Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
File:                     g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json)
Hash identifier:          dtrGWmTbyAUOKdohqoEE3xorDCgBciHz4utlY50n0Ho=
Subject key identifier:   E3:44:BC:42:89:30:80:D4:BD:EC:4D:F1:25:55:57:4A:F9:1D:4C:94
Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
Certificate issuer:       /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Certificate serial:       0883
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
Manifest number:          0870
Signing time:             Sat 28 Feb 2026 21:02:28 +0000
Manifest this update:     Sat 28 Feb 2026 21:02:28 +0000
Manifest next update:     Sat 07 Mar 2026 21:02:28 +0000
Files and hashes:         1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: GyR4q98ySX9mb6cWu/EsltEua/Exk+9iG7ym/Hr+/0w=)
                          2: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: +h3ZHBCw6Qz+t4F3LGXV8hFxYh9j7OtLHTGZFocNf1k=)
                          3: 1229795E652C11EB9B039023C4F9AE02.roa (hash: rMEPct0/XVC8TEo39bfA4k3rkfghG8GcbNnIjivqw1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
                          rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
        Validity
            Not Before: Feb 28 21:02:28 2026 GMT
            Not After : Mar  7 21:02:28 2026 GMT
        Subject: CN=69a357e4-662b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:3a:ab:14:13:1c:f3:f1:18:01:7a:26:c9:
                    19:92:13:fc:43:72:5a:a0:58:a4:ab:99:c8:9a:c3:
                    df:1e:99:94:cb:cb:37:5d:21:6f:16:39:f8:f1:cd:
                    f5:24:67:50:c7:3f:ac:2b:a2:da:ba:d8:f6:06:ce:
                    bc:93:c9:b3:f6:86:f5:f5:48:75:d3:bd:10:90:70:
                    79:1e:7f:b9:b8:90:a2:72:c4:ef:a7:f9:52:d2:aa:
                    e0:31:be:6c:8e:5d:cd:09:f3:27:41:10:fa:10:f0:
                    30:5c:d0:97:b6:93:a0:2a:ce:b7:79:72:40:d6:ed:
                    f2:85:7f:e3:8d:e6:34:68:e5:c6:b1:1e:56:78:23:
                    43:b6:df:3f:6d:20:5b:5d:5d:e2:27:e9:99:e0:d3:
                    51:2b:e7:bd:fd:05:cf:c3:09:2f:13:0b:44:3b:ca:
                    a2:ce:9c:ed:d6:62:54:b8:20:14:6c:27:89:81:19:
                    f8:a8:b2:39:dd:ec:8b:18:9c:34:9d:c1:e5:4e:24:
                    d6:c3:af:fc:46:0c:1a:4d:c9:4c:41:2c:4d:61:ad:
                    51:0e:20:26:2e:48:82:a6:c8:fa:3c:78:0c:f3:ef:
                    e7:00:ab:97:2f:5f:5d:de:11:4f:da:db:5e:75:34:
                    1e:04:c2:a6:94:ad:49:97:27:1f:00:15:ca:ab:f6:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:44:BC:42:89:30:80:D4:BD:EC:4D:F1:25:55:57:4A:F9:1D:4C:94
            X509v3 Authority Key Identifier:
                keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e6:d6:08:4a:1a:3d:22:d0:1a:06:c8:5b:03:1f:9f:09:a4:
         ba:13:2f:a3:12:f0:78:15:9c:6c:59:57:b3:aa:97:08:1f:55:
         c3:3f:9e:6c:29:a2:f2:73:8d:47:f1:43:96:b9:24:ea:4a:60:
         bd:09:ff:e4:30:c5:44:5b:e0:71:60:1b:f2:e6:aa:09:31:84:
         b3:38:da:ac:c2:82:83:a8:61:8c:4e:94:a6:91:bd:76:62:90:
         3d:b4:b7:e9:10:66:8f:81:e7:65:f3:22:3b:08:de:c7:af:b5:
         33:95:f7:42:95:e1:02:6f:b6:b5:13:7f:fa:08:ed:bf:9d:4e:
         b8:a7:df:83:80:08:80:54:78:8f:c3:56:b1:ee:8b:b8:d1:2e:
         14:21:fb:e8:94:6e:c9:c4:2e:55:aa:04:df:08:46:e0:bd:89:
         c3:2b:23:92:96:15:98:2d:47:70:6b:d6:d9:a3:41:04:df:81:
         7a:b4:c7:39:fe:29:1c:b8:27:f7:89:ae:3d:fd:0b:cb:fe:6b:
         7a:ac:be:50:f6:5f:b0:fd:50:1e:dd:4d:81:e7:be:ae:54:d8:
         53:19:9a:d5:89:7d:46:32:8c:c7:59:89:69:a0:8b:3a:ca:56:
         23:c1:5f:8e:95:20:c1:cf:1d:4d:33:53:ae:33:40:1a:5a:a7:
         f3:59:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:14 2026 by rpki-client