Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
File:                     P80_M6jgglw55KhM1pOVpvKwYUg.mft (raw, json)
Hash identifier:          5QMNEC4DsiOe3nT5FK8shxXQBE3N1tJl/ONGUEE6ISY=
Subject key identifier:   A8:20:A2:4D:E3:D8:7F:02:4F:0B:8C:07:20:73:F7:5B:7B:98:0D:9F
Authority key identifier: 3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48
Certificate issuer:       /CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
Certificate serial:       0253
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
Manifest number:          024D
Signing time:             Mon 02 Mar 2026 00:38:58 +0000
Manifest this update:     Mon 02 Mar 2026 00:38:56 +0000
Manifest next update:     Mon 09 Mar 2026 00:38:56 +0000
Files and hashes:         1: P80_M6jgglw55KhM1pOVpvKwYUg.crl (hash: Agy1F7KFkYKZ7eiASq6YshXYZMh+qBgQ7QvwHSVTNpI=)
                          2: F67C04568FE011EDA9919C57C4F9AE02.roa (hash: GPLhGbq9QSxla1GiW0PwGoa1umY2CgsEamSgpbhImgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl
                          rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4120, serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
        Validity
            Not Before: Mar  2 00:38:56 2026 GMT
            Not After : Mar  9 00:38:56 2026 GMT
        Subject: CN=69a4dc21-dfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:ea:59:b1:bf:0e:c6:14:ba:fb:3d:3a:99:
                    43:ef:76:81:7a:1b:a4:a1:bc:39:80:92:4c:04:4f:
                    f3:64:3d:c2:ce:73:2f:37:cf:ba:e2:70:31:39:1b:
                    7b:a7:f7:67:b3:d9:f7:58:a7:a7:65:72:ca:77:26:
                    8d:9d:da:84:74:a8:1e:ee:ec:cc:71:ab:58:52:01:
                    ee:f3:f6:04:af:4f:3b:89:b2:6d:cd:ab:0d:8c:23:
                    02:5d:9c:97:9b:57:97:ec:3b:3a:11:50:8e:d0:80:
                    ce:2c:c0:f0:d5:64:d9:29:c1:0d:4c:0a:92:ca:c7:
                    cd:2e:15:87:ce:68:22:9a:55:4f:72:dc:4d:9b:a3:
                    d4:58:b2:ef:71:dd:83:25:f4:52:43:b6:91:dc:f7:
                    ab:0a:7d:90:30:d5:fc:73:5f:8a:cb:ed:99:00:fc:
                    e2:55:67:c7:f8:c6:3a:9c:3a:0a:36:d5:e5:02:fa:
                    ef:54:87:89:7c:61:01:f1:83:b9:da:72:49:41:3c:
                    10:e6:e5:9b:8d:06:16:02:9d:5d:07:d1:74:1a:4c:
                    8b:ab:98:00:f6:14:4d:03:a0:2e:4a:11:39:7e:24:
                    42:e8:f0:1a:ea:da:ea:8c:db:7e:6d:ea:9f:de:95:
                    82:5e:61:50:38:b0:2b:7c:cf:9e:06:8c:cf:bf:1f:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:20:A2:4D:E3:D8:7F:02:4F:0B:8C:07:20:73:F7:5B:7B:98:0D:9F
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ac:84:73:fa:ef:9b:b3:6b:9e:9f:10:10:23:29:70:64:9d:
         d4:7a:86:34:a1:9f:7f:75:38:7e:47:d6:2a:b8:a9:f0:3d:f1:
         92:43:ff:56:09:a5:55:f8:05:87:2b:a9:d3:58:ac:72:c2:a2:
         9e:31:73:e9:62:d8:5e:6e:ab:d2:10:2b:bb:5b:2f:66:06:35:
         da:c1:ac:42:44:ea:e5:1a:4a:bf:53:a1:3a:7e:80:b8:a7:cd:
         6f:e5:44:b4:50:34:ba:95:02:96:7a:9a:6c:a7:25:64:07:ad:
         a5:90:37:98:75:f8:cb:e6:78:e2:04:c6:2d:67:ce:5b:41:66:
         9b:0f:65:c8:f2:d4:24:bc:0f:e2:fc:a7:2b:37:1f:f4:38:c6:
         10:2f:bb:97:33:21:a8:c3:7e:f9:c9:20:78:66:5a:03:02:e4:
         71:db:ae:67:fc:d4:fc:1b:97:f3:f7:3a:70:d8:61:d2:6f:db:
         29:97:12:b1:ad:58:f7:40:8a:28:68:ce:31:1c:3d:ce:57:d5:
         fe:a0:4b:a4:18:fd:5b:d7:44:0a:45:fe:71:ae:8c:f1:9b:29:
         43:8a:bd:83:b7:b7:fb:a4:57:3e:8b:6a:ee:5f:62:d2:08:53:
         29:e6:da:87:6a:35:e7:22:58:ca:70:50:99:5b:75:9b:28:10:
         de:b6:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:57 2026 by rpki-client