Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
File:                     1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json)
Hash identifier:          O6dbwk0EIWKIvn+7Vpr7PWv0xaWm4AWQ7BHBn1+TOHg=
Subject key identifier:   4C:51:B8:4A:2C:68:89:B5:8B:65:74:65:67:A4:1E:86:49:98:C0:C7
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Certificate issuer:       /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial:       1BDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
Manifest number:          1BD2
Signing time:             Mon 02 Mar 2026 01:02:49 +0000
Manifest this update:     Mon 02 Mar 2026 01:02:47 +0000
Manifest next update:     Mon 09 Mar 2026 01:02:47 +0000
Files and hashes:         1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: mrC5f/jHi/H0GDOxQAMawvGRXkzWkbQWhujQgn4TCLk=)
                          2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: Y6ha1LXXijatzuKxRvx5GL0m9bXoYJ6BXHEwlVlS+Ls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
                          rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7133 (0x1bdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
        Validity
            Not Before: Mar  2 01:02:47 2026 GMT
            Not After : Mar  9 01:02:47 2026 GMT
        Subject: CN=69a4e1b8-5c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:2a:60:e6:83:db:cb:bc:4d:a6:b7:76:66:
                    44:ca:cd:b4:66:df:23:88:e3:7b:46:c4:52:8a:f3:
                    cf:d5:1b:d7:c2:6c:f8:9e:84:db:9a:be:9e:80:38:
                    59:11:a2:f6:0d:17:d4:a2:87:ef:e8:23:6e:15:2e:
                    85:73:46:d4:f1:89:16:7a:c0:44:2d:ec:2e:95:ee:
                    ed:47:2f:a2:38:ff:51:9f:5e:7b:19:e9:03:2e:18:
                    43:b7:c1:97:83:57:a2:12:53:35:36:81:ba:a3:d2:
                    f1:47:8c:c8:0d:2f:d2:06:0b:f1:10:c0:07:5c:7a:
                    be:23:ba:43:ee:f6:2f:3a:74:95:81:18:24:c8:96:
                    26:73:7b:22:20:0f:56:45:81:85:7b:35:28:3d:86:
                    de:cd:de:c6:1e:ab:e3:34:d9:7b:ac:13:fd:02:97:
                    36:91:96:2f:65:23:f9:7e:70:56:58:46:31:98:65:
                    fa:2c:ca:1e:c4:dd:e0:9e:82:b0:54:b1:18:79:aa:
                    41:16:c9:f6:90:1d:b0:d8:0b:b7:17:9a:23:2d:f3:
                    15:03:83:30:f6:16:67:36:cc:fa:ad:89:42:3c:2a:
                    3a:e7:4a:2f:1a:fc:fd:6c:33:32:62:df:b6:46:56:
                    7b:39:0b:c5:f7:09:b3:45:dd:c4:95:57:db:5c:40:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:51:B8:4A:2C:68:89:B5:8B:65:74:65:67:A4:1E:86:49:98:C0:C7
            X509v3 Authority Key Identifier:
                keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:15:8c:5b:ff:ba:53:6c:62:8a:0f:58:5d:12:fa:44:0e:85:
         aa:73:32:44:ef:2b:ba:f7:17:32:25:32:dd:49:a0:1e:5e:47:
         37:b6:c9:5c:76:63:ab:fa:bb:26:23:2b:e8:1f:b7:00:27:e3:
         d2:6b:b5:2c:dd:75:11:7b:6f:43:fb:c9:a4:ff:a6:4c:ab:c0:
         ed:a2:f6:72:eb:26:e7:3a:e9:c2:16:a9:43:b2:c1:11:53:4b:
         f4:c1:31:ea:14:fc:c3:e9:2c:13:4f:f8:f3:53:c4:95:cb:6e:
         37:91:12:14:a0:98:bf:e3:32:22:61:28:1b:79:58:e8:f2:0c:
         87:18:5b:0c:1b:08:01:b0:38:ce:a8:ab:e4:c2:2d:41:f6:9c:
         87:9e:11:56:f2:1c:fa:42:69:42:24:7b:39:f3:b5:43:97:59:
         e3:1c:0f:e4:97:07:93:91:5b:f5:0e:99:85:10:02:65:75:3d:
         10:4c:6e:7c:07:b7:38:2f:9f:09:0b:e6:38:5d:5c:29:4a:d5:
         69:ba:99:f1:38:32:9c:0a:ff:e1:cb:ef:1d:33:54:29:b8:98:
         fa:4b:78:3e:9b:4b:1b:70:5b:ed:46:b7:f1:ed:6b:a0:44:5c:
         b5:06:e8:8f:66:6e:29:e8:83:f5:25:50:a8:ba:de:ee:75:b0:
         47:bc:76:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhERDUxMTAvBgNVBAUTKEQ2QzNGODEzNzhFODU0MDA3OEJBNzk5NDQyRUVEQkVD
NzgwRTBGN0IwHhcNMjYwMzAyMDEwMjQ3WhcNMjYwMzA5MDEwMjQ3WjAYMRYwFAYD
VQQDEw02OWE0ZTFiOC01YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2XAqYOaD28u8Taa3dmZEys20Zt8jiON7RsRSivPP1RvXwmz4noTbmr6egDhZ
EaL2DRfUoofv6CNuFS6Fc0bU8YkWesBELewule7tRy+iOP9Rn157GekDLhhDt8GX
g1eiElM1NoG6o9LxR4zIDS/SBgvxEMAHXHq+I7pD7vYvOnSVgRgkyJYmc3siIA9W
RYGFezUoPYbezd7GHqvjNNl7rBP9Apc2kZYvZSP5fnBWWEYxmGX6LMoexN3gnoKw
VLEYeapBFsn2kB2w2Au3F5ojLfMVA4Mw9hZnNsz6rYlCPCo650ovGvz9bDMyYt+2
RlZ7OQvF9wmzRd3ElVfbXEAvUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExRuEos
aIm1i2V0ZWekHoZJmMDHMB8GA1UdIwQYMBaAFNbD+BN46FQAeLp5lELu2+x4Dg97
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOERENS9ENUExQTFDNjEy
QTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZBQjR1bm1VUXU3YjdIZ09E
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFzUDRFM2pvVkFCNHVubVVRdTdiN0hnT0Qzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OERENS9ENUExQTFDNjEyQTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZB
QjR1bm1VUXU3YjdIZ09EM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGBWMW/+6U2xiig9YXRL6RA6FqnMyRO8ruvcXMiUy3UmgHl5HN7bJXHZjq/q7
JiMr6B+3ACfj0mu1LN11EXtvQ/vJpP+mTKvA7aL2cusm5zrpwhapQ7LBEVNL9MEx
6hT8w+ksE0/481PElctuN5ESFKCYv+MyImEoG3lY6PIMhxhbDBsIAbA4zqir5MIt
Qfach54RVvIc+kJpQiR7OfO1Q5dZ4xwP5JcHk5Fb9Q6ZhRACZXU9EExufAe3OC+f
CQvmOF1cKUrVabqZ8TgynAr/4cvvHTNUKbiY+kt4PptLG3Bb7Ua38e1roERctQbo
j2ZuKeiD9SVQqLre7nWwR7x2xA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:48 2026 by rpki-client