Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
File:                     0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json)
Hash identifier:          nU63ns/iFIQJuCJEe1KVF2SDjo8Mh2811Gl9/qLo1nQ=
Subject key identifier:   E9:55:2F:FD:25:60:AA:17:43:95:48:44:BF:82:F0:0A:ED:69:2E:6D
Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
Certificate issuer:       /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
Manifest number:          01C8
Signing time:             Mon 02 Mar 2026 00:52:23 +0000
Manifest this update:     Mon 02 Mar 2026 00:52:21 +0000
Manifest next update:     Mon 09 Mar 2026 00:52:21 +0000
Files and hashes:         1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: +AL92kFvWTerlNbZi32O48MpJIe0awdG4ORWtmPHfNE=)
                          2: E50B556868D011EE8509F75CC4F9AE02.roa (hash: 9UOFLQfr6yh7l1cCv57Sa5R8BYW6D2LP6rLPOFGHb8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
                          rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC24F, serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
        Validity
            Not Before: Mar  2 00:52:21 2026 GMT
            Not After : Mar  9 00:52:21 2026 GMT
        Subject: CN=69a4df47-24d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:49:2e:6d:a6:a2:30:4c:1f:2b:89:a5:38:
                    c4:8f:e4:01:6b:e9:4b:03:9f:45:d5:eb:f1:f0:f6:
                    47:87:09:e8:3f:45:85:af:94:a9:e8:a9:77:9e:dc:
                    cd:14:b2:a1:11:d9:9f:1d:ed:36:c8:31:97:d8:61:
                    c5:ed:c9:9b:23:f8:e3:ec:e0:bd:4a:00:d8:31:79:
                    88:12:21:dc:c9:17:3c:a6:4d:b8:f2:91:f0:f0:eb:
                    e9:d5:07:01:67:c3:fd:c2:5a:fd:83:ff:1e:75:1c:
                    a8:19:35:b6:eb:a6:3b:95:b8:a2:5e:db:ad:56:99:
                    0d:43:b1:c0:36:3d:48:ba:c5:7e:f8:48:8f:f7:7b:
                    e1:f3:e8:19:bc:53:40:aa:4e:3a:bf:d6:a4:dd:72:
                    cf:99:af:bf:48:71:dd:5f:83:04:4e:fd:cf:b9:02:
                    a0:20:7d:75:a0:2c:62:e7:7e:8f:11:66:ea:38:9e:
                    82:38:b2:2f:a9:8d:2b:9f:01:86:4d:73:76:de:12:
                    8e:05:d4:3a:dc:cb:20:98:73:e8:b3:ac:3f:99:fb:
                    ec:3b:88:21:67:c7:78:a6:d7:cd:8f:61:f4:ba:78:
                    65:79:1e:ba:ef:1a:43:37:0a:06:d1:d1:06:16:dc:
                    9d:31:97:15:bb:96:ea:18:3e:30:ab:33:e4:16:34:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:2F:FD:25:60:AA:17:43:95:48:44:BF:82:F0:0A:ED:69:2E:6D
            X509v3 Authority Key Identifier:
                keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:24:01:fa:f9:b8:84:e6:5d:38:5b:0d:76:c8:b7:8f:3b:75:
         61:3d:ef:51:9c:03:bb:c3:f2:23:e6:2c:e8:c2:21:b8:ca:be:
         f6:d0:ba:26:5f:2a:02:ad:b7:0b:e2:7f:65:67:10:d3:64:84:
         94:c0:3d:6d:2e:7f:ce:e0:83:c9:df:8b:0b:fd:f9:ee:9b:6c:
         36:6f:3f:dd:12:6e:cc:82:6b:54:85:fa:45:05:11:59:11:51:
         d6:a9:1c:eb:cc:d4:4f:89:7a:4f:62:00:54:33:76:3b:1a:90:
         ac:9f:05:ec:07:d2:ea:e1:fe:0e:44:2b:62:ea:96:ec:e4:f6:
         ac:e7:9d:05:16:41:42:24:ed:3e:22:c6:64:34:d6:46:c7:f1:
         18:04:8e:83:06:53:e4:03:05:7d:dc:43:43:4d:3f:40:73:9f:
         8a:38:6e:87:81:68:56:59:5f:80:34:cb:93:e5:95:76:2c:4b:
         ef:97:ad:e2:b5:90:77:1d:ba:65:0d:f5:0d:72:6c:6b:85:a8:
         31:46:0c:1b:cc:fb:62:ef:90:3f:6f:05:7d:7d:2c:6c:59:98:
         f2:62:5c:53:0e:72:75:ad:c8:e4:09:f1:19:4c:6d:27:bc:92:
         de:91:aa:0d:ca:9a:76:3a:df:9e:ed:fe:b4:b9:4f:10:a7:7b:
         2e:5e:82:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMyNEYxMTAvBgNVBAUTKEQyNkUyMjMwNjIxOERBOTZDMzAyRkJFQUFDOTQzNzI3
NUIxRUM2RUQwHhcNMjYwMzAyMDA1MjIxWhcNMjYwMzA5MDA1MjIxWjAYMRYwFAYD
VQQDEw02OWE0ZGY0Ny0yNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiEZJLm2mojBMHyuJpTjEj+QBa+lLA59F1evx8PZHhwnoP0WFr5Sp6Kl3ntzN
FLKhEdmfHe02yDGX2GHF7cmbI/jj7OC9SgDYMXmIEiHcyRc8pk248pHw8Ovp1QcB
Z8P9wlr9g/8edRyoGTW266Y7lbiiXtutVpkNQ7HANj1IusV++EiP93vh8+gZvFNA
qk46v9ak3XLPma+/SHHdX4METv3PuQKgIH11oCxi536PEWbqOJ6COLIvqY0rnwGG
TXN23hKOBdQ63MsgmHPos6w/mfvsO4ghZ8d4ptfNj2H0unhleR667xpDNwoG0dEG
FtydMZcVu5bqGD4wqzPkFjQtHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOlVL/0l
YKoXQ5VIRL+C8ArtaS5tMB8GA1UdIwQYMBaAFNJuIjBiGNqWwwL76qyUNydbHsbt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzI0Ri8zQzEzMDU3NjY3
MTAxMUVFOUVDOUExMjdDNEY5QUUwMi8wbTRpTUdJWTJwYkRBdnZxckpRM0oxc2V4
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBtNGlNR0lZMnBiREF2dnFySlEzSjFzZXh1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzI0Ri8zQzEzMDU3NjY3MTAxMUVFOUVDOUExMjdDNEY5QUUwMi8wbTRpTUdJWTJw
YkRBdnZxckpRM0oxc2V4dTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQyQB+vm4hOZdOFsNdsi3jzt1YT3vUZwDu8PyI+Ys6MIhuMq+9tC6Jl8qAq23
C+J/ZWcQ02SElMA9bS5/zuCDyd+LC/357ptsNm8/3RJuzIJrVIX6RQURWRFR1qkc
68zUT4l6T2IAVDN2OxqQrJ8F7AfS6uH+DkQrYuqW7OT2rOedBRZBQiTtPiLGZDTW
RsfxGASOgwZT5AMFfdxDQ00/QHOfijhuh4FoVllfgDTLk+WVdixL75et4rWQdx26
ZQ31DXJsa4WoMUYMG8z7Yu+QP28FfX0sbFmY8mJcUw5yda3I5AnxGUxtJ7yS3pGq
Dcqadjrfnu3+tLlPEKd7Ll6C7A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:06 2026 by rpki-client