Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
File:                     dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json)
Hash identifier:          VTIFxuAvX10MERUiyHQbiRbL2w/eJqbXuHDdjqkBcYg=
Subject key identifier:   96:DB:68:6E:3C:03:A7:7B:8E:B6:26:4D:AC:2E:34:76:CF:C2:34:FF
Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86
Certificate issuer:       /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
Certificate serial:       08EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
Manifest number:          08E2
Signing time:             Sat 28 Feb 2026 20:42:19 +0000
Manifest this update:     Sat 28 Feb 2026 20:42:18 +0000
Manifest next update:     Sat 07 Mar 2026 20:42:18 +0000
Files and hashes:         1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: ozdRPcs4u3rCpVDpHlZ+wN6mkXoxBk5yD5kWT2bYmIE=)
                          2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: l3BnPkx3AD0+V1TVm9PvDdFXvv/NHwdEm5t8UJry1xU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl
                          rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284 (0x8ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
        Validity
            Not Before: Feb 28 20:42:18 2026 GMT
            Not After : Mar  7 20:42:18 2026 GMT
        Subject: CN=69a3532b-4c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:ce:03:8e:66:b1:00:f3:30:7c:6c:26:5d:
                    f5:82:37:32:36:62:b0:19:aa:ec:b3:ee:86:d2:1d:
                    ba:ef:c0:bf:ce:fb:8d:0e:b8:7e:21:b3:b9:71:67:
                    4c:c5:d3:98:94:27:0a:1f:ba:57:74:9d:7c:76:ca:
                    d0:2b:1d:25:07:44:ff:22:e2:65:58:38:fb:0e:04:
                    a7:d2:c9:e7:66:47:11:96:b6:33:b9:73:59:2d:53:
                    21:80:52:41:b9:f9:ca:50:eb:2e:3a:12:43:58:a5:
                    13:56:37:a0:db:fd:e9:c3:4f:f4:a0:91:89:1e:55:
                    9b:fa:be:f0:6a:57:32:f2:95:f3:5b:71:4c:c0:d8:
                    47:78:54:47:1e:83:d5:1a:9e:e0:6b:b8:a1:65:38:
                    42:9b:9a:e4:82:f9:4e:4b:12:ce:1e:86:2a:6c:cc:
                    a6:5e:fa:ec:ad:d6:c9:41:1b:42:7d:79:e4:ad:6b:
                    bf:4b:f1:e1:77:94:88:b2:79:c7:0f:a4:f3:48:8f:
                    77:0f:68:f1:e3:9e:16:42:aa:db:68:26:d3:10:99:
                    60:db:54:df:8a:59:b3:6f:82:d9:4a:e6:ec:ca:e8:
                    0e:71:71:a2:a9:ef:53:6d:87:f9:e5:85:b4:0f:af:
                    bf:cb:51:8c:14:ff:b0:c6:b2:fa:b6:f1:6b:a4:ba:
                    86:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DB:68:6E:3C:03:A7:7B:8E:B6:26:4D:AC:2E:34:76:CF:C2:34:FF
            X509v3 Authority Key Identifier:
                keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:2f:9f:0c:59:ef:24:6b:b1:75:71:0e:8f:dc:01:e8:ff:a1:
         be:f3:bf:1e:3f:22:ec:d0:05:ac:62:62:e5:3c:3e:9b:46:4c:
         ef:e0:8b:d4:2c:1e:de:dd:b5:ce:37:f9:ba:71:3c:ae:25:72:
         8a:d2:31:ab:12:d4:75:d1:5c:1e:f5:87:ec:5c:a0:cb:50:27:
         f0:59:ba:00:2d:85:ec:20:1c:c2:83:a2:c0:e9:b8:9c:44:ac:
         7e:15:e5:8b:49:51:fd:91:fd:fe:83:e5:65:8d:6a:61:3f:2c:
         a6:c8:32:88:68:66:aa:24:30:92:2a:f8:1a:ea:1f:10:7e:59:
         e0:2d:18:9a:a0:34:9c:a8:91:79:9b:bd:97:2b:25:14:b1:25:
         d7:b5:0a:9d:ef:e5:13:de:b0:e7:c4:61:55:82:5c:84:ae:35:
         d3:a9:04:d9:e4:11:46:61:11:90:67:3d:f1:dd:4f:ab:8e:bb:
         2a:d1:13:3b:cf:ed:c4:7b:af:f9:1b:76:48:7f:45:99:b4:90:
         5c:39:02:d7:ff:b4:00:21:01:dd:13:5f:7e:ca:c6:6c:33:b8:
         4d:a8:bd:23:71:af:ed:d0:67:3c:ee:4f:57:09:18:0e:f0:ef:
         75:44:29:b5:08:09:a4:7a:12:c1:a5:eb:7f:cd:fd:94:24:55:
         61:49:84:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:47 2026 by rpki-client