Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
File:                     K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json)
Hash identifier:          gFhjJls5PCMvNfjdPKmIBUrSLFgwhMGzTT2KNApvk2Y=
Subject key identifier:   66:77:95:0D:2E:18:E2:D1:95:AD:E3:16:27:51:9E:60:36:43:62:CA
Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92
Certificate issuer:       /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
Certificate serial:       085C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
Manifest number:          084E
Signing time:             Mon 02 Mar 2026 00:49:14 +0000
Manifest this update:     Mon 02 Mar 2026 00:49:13 +0000
Manifest next update:     Mon 09 Mar 2026 00:49:13 +0000
Files and hashes:         1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: 6owkuLcE2TZfakPcBYjwh4sPwHwFOd2n6j8Bian8t+0=)
                          2: DFB4AB2C9FD911F0B75B1848C4F9AE02.roa (hash: NDPwNan09Ssdmc1pybvK6GRLd224X2AqBtS0fXc6jf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl
                          rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
        Validity
            Not Before: Mar  2 00:49:13 2026 GMT
            Not After : Mar  9 00:49:13 2026 GMT
        Subject: CN=69a4de8a-33bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:4a:ef:b6:60:3c:c7:38:38:fb:3c:51:f8:
                    fc:db:e1:27:7a:70:94:59:59:ae:06:c8:ec:34:e1:
                    81:50:a2:ad:70:67:9c:1b:be:5f:1f:e0:66:73:61:
                    4f:4b:d8:3c:69:86:5f:51:81:0e:91:62:fb:74:40:
                    a2:d7:e6:2e:df:f6:ea:aa:87:7e:9e:a8:f5:f2:3b:
                    98:d3:c5:08:14:01:93:2b:81:d4:d2:73:9a:8f:b8:
                    80:96:99:0a:8f:11:ac:16:48:8d:6a:53:df:73:d2:
                    2c:6e:a2:0f:95:68:f1:b8:97:57:34:15:ec:d1:79:
                    1e:4c:c6:81:22:ff:b9:4b:90:81:15:ea:5b:f4:b3:
                    72:5e:bc:8f:5f:71:86:22:5b:49:8f:08:af:42:69:
                    63:92:de:de:20:be:6c:15:0f:54:12:02:c6:7f:0c:
                    c6:b4:76:9b:92:61:67:39:69:64:38:4c:f7:74:3b:
                    f5:30:73:1d:cb:12:4c:a0:50:95:7f:c7:22:32:11:
                    32:a5:d2:2d:ab:26:24:fb:4b:2f:14:5f:80:97:47:
                    a7:cc:0d:e6:a3:30:95:bf:35:a6:46:36:0d:d6:1a:
                    47:08:53:c9:2d:43:9b:d9:14:3d:0a:5e:c0:3a:c5:
                    89:07:08:4b:20:a3:c7:6a:48:d9:3d:78:9c:23:47:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:95:0D:2E:18:E2:D1:95:AD:E3:16:27:51:9E:60:36:43:62:CA
            X509v3 Authority Key Identifier:
                keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:16:b5:b9:43:f9:18:eb:ba:42:36:8d:21:0b:40:db:39:1a:
         b9:1c:9d:6e:ef:61:c2:7b:e5:c3:fc:de:31:37:74:bd:52:ab:
         84:e1:22:45:66:51:35:4f:07:4b:f3:ed:d9:e5:9f:fa:5b:82:
         5d:64:f7:0a:72:8b:9e:6c:c5:7c:77:44:b0:b6:ef:e2:12:15:
         b9:1b:6a:23:1d:d1:e0:20:8b:54:5f:c7:28:fd:e1:f6:db:8c:
         cc:a0:62:60:32:46:13:8e:fc:28:1c:64:99:02:5c:63:e0:f6:
         81:a5:47:0e:91:54:20:1b:8d:c2:47:f0:a9:62:2b:c2:21:fd:
         c1:d6:3e:8d:57:fd:a5:e9:fe:23:16:24:9b:57:b9:81:d9:42:
         52:a1:ce:37:3b:7a:e1:5d:57:f4:1d:91:1c:d4:f5:97:9c:f8:
         f1:aa:81:f7:7a:eb:a8:f8:65:c6:82:25:5b:84:cd:9c:a3:d7:
         0d:6b:68:b9:ea:f4:42:84:e9:ee:d5:c2:b4:f0:55:d0:14:02:
         1d:05:63:eb:a6:0f:2d:a6:72:b4:cb:cb:f3:13:c1:46:ff:2a:
         dd:d4:d6:22:d3:03:ec:4b:be:c0:63:16:1c:0c:58:f7:16:18:
         35:cb:45:79:f6:ef:91:7a:01:81:1b:a1:ff:82:e4:f3:62:44:
         08:8f:cb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:04 2026 by rpki-client