk8MTVtDJKU84Y8ghGh4dhxtunBplo1u4y9ahUDODb9JnuQAuC16I
jDBITOsUZe6apd4q5HsiQdIbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUameBwygD
096efTAj/phocU1ikYswHwYDVR0jBBgwFoAUdgeNNhm3wq+92jOrU2PuX+16hg0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RTFDLzY0NzU4OTNBODc5
MzExRjBCNTc4NjM0NkM0RjlBRTAyL2RnZU5OaG0zd3EtOTJqT3JVMlB1WC0xNmhn
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZGdlTk5obTN3cS05MmpPclUyUHVYLTE2aGcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1
RTFDLzY0NzU4OTNBODc5MzExRjBCNTc4NjM0NkM0RjlBRTAyL2RnZU5OaG0zd3Et
OTJqT3JVMlB1WC0xNmhnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBVoysFXm/zFcesqlj66gMVl/VWZgha/useaHgTAUn7hjKANap+7dZDqOMcAlhm
6RNtXkvUE3HdtrYHTBP0VJwCCUFGrgSmn0FHWGHVtxJV+lJ1Lci/nG10rY9JiZ/u
QaBUy8V9QpvmBefYXj6jsO+Z4KOgEdlTfyzWHDO5OVBcXF3DnmIRNQHJa5MXEdkc
HuSkA1dPwsoQCR0q8AnRxhgwEwHDXMgMdmzbHMkKRn9OhffQLn6puc6FE9DEorK/
/IsG/1RJ78g8vk/9pJ4tb+AdNoPQrFPImgcxLchrq/VT/E8L+zIsrfxjJWMCKu3x
LaomlvxnA+fqmp4zaLedUY9e
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:28 2026 by rpki-client