Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
File:                     mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json)
Hash identifier:          FIk35IEg4KzUJrrgDS6mcdFHSMufS85+Cx7BuH4Q+L8=
Subject key identifier:   9F:8A:2A:00:4B:D7:61:0E:09:AC:33:5C:A8:75:67:F2:5B:61:AE:08
Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
Certificate issuer:       /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
Manifest number:          024F
Signing time:             Sun 01 Mar 2026 03:12:56 +0000
Manifest this update:     Sun 01 Mar 2026 03:12:55 +0000
Manifest next update:     Sun 08 Mar 2026 03:12:55 +0000
Files and hashes:         1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: cx6UTaxqhiOaQ4NDvXIbhFaanofw601r8g8j4f1vo0Y=)
                          2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: vsTUw206l1auqFVbmz2vzluecexhQZaC872q8GqZIqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
                          rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
        Validity
            Not Before: Mar  1 03:12:55 2026 GMT
            Not After : Mar  8 03:12:55 2026 GMT
        Subject: CN=69a3aeb8-fbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:d6:84:3b:a4:10:13:1a:da:a1:74:58:54:
                    14:2f:2d:b1:b2:cc:82:6a:c1:4e:ec:6a:d0:cc:59:
                    e1:cf:61:c4:f0:09:72:00:b3:cb:c3:cf:17:47:a1:
                    ae:79:ab:ef:7a:39:cc:bc:90:7c:8e:7e:1b:cb:f1:
                    fd:6a:4d:c0:96:fa:ad:2a:12:19:be:f8:97:02:ef:
                    e4:88:3a:2f:71:7a:23:ec:b6:92:a9:bb:5c:30:d9:
                    ce:67:94:2d:33:8c:a8:fc:a7:c6:4a:87:b6:ff:55:
                    18:f5:a8:02:f2:2f:71:73:55:73:f9:98:3b:40:bc:
                    cb:02:05:b3:75:9d:f1:37:7b:7b:7e:b7:ad:52:59:
                    7d:04:8c:7f:15:c3:7f:b5:f8:6c:47:b4:1d:16:fd:
                    6e:a5:fb:eb:33:0b:75:b3:e7:c6:64:b1:99:4a:4d:
                    67:53:42:69:be:1c:89:4d:b9:4e:06:c5:79:cd:49:
                    70:df:36:a5:4f:dc:81:1f:17:24:f1:f5:b2:25:f7:
                    dd:8f:48:09:67:29:f1:8d:8f:03:95:bb:66:8d:6e:
                    17:92:ce:c2:ad:08:41:9e:b0:9e:fe:98:69:91:6a:
                    c1:72:f0:b8:b3:55:55:37:e5:c2:87:3b:3d:64:0f:
                    f7:87:67:51:d4:f7:d9:ae:d1:da:5d:e8:73:8d:f1:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8A:2A:00:4B:D7:61:0E:09:AC:33:5C:A8:75:67:F2:5B:61:AE:08
            X509v3 Authority Key Identifier:
                keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:36:42:03:af:44:19:e1:1f:bd:41:b2:94:5a:9b:0e:5b:29:
         45:ad:1c:d4:1c:7e:9c:ac:c6:b9:5d:ce:a7:82:4c:c3:69:e3:
         09:37:f0:fe:63:21:ac:1a:8c:d5:eb:91:d8:f6:1e:25:1d:ad:
         e7:83:36:1a:f7:de:d9:5f:75:70:c1:98:2b:5e:7f:f0:4c:8c:
         5c:55:fb:db:aa:b2:5c:e3:67:dd:7d:25:fb:1c:7e:07:a4:ce:
         c1:8c:00:2b:87:b4:39:86:a9:89:70:6f:41:ba:f1:3e:c5:09:
         bc:37:15:6f:95:2a:26:7f:ba:f9:bc:3d:83:37:f4:d5:69:85:
         9f:47:e7:37:37:a4:eb:23:cd:96:70:5b:81:85:f5:a9:36:6f:
         3a:0e:9e:a2:ad:62:c6:f6:57:af:d8:70:9d:3b:73:86:b2:1b:
         b2:ff:9f:b1:7a:f4:84:70:e8:a0:4a:13:0f:0b:f3:52:c1:67:
         42:01:46:17:20:7e:60:9d:84:b2:4a:58:4b:5d:08:cc:b3:d4:
         1b:49:ee:a6:ec:bb:56:68:6c:d6:c8:14:0f:a2:d1:7b:2a:80:
         7b:08:b6:f8:12:a5:9e:d1:31:d1:0a:8a:a1:ef:b6:25:05:34:
         65:85:63:8a:81:8b:d4:53:1f:84:94:60:aa:be:51:71:4f:11:
         36:4b:02:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:59 2026 by rpki-client