Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
File:                     4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json)
Hash identifier:          XGXxgaHEnbIED8Bcbf/puBbwXRdtseTxodQdQD/Vt+A=
Subject key identifier:   4F:28:A2:6E:CE:61:CD:78:B0:81:B1:18:3F:FD:F1:FC:7B:84:91:DB
Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80
Certificate issuer:       /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
Certificate serial:       069C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
Manifest number:          0697
Signing time:             Sat 28 Feb 2026 22:58:09 +0000
Manifest this update:     Sat 28 Feb 2026 22:58:09 +0000
Manifest next update:     Sat 07 Mar 2026 22:58:09 +0000
Files and hashes:         1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: 3viwRgDhknAJUKtUbN4I+pIdp8z9q8fEKcgGVMN0QuY=)
                          2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: Om3xOjvt7/SStBWrpIGKKE+8s1rKbJeum5OSIuQByU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
        Validity
            Not Before: Feb 28 22:58:09 2026 GMT
            Not After : Mar  7 22:58:09 2026 GMT
        Subject: CN=69a37301-9d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:c7:f6:c7:ea:91:ca:ae:45:60:54:46:9e:
                    ea:3a:c5:6c:e7:d7:af:39:71:98:82:13:b5:24:ae:
                    fa:e9:62:e4:7c:f2:58:87:8e:fd:a4:21:34:9a:c5:
                    5f:13:23:82:e8:67:a5:57:57:6a:ad:78:5e:69:e0:
                    0e:a5:f6:8e:ed:1a:0e:8d:f7:b5:e0:a7:b1:23:76:
                    e4:32:18:78:3b:6a:46:f9:51:1b:0d:f4:a6:33:b2:
                    2b:6e:b5:e6:a3:a6:0e:5c:b1:7c:65:ee:e4:65:a7:
                    cc:37:c4:0b:ab:e6:43:6b:57:2e:b2:7b:63:82:42:
                    36:53:be:1f:0e:8c:1c:bc:67:92:a3:fb:b1:e1:a8:
                    a6:95:46:6a:6f:26:c8:a0:a9:2b:6c:ba:6f:8e:b4:
                    a7:62:f1:f6:63:9b:c6:3f:b0:58:39:4e:0d:22:c3:
                    11:7b:34:cd:21:a5:b7:32:3f:ae:0b:2a:59:df:ee:
                    8d:a9:d5:79:f8:9b:16:63:04:7d:40:2f:a3:d4:44:
                    3a:c5:91:92:8e:9e:21:81:73:a4:b3:1d:f3:5b:2a:
                    bf:07:89:ad:8c:70:6c:20:19:f1:73:a6:ed:d2:cc:
                    e1:3a:c5:4c:9d:4f:57:78:a2:87:f1:3a:ce:62:c1:
                    c5:06:1a:3e:bf:87:cc:b3:24:47:c8:6b:39:9f:0a:
                    3b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:28:A2:6E:CE:61:CD:78:B0:81:B1:18:3F:FD:F1:FC:7B:84:91:DB
            X509v3 Authority Key Identifier:
                keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:44:e8:3e:f6:24:6d:15:ea:a5:74:db:7d:b9:69:1c:d5:
         e9:35:3c:5d:df:94:a1:77:e0:19:bb:b6:9b:32:9d:a2:98:d8:
         76:c3:c8:85:84:5d:65:5a:63:a1:ae:05:5b:3d:4f:81:1c:a0:
         0b:4d:8d:31:13:76:c6:ea:2e:25:6c:d7:5f:ed:1c:43:29:cd:
         7e:fd:d2:dc:91:67:76:eb:79:c2:13:da:ad:2e:9b:99:05:18:
         d9:f6:ec:7b:14:af:2a:5a:5d:5d:5d:81:f2:9d:5e:18:c3:76:
         57:b6:fc:70:5c:29:4d:7a:5f:97:38:8a:b0:8e:14:91:b7:3f:
         d1:28:26:ff:4d:27:05:cd:d8:92:f0:fb:61:9a:1d:49:ff:f6:
         c9:37:4c:94:11:39:dc:37:c1:ad:ea:09:d8:72:4e:c8:9d:51:
         fd:28:42:87:c4:23:00:b0:67:77:72:d9:ce:73:84:e3:01:92:
         16:88:4d:bf:60:a6:97:68:7a:92:fd:60:6d:c4:61:58:2a:34:
         76:d0:2c:12:e3:55:51:c9:f2:11:7a:cc:cd:41:28:d2:76:54:
         eb:bb:15:98:1a:66:e5:a2:87:87:55:05:7b:69:a7:0b:b8:77:
         6e:c8:b5:53:a2:40:13:f1:39:f7:66:08:72:28:11:3a:3b:6f:
         90:d8:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:03 2026 by rpki-client