Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
File:                     aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json)
Hash identifier:          8iJy2bqKrZKnlIuLDspMO2VXifFk5gI3Q4CkM37lStI=
Subject key identifier:   19:80:DA:D7:24:70:9F:89:2B:9A:B5:95:0A:61:08:16:FA:A5:BF:E8
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Certificate issuer:       /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
Manifest number:          0263
Signing time:             Sun 01 Mar 2026 02:59:52 +0000
Manifest this update:     Sun 01 Mar 2026 02:59:52 +0000
Manifest next update:     Sun 08 Mar 2026 02:59:52 +0000
Files and hashes:         1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: Kn/J+dCYeoMk1wKvfp5F/x5uSm3k9M0WojBevKuyXnE=)
                          2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: cSwVrT0C9tqhr/5XA+l0yPGc9dPDbE1JZkuRIwgtGho=)
                          3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: UyunkDMpUji6lC+a+BonOJojjML/QR7zyd8ETr7Yqig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
                          rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
        Validity
            Not Before: Mar  1 02:59:52 2026 GMT
            Not After : Mar  8 02:59:52 2026 GMT
        Subject: CN=69a3aba8-cb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:dc:af:a8:ac:fb:2d:2f:32:a5:e5:da:a7:
                    19:76:02:ff:73:66:7f:4f:f1:3e:6c:7e:d1:31:d0:
                    37:72:c7:1f:f5:70:6c:cf:7f:27:68:a1:f8:8e:df:
                    9f:b0:3d:72:05:7e:f4:88:65:42:7c:17:61:82:5f:
                    67:e2:3f:1c:42:ad:a6:97:c2:af:de:6d:92:81:6e:
                    aa:26:d9:5f:cf:b9:9d:f4:61:78:a7:a3:83:23:f7:
                    ba:cc:c6:c8:e9:05:20:91:f0:f2:32:73:9d:e7:58:
                    39:ea:6a:1d:dd:dd:5c:7e:23:8a:fa:63:44:70:26:
                    53:f8:34:a9:2d:51:02:c2:47:ed:fb:1c:be:6a:eb:
                    f0:ba:b0:f5:d8:1d:e8:6f:37:26:97:0e:b5:b5:69:
                    b5:9e:04:48:fc:64:70:ab:ee:49:da:57:54:f2:cc:
                    9e:72:27:94:66:c6:f7:0d:fe:56:a7:5a:8b:28:6b:
                    b5:e4:1a:c1:1d:8a:03:6d:1c:bf:3e:78:c7:87:a4:
                    8f:d6:28:35:eb:ba:48:2e:7a:b2:59:b0:e0:73:35:
                    10:9b:aa:c2:f0:a8:ab:70:39:f9:fb:d2:2f:7b:0d:
                    f8:86:33:6c:81:87:2b:e6:f6:99:7b:fa:b8:68:7d:
                    6c:be:98:54:74:b8:9e:ef:61:fe:7e:2e:a4:1b:91:
                    48:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:80:DA:D7:24:70:9F:89:2B:9A:B5:95:0A:61:08:16:FA:A5:BF:E8
            X509v3 Authority Key Identifier:
                keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f8:d1:7c:aa:72:4c:4f:02:d9:90:2b:ca:ec:bb:c0:24:29:
         42:1f:d9:cd:aa:93:fb:4e:07:9d:af:db:ca:98:c4:5d:ec:b4:
         1e:90:ea:84:f3:3c:e8:f3:8d:91:ec:39:1e:f0:d1:1b:b6:c3:
         cc:f8:2c:82:d9:2f:42:92:59:89:f5:7c:41:b3:97:36:f7:91:
         3f:82:2e:22:ba:ff:f7:4e:0a:d6:ae:b5:4d:d6:df:53:3d:4f:
         2a:6f:79:f6:a9:d6:cc:42:75:51:71:4a:52:ff:77:71:00:ee:
         6b:dc:bf:3f:e9:67:94:7e:e1:ca:fe:f9:ef:87:77:aa:cd:10:
         1f:65:3e:42:cb:19:e9:d6:5c:c0:b4:4e:ea:4e:2b:f0:d2:13:
         a5:89:32:83:4b:ab:a1:31:02:d0:57:1b:e6:a8:42:79:50:d9:
         fe:e5:50:17:df:5b:f2:3a:eb:cc:07:f8:e7:21:90:e6:9d:3f:
         4f:48:e0:25:77:02:80:ef:8c:e6:42:a0:6a:44:c6:fb:ef:f8:
         1b:ec:a6:1f:72:03:cb:64:d8:66:e2:55:f5:59:a8:f8:d9:3d:
         3a:64:08:38:67:b4:30:e9:98:cb:c8:32:bb:e2:9a:9a:4b:3d:
         3e:a6:f6:91:31:6f:f4:5f:14:ec:cb:11:81:39:7f:4a:17:c2:
         52:49:3d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:13 2026 by rpki-client