Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
File:                     dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json)
Hash identifier:          HJhAhLpKMEhggBzcJAs42Jq15EgIDAiavlGl6hHS4pg=
Subject key identifier:   DA:D0:EC:D9:A6:F2:69:48:EE:FF:39:EA:17:2F:F5:E8:C9:8B:70:0E
Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Certificate issuer:       /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
Manifest number:          7C
Signing time:             Sun 01 Mar 2026 22:26:12 +0000
Manifest this update:     Sun 01 Mar 2026 22:26:11 +0000
Manifest next update:     Sun 08 Mar 2026 22:26:11 +0000
Files and hashes:         1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: BZdf8Wl1af/2xpw7ooQWAwHWdkfmqWK6iegQEvqHUnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
                          rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
        Validity
            Not Before: Mar  1 22:26:11 2026 GMT
            Not After : Mar  8 22:26:11 2026 GMT
        Subject: CN=69a4bd03-6e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:54:24:32:3c:9c:3e:b1:49:4a:b6:12:42:
                    c6:25:97:73:0b:af:f5:89:a0:71:09:a1:be:42:0f:
                    59:fa:65:a2:79:4b:d5:01:ef:8c:68:b8:17:3f:ee:
                    14:2b:e9:1a:09:cb:dd:28:ab:7a:98:1d:90:c2:a7:
                    6a:18:7c:47:36:bd:00:a7:45:86:fe:d7:84:57:92:
                    ca:ae:3a:82:c6:7f:ac:2a:bd:26:75:78:1f:0a:e6:
                    bc:a4:89:5a:d0:90:72:9e:64:c8:cb:fa:1c:40:a8:
                    a9:33:d1:17:49:83:fe:ce:78:94:96:da:bd:c0:4d:
                    d3:87:4c:9c:23:2a:c5:0a:ec:85:ce:86:26:9b:62:
                    e0:09:02:ec:3d:77:f7:ce:fb:31:7c:35:ab:66:3d:
                    26:6b:53:f5:ab:18:4f:bf:72:7d:18:8b:5b:22:e9:
                    49:fc:18:af:a0:37:14:61:45:50:7b:3c:09:9f:3c:
                    2e:4f:90:63:00:8e:31:64:b4:d5:bc:a8:bd:87:8d:
                    ea:59:be:13:3a:4d:f5:df:2c:fc:ee:43:70:38:76:
                    b3:03:8c:4d:fe:61:e5:af:0b:20:66:f3:69:96:55:
                    92:15:69:15:8b:61:4a:07:e8:22:88:58:3b:06:6f:
                    74:df:12:34:b5:e9:ef:d1:75:c7:23:e7:11:ee:a0:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D0:EC:D9:A6:F2:69:48:EE:FF:39:EA:17:2F:F5:E8:C9:8B:70:0E
            X509v3 Authority Key Identifier:
                keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a4:ef:ec:74:81:72:4c:4a:42:c7:aa:5b:75:5a:e9:5f:bf:
         a1:fc:2b:c7:64:a5:98:d2:93:78:84:c9:ee:7b:c7:19:84:2c:
         2b:48:68:10:6d:46:3b:67:2c:8c:2a:e9:17:b8:4d:57:c9:1a:
         4c:bb:64:c3:64:66:67:ea:13:70:96:02:a6:6c:df:06:39:d2:
         fa:ed:75:b1:b2:5e:69:22:99:64:3e:0b:b3:7e:d0:cd:89:5d:
         cb:48:47:3e:da:59:0f:a8:47:0d:78:5e:f1:ff:f3:ab:97:b8:
         8a:eb:46:0b:4e:00:98:f9:9c:95:0b:6b:e8:d3:48:73:2e:e4:
         c2:8d:e2:06:fa:fa:67:04:ca:47:c3:6f:36:ed:21:49:de:cd:
         be:5e:51:d0:d2:e3:a0:78:2d:0e:3f:31:a0:56:bf:c8:fc:69:
         9d:44:06:61:64:1e:fb:df:bc:c4:06:d5:71:b9:a3:15:68:5e:
         1b:fc:91:02:10:10:b9:4b:b3:78:99:79:1d:cf:9f:e6:49:f0:
         e7:93:33:e9:1f:a2:87:a2:bc:01:34:e9:c0:80:ad:98:fa:8d:
         cd:ed:4d:2b:4a:24:ed:8d:2b:be:c5:f6:91:91:d5:62:81:13:
         2f:aa:cc:f1:ce:63:1f:a9:95:aa:ae:08:84:12:03:6c:03:56:
         27:81:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:12 2026 by rpki-client