Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
File:                     -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json)
Hash identifier:          TBzL9IClhD8lJA7IUJzoB9q5VroeWCUOk73EWUXPHl8=
Subject key identifier:   DD:E0:66:BA:0E:77:0E:8D:0B:53:72:76:4E:70:9D:99:9F:60:F2:B4
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Certificate issuer:       /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
Manifest number:          0267
Signing time:             Mon 02 Mar 2026 01:11:07 +0000
Manifest this update:     Mon 02 Mar 2026 01:11:04 +0000
Manifest next update:     Mon 09 Mar 2026 01:11:04 +0000
Files and hashes:         1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: 6RfXrMA0fnmVZHDn7FCsLbTPQUKAGgS4MOzngGyUfRM=)
                          2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: KkRg7bEKwnHuBm+Yd+/J88cAG/SeruIhl6B9YZ5p9Ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
                          rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
        Validity
            Not Before: Mar  2 01:11:04 2026 GMT
            Not After : Mar  9 01:11:04 2026 GMT
        Subject: CN=69a4e3aa-55e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:89:df:c9:0d:c8:80:2b:61:6a:4b:19:73:
                    0e:09:bd:78:c1:73:51:71:9b:92:4a:e8:cd:ec:8c:
                    00:f9:36:3d:71:3f:b8:66:3a:81:ca:0a:aa:f5:02:
                    22:f1:47:99:0e:ac:4c:bf:eb:30:57:a1:6e:b4:14:
                    a6:16:b7:bb:dc:94:de:5b:64:5f:6b:1d:18:02:99:
                    48:8b:6c:10:e9:9c:47:18:59:74:25:83:f8:63:cf:
                    61:13:6e:da:95:09:0b:17:43:d3:2c:4d:d6:32:00:
                    9a:da:c2:63:d1:b2:e9:dc:4e:1e:01:51:a3:6e:d9:
                    0e:62:e3:9a:9f:52:f1:d6:4e:60:df:28:4c:69:23:
                    3a:f1:1e:d0:24:95:ce:8d:8b:c1:d6:e0:32:34:74:
                    8f:b4:00:36:bf:9f:bf:87:e1:ef:b2:e1:49:8a:4f:
                    bb:e4:ba:2e:90:ba:4a:03:48:af:08:8a:74:0e:c1:
                    10:81:eb:53:a2:77:f6:d4:d1:37:30:67:9a:96:6d:
                    60:d5:d4:8b:58:b3:79:f0:59:be:a2:04:4d:dd:a9:
                    45:48:06:02:da:ef:db:6a:f8:ca:68:ce:70:1b:5c:
                    61:ce:ca:e2:22:a7:98:1f:c9:7b:0e:fe:84:89:13:
                    42:d6:6e:6a:aa:0b:61:51:10:70:71:37:33:94:70:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E0:66:BA:0E:77:0E:8D:0B:53:72:76:4E:70:9D:99:9F:60:F2:B4
            X509v3 Authority Key Identifier:
                keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:92:19:96:e1:5d:51:2e:fe:d6:41:10:f0:45:95:13:d5:19:
         a4:10:07:c7:89:11:86:6d:9f:82:00:35:04:08:7a:1f:69:ca:
         ce:8f:ef:9e:8d:ef:22:88:df:50:62:b4:c4:1f:b0:53:e8:92:
         31:1b:fd:92:dd:1a:a6:dc:85:44:80:63:e4:7e:63:75:cb:45:
         d5:a6:05:72:4c:63:01:99:40:a5:07:a1:79:fc:e8:91:b0:80:
         61:fd:8c:a5:78:d1:ad:aa:ac:3e:24:07:58:73:97:19:ed:1a:
         f2:31:a0:a4:c2:41:e4:9b:93:a3:61:a6:db:61:f3:b4:6b:47:
         45:29:69:b6:8d:55:81:d0:22:9d:1e:fe:47:d0:6f:42:df:b1:
         28:ae:63:b3:bb:79:4c:9e:97:eb:f5:4a:9f:6e:f6:d1:ff:0b:
         db:f5:2e:7a:49:f7:34:85:c8:c5:ce:90:fd:62:be:bf:ea:f5:
         4f:7a:4a:0e:c6:35:b0:41:14:bc:09:3e:ca:08:e7:17:ee:18:
         91:00:be:01:30:0f:92:4f:01:bf:9a:ab:d2:83:64:ed:f4:cd:
         33:c8:eb:cf:f7:47:ce:aa:c8:77:8b:19:d9:30:64:8a:12:ef:
         b9:82:1b:02:d9:e6:a1:74:3b:15:a2:3d:93:f0:35:e7:1f:5a:
         9e:34:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:55:14 2026 by rpki-client