Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
File:                     eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json)
Hash identifier:          P2BNn2GposXgwAU+LDeVmAgxC8a+folu2qfL76LoKn4=
Subject key identifier:   42:B7:D1:9A:C4:80:39:54:6B:9B:01:51:97:DC:BE:80:16:91:53:60
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       11D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
Manifest number:          1154
Signing time:             Sat 28 Feb 2026 17:23:16 +0000
Manifest this update:     Sat 28 Feb 2026 17:23:15 +0000
Manifest next update:     Sat 07 Mar 2026 17:23:15 +0000
Files and hashes:         1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: Yz9rDoI6i7J6vYc+5KdDq4lKGAvSayDWqwLaMpK4+DM=)
                          2: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=)
                          3: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=)
                          4: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=)
                          5: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=)
                          6: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=)
                          7: 08DE553CE33411F09C32B5836E6F56BC.roa (hash: eUx0szc6mDFrTXmR6KQgfAyJ6imSHu6ZcWSwSYyS93w=)
                          8: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: /aMpRk+sARCQOAQAAD5zmHedoziM1XqWy40fj+d7TUA=)
                          9: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
                          rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4567 (0x11d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
        Validity
            Not Before: Feb 28 17:23:15 2026 GMT
            Not After : Mar  7 17:23:15 2026 GMT
        Subject: CN=69a32484-c631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:32:27:88:f1:e0:a3:cc:e9:f0:4c:02:49:
                    c6:0a:5c:a7:89:2e:e6:56:9b:16:6d:2b:ac:c0:99:
                    a8:d7:93:72:3a:a2:e2:8d:28:f6:6e:67:2f:74:8d:
                    dc:0a:8f:fe:d9:f3:c2:99:dc:b4:eb:f7:4e:0a:c2:
                    52:0f:c5:bf:c5:68:77:a2:d6:3b:82:8d:35:14:e7:
                    29:9a:84:4b:61:7b:18:63:8f:e2:43:75:99:bc:d0:
                    75:a4:a1:8f:7a:69:8a:18:1f:bc:d1:77:94:6f:ae:
                    04:21:58:00:7c:35:25:9f:10:f4:ce:64:e9:1f:7c:
                    a1:b5:4b:4b:1e:19:cb:eb:21:86:e0:a5:01:4f:a1:
                    7f:bf:6b:27:84:30:bf:9c:26:00:1f:81:db:28:7a:
                    63:77:b8:32:b7:55:5c:35:3d:0c:58:f6:74:fc:79:
                    40:0b:9a:3f:06:7b:9d:17:50:87:39:e1:f6:ea:34:
                    72:a3:44:d7:a0:ee:48:66:44:d6:22:b2:c6:2e:33:
                    89:25:13:21:9a:64:b8:12:2b:8e:0a:a6:7e:09:09:
                    3f:f9:3a:ca:ae:cf:2a:5d:ef:f2:0c:88:21:12:b1:
                    64:d0:38:e6:c5:c0:0e:f1:a3:4f:7b:4e:3b:98:ff:
                    6e:fd:75:07:17:d6:b2:ed:60:a9:cd:85:9d:cc:12:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B7:D1:9A:C4:80:39:54:6B:9B:01:51:97:DC:BE:80:16:91:53:60
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0f:2d:cb:d3:ab:31:88:b8:79:48:67:7d:a7:02:79:c8:e9:
         d3:8e:56:9c:dd:f2:95:fc:42:6b:d8:4e:f4:df:ba:33:a0:54:
         ce:ed:a2:a4:cd:58:7a:42:a1:8f:40:c4:3e:d2:2a:4c:1a:19:
         81:ad:f8:ba:b1:72:6d:12:ed:31:0a:de:ee:a6:ba:47:d1:72:
         9b:1f:91:70:8b:f5:1f:00:c1:0f:ba:a5:4a:93:67:97:58:0a:
         7f:ce:58:32:64:50:41:65:dd:10:b8:0c:08:1b:06:19:10:17:
         1d:90:d9:88:26:ce:55:bc:99:83:4b:1d:65:7c:40:b6:74:19:
         33:55:93:37:fd:c9:c4:86:07:58:96:93:0e:f2:d2:41:87:4d:
         19:d6:9a:0c:71:76:77:20:7f:d9:17:5c:26:b7:93:c1:64:86:
         1d:54:0a:31:62:52:f9:a2:1e:47:b8:54:73:22:33:31:73:88:
         e2:44:09:b6:16:e5:b9:72:12:af:b2:0d:85:66:bc:c4:e2:d4:
         af:bf:5b:ec:e2:00:fb:83:3f:c1:19:28:24:51:7c:e2:24:63:
         96:91:6f:f1:62:22:e8:68:69:6c:56:11:69:36:83:a9:0a:09:
         1d:3e:9c:d3:b4:dc:46:2a:e2:ff:a1:81:14:af:d7:ea:4e:32:
         f7:9b:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:00 2026 by rpki-client