Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
File:                     fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json)
Hash identifier:          yta6Qgg4MIHtw2OCTZGDaPFN0rQpyGlqHLUJX830IJE=
Subject key identifier:   24:58:B5:8A:58:47:B1:43:7F:76:14:8D:24:74:B9:FA:5B:DF:0A:E6
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Certificate issuer:       /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
Manifest number:          10BB
Signing time:             Mon 02 Mar 2026 02:45:54 +0000
Manifest this update:     Mon 02 Mar 2026 02:45:53 +0000
Manifest next update:     Mon 09 Mar 2026 02:45:53 +0000
Files and hashes:         1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: /6qZ45Rmdk7FUHnSZTqvsBYx/4gcQIatHGoSKKIg3xQ=)
                          2: C81D36F6BEDC11F0AF08E624C4F9AE02.roa (hash: 1J7j30+ecYs8q2CEskYxNPpSwChLTOK//wlHK+33Uk0=)
                          3: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: UK5Y1BvTF6mSpyl8diq+eDztkAHGBr1o5/3yxV9i52A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
        Validity
            Not Before: Mar  2 02:45:53 2026 GMT
            Not After : Mar  9 02:45:53 2026 GMT
        Subject: CN=69a4f9e2-ce7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:68:b5:f6:31:5a:d8:45:84:cf:17:37:cd:
                    11:14:e8:a9:4d:29:ed:05:e1:47:76:0e:64:80:c2:
                    d1:fe:b5:c0:02:05:8a:33:b0:a9:b5:7f:08:93:6f:
                    0e:e7:16:e0:1d:33:a9:7f:f6:f9:38:52:b3:16:d1:
                    0f:44:1a:ef:59:81:e4:b3:5c:11:9d:bc:a4:51:94:
                    70:2a:f5:5d:a0:64:68:6d:fe:1e:75:82:19:43:fb:
                    be:32:22:19:31:8e:68:69:23:f5:a8:24:1f:da:4c:
                    12:c4:25:f4:51:2a:d9:d2:cd:0c:9b:fa:1c:62:c4:
                    08:35:47:6a:d4:2d:bb:8c:37:49:6d:94:ce:4e:be:
                    1c:86:66:37:4b:1f:34:06:6e:fc:3f:37:5b:2e:00:
                    35:24:0f:98:65:e0:c3:fe:f4:6d:e8:84:99:16:89:
                    c3:e6:6c:28:b3:24:a5:f6:32:54:30:c9:cf:2f:fc:
                    62:c6:2b:85:ac:a7:e2:17:99:0a:88:b4:29:cc:ea:
                    f7:d2:64:35:0d:33:74:58:dd:a8:c7:1b:9b:84:6f:
                    4b:c5:70:03:d3:c6:cc:33:eb:34:11:98:44:b8:06:
                    a1:d6:a7:62:a3:11:3c:8d:43:e5:39:25:c6:16:9a:
                    ff:7d:07:a5:b6:69:72:2b:ee:9c:93:7b:9d:1f:55:
                    1a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:58:B5:8A:58:47:B1:43:7F:76:14:8D:24:74:B9:FA:5B:DF:0A:E6
            X509v3 Authority Key Identifier:
                keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:60:f7:34:a4:b8:9b:0b:18:24:12:35:2c:2b:93:a0:7c:04:
         0a:1c:84:81:91:17:81:73:92:25:0c:0e:99:ec:4b:fd:31:c5:
         89:75:8a:4f:b3:66:79:5c:b6:68:31:a1:46:4f:54:68:27:a2:
         1d:42:90:ae:3f:a6:8b:26:18:c6:5f:d0:0d:55:1f:55:a2:fb:
         50:f8:a7:bd:56:7b:23:ef:14:78:a8:bd:f8:92:cb:ab:03:36:
         8b:b4:a9:eb:2d:16:84:0d:2d:e4:7b:88:0d:30:41:d2:fa:f6:
         b2:e8:e9:9c:ea:5d:f4:70:45:59:42:ad:3e:a7:d7:31:10:1a:
         4c:76:c1:b0:75:fe:57:74:f3:05:bd:1e:0c:f5:55:b8:11:17:
         63:15:14:3e:28:d5:9b:18:0d:60:37:8f:96:8b:20:05:9d:3c:
         b1:17:7a:26:17:8c:8f:57:97:57:cd:c5:77:8b:54:33:52:4d:
         95:4d:3b:d6:a0:f3:a0:fb:83:6e:be:ba:76:74:bc:dd:73:9d:
         91:fd:93:88:49:7b:ea:e6:18:bb:7c:b1:21:87:2b:b3:cc:7a:
         e5:46:8e:d2:d6:9e:f7:db:f5:71:8c:35:f6:99:e1:a3:a5:11:
         5c:39:90:76:b6:2b:ae:ec:d6:22:39:b6:0d:8f:ec:55:06:9d:
         d9:f4:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:19 2026 by rpki-client