Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
File:                     Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json)
Hash identifier:          s3uL/UDzvjjYOWWyfygtJIOziLJVv6Rznx1xNzIhSH4=
Subject key identifier:   DB:50:20:9A:04:14:7F:8D:3C:5C:F1:1C:AD:40:6D:D6:FB:64:16:76
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Certificate issuer:       /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
Manifest number:          01AD
Signing time:             Sun 01 Mar 2026 04:58:52 +0000
Manifest this update:     Sun 01 Mar 2026 04:58:51 +0000
Manifest next update:     Sun 08 Mar 2026 04:58:51 +0000
Files and hashes:         1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: 0XJimkIuBGJ+A5hsRyDPpXv0Nz7wfjoLPwUhg5GE+Mk=)
                          2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: 3HWnDyWEtOpHu0uBguZ+JM7rc6iM3YGM5kp7ba2OwHc=)
                          3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: oml3CF4psDxkIWKsQkPuNHlhG20UbCTK/gnR4LIPvqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
                          rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
        Validity
            Not Before: Mar  1 04:58:51 2026 GMT
            Not After : Mar  8 04:58:51 2026 GMT
        Subject: CN=69a3c78c-8aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:de:09:de:ab:df:1e:0f:96:ad:bf:c6:02:
                    0d:4e:a5:02:7b:de:57:e4:65:4a:89:9f:ab:ee:46:
                    f8:fe:4e:83:4d:28:4e:a7:79:e4:0b:48:4e:da:09:
                    ea:93:91:3b:07:3a:e0:75:f7:23:06:c6:df:94:08:
                    37:73:cd:32:3d:cf:1d:ef:47:27:d9:d0:34:fa:7c:
                    cf:71:29:a9:ab:46:30:f0:c9:98:18:1a:59:1c:a0:
                    24:26:cd:5b:ae:f5:9a:13:fc:e1:5c:d5:f5:2d:d0:
                    7d:c1:16:36:44:98:4d:9c:e6:6e:34:c5:9d:ad:f2:
                    0f:9b:97:fe:75:82:a5:d6:22:58:6c:c9:da:7e:62:
                    00:a3:35:93:57:72:d7:71:9d:15:8f:27:53:1f:33:
                    79:23:65:da:a6:24:cf:70:8d:86:21:b0:fb:c3:56:
                    33:7c:a0:ce:e8:ce:79:a5:19:70:9e:d7:cd:d1:53:
                    6c:60:62:eb:29:ca:e8:ff:58:93:2a:f9:ee:d5:aa:
                    cd:fd:f0:1c:a1:52:f9:5a:90:68:dd:b4:5a:93:39:
                    23:80:80:e2:b8:79:7f:f8:ce:af:a0:af:9a:dc:d6:
                    ef:c4:e1:f5:ac:fe:e6:be:d2:b7:94:59:b5:79:9e:
                    8c:0c:46:2e:cd:f2:a7:e4:7d:96:46:d4:19:e8:6c:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:50:20:9A:04:14:7F:8D:3C:5C:F1:1C:AD:40:6D:D6:FB:64:16:76
            X509v3 Authority Key Identifier:
                keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:58:59:7f:da:6f:29:d6:88:86:e2:6c:08:8f:2a:e0:b2:
         12:34:cf:c2:54:03:1c:e2:6f:32:cc:2e:26:19:39:09:93:a9:
         c4:bb:e3:12:3c:fa:1d:e6:8b:a6:01:d9:db:b6:e8:e2:85:04:
         77:30:89:cd:ae:e6:d6:92:5e:44:11:d5:7c:a9:a6:ea:72:99:
         a3:36:e1:b6:0b:0f:b6:b0:7b:e2:4a:e3:cf:9b:07:0e:47:1e:
         0a:78:59:08:98:f1:54:b4:af:4e:c4:69:4d:73:d1:9d:ef:7a:
         8c:01:92:25:53:f3:89:b5:a1:29:3f:79:a1:fb:cf:67:fb:53:
         d1:25:e2:67:9d:e8:f1:1d:83:c5:47:46:91:e5:d1:36:34:0f:
         e2:34:8a:6c:5f:d3:21:47:ce:6b:68:d6:66:27:1a:65:40:ac:
         06:c8:89:b3:0f:e0:8f:00:61:d2:56:ce:48:7d:c7:79:40:33:
         36:1e:71:bd:8a:7c:f3:da:a2:2c:ca:49:d5:b5:0e:91:ff:96:
         69:fd:00:28:fd:7e:8d:f9:e2:13:e7:84:bd:b1:ca:e1:c3:ca:
         6b:d2:80:71:34:d0:9e:76:18:1b:0d:46:1e:ab:31:b3:33:7c:
         b9:82:bb:9c:1e:fe:1b:0f:1f:77:06:05:e4:9d:c6:05:8a:49:
         45:f8:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:13:47 2026 by rpki-client