Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
File:                     A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json)
Hash identifier:          orm6f/f2rGCbHoj7Zrim3p56x7JkmdEfegYnUroEeCQ=
Subject key identifier:   23:58:3F:3F:6B:18:73:FD:E0:E9:CF:3C:BE:51:0E:6B:92:A8:14:F4
Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81
Certificate issuer:       /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
Manifest number:          0191
Signing time:             Sun 01 Mar 2026 05:16:37 +0000
Manifest this update:     Sun 01 Mar 2026 05:16:36 +0000
Manifest next update:     Sun 08 Mar 2026 05:16:36 +0000
Files and hashes:         1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: YX+f16+fE1Fi37eAVeH/MaJjk6Q4boJbZAUKLklmJ68=)
                          2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: /F1r5TNvz5O+loAxtqvN6ua/Jk1sG70DsTCgwmr+C4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl
                          rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
        Validity
            Not Before: Mar  1 05:16:36 2026 GMT
            Not After : Mar  8 05:16:36 2026 GMT
        Subject: CN=69a3cbb5-7999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:38:f6:33:54:61:03:1f:65:08:e1:a5:90:
                    ff:61:99:70:61:28:46:2b:43:10:7c:0c:f1:3e:09:
                    62:e8:af:74:97:32:4b:97:0f:1b:86:b2:08:bf:7b:
                    1d:48:d1:72:68:7a:ec:98:ab:bd:ab:90:19:c8:fa:
                    d5:26:9d:d9:a3:ac:f8:25:52:ce:85:10:b1:a0:45:
                    f3:63:70:9e:0d:74:34:d6:8d:68:8f:bd:28:18:51:
                    a9:7f:3d:59:51:3e:c4:3f:00:a6:a4:5c:cc:57:50:
                    78:c5:a5:e9:e6:27:c4:fb:86:74:9c:5d:39:ac:19:
                    5f:0c:ac:7f:8d:cf:5d:52:b7:58:44:15:96:0a:5f:
                    53:5a:44:a3:8a:80:04:15:df:a1:a2:15:f2:3c:1b:
                    8b:84:fb:ce:d4:6c:af:c2:bc:a7:63:88:20:fc:81:
                    27:1d:fd:92:ed:b2:68:36:85:a5:ad:46:98:13:80:
                    43:30:ae:d1:39:ec:93:29:63:cf:12:f6:62:62:b6:
                    79:03:09:93:9e:5b:7f:ca:30:0f:f9:fb:59:d9:f2:
                    5b:c7:20:83:1e:f6:9c:08:ad:86:d1:48:d8:27:23:
                    1f:0a:69:91:f4:e4:60:f8:61:c2:cf:5a:66:c8:74:
                    7c:80:0c:ae:78:82:8c:2f:76:2d:e4:e0:9a:80:30:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:58:3F:3F:6B:18:73:FD:E0:E9:CF:3C:BE:51:0E:6B:92:A8:14:F4
            X509v3 Authority Key Identifier:
                keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5f:79:ca:9b:2f:22:63:53:94:48:d6:22:a2:f7:bf:34:de:
         48:70:c0:9c:67:31:d2:49:cf:4b:57:12:bb:75:31:95:40:fd:
         f7:94:d7:4e:2a:f0:59:06:51:89:74:66:f1:9e:77:9b:3c:e6:
         c5:0e:07:c5:f1:12:e5:87:d6:00:d1:1a:07:a6:1d:38:97:36:
         f3:e1:fd:f8:f1:10:d7:4a:9c:2f:d4:a9:ff:ab:4c:bc:cd:db:
         f7:08:38:c2:5e:3e:61:a5:6d:cb:59:bb:d3:79:fa:f3:ca:79:
         4d:96:9c:59:46:c4:57:22:8b:5c:96:5c:53:7e:ee:4b:bf:38:
         20:5f:a6:50:b0:8a:93:0d:88:b7:3e:11:eb:b6:e9:4d:06:15:
         5a:44:69:90:39:a7:39:90:71:27:7a:ee:c2:b1:c9:4c:f9:c6:
         39:1d:64:79:13:52:b9:d4:5e:8a:7e:da:08:ab:62:46:db:3d:
         f6:47:37:fa:f1:46:a7:31:51:85:59:6e:8c:1b:9b:8e:8d:64:
         82:1d:c0:9f:2d:8a:ce:3b:21:f0:e2:70:7a:99:cc:10:96:d3:
         2e:3a:52:15:22:1c:8d:39:8e:e9:30:0b:8d:35:ce:7a:48:ab:
         6d:8f:8f:35:7e:6a:e4:30:57:29:21:69:3b:8c:4a:6a:b4:90:
         fd:c8:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:33:42 2026 by rpki-client