Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
File:                     c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json)
Hash identifier:          MBg1d1xfgdGO1QWu1bkBiPVn4eRUBQHQqjJDP5hTrLM=
Subject key identifier:   9E:40:C9:E5:9D:D5:B3:19:94:34:1F:A3:16:EC:40:88:52:47:A3:F0
Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
Certificate issuer:       /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Certificate serial:       352C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
Manifest number:          3520
Signing time:             Sat 28 Feb 2026 15:00:40 +0000
Manifest this update:     Sat 28 Feb 2026 15:00:40 +0000
Manifest next update:     Sat 07 Mar 2026 15:00:40 +0000
Files and hashes:         1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: YwIH7Y2xutIZzTDiA1a2heBvCoExjZs4MJER2esVP/o=)
                          2: 991B38BC44E811F0968D8B30C4F9AE02.roa (hash: eEF2YFvICJOqay9i6WsFZPXnUiZoOP0Qsq3SyzYoK+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13612 (0x352c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
        Validity
            Not Before: Feb 28 15:00:40 2026 GMT
            Not After : Mar  7 15:00:40 2026 GMT
        Subject: CN=69a30318-112e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:a4:f5:f3:3e:82:19:7a:e8:6e:39:b3:89:
                    58:06:c9:77:21:c3:15:1e:f9:35:88:73:ca:00:fb:
                    e5:fe:0e:79:7e:75:52:90:e5:5b:7c:6b:27:54:58:
                    79:09:38:4f:50:62:bc:7e:cc:45:56:3b:9e:a9:28:
                    92:9a:56:26:7d:77:41:36:4b:04:a0:9a:f4:5e:56:
                    40:2d:f0:15:3b:a9:cf:78:d8:f1:45:e6:70:bf:c6:
                    53:af:97:47:ca:3e:d7:ef:7b:27:d4:31:83:4c:df:
                    58:3a:fe:19:ed:b0:1b:c6:2d:53:97:9c:7f:22:e2:
                    03:ff:0a:1a:e8:3a:16:c5:d6:96:8c:90:ca:82:76:
                    98:31:45:91:17:f2:d3:71:67:cd:ce:16:a3:ee:e7:
                    3e:be:45:cf:86:e4:da:65:c8:3f:86:fd:c8:8f:e1:
                    f0:cb:a8:c2:6b:44:2d:1c:92:e8:bb:4e:14:16:e9:
                    0d:b7:11:71:f7:0a:ff:2d:e7:ec:86:cd:66:50:4f:
                    b3:e6:95:c5:7f:34:80:c7:3e:78:bf:06:11:c4:58:
                    f8:09:05:25:7c:ce:25:64:5c:01:a9:11:d0:ed:19:
                    0d:02:cf:72:da:ae:5e:37:48:fc:14:b2:b3:42:4a:
                    96:19:75:ad:0a:77:55:99:51:8c:8c:fb:31:ae:36:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:40:C9:E5:9D:D5:B3:19:94:34:1F:A3:16:EC:40:88:52:47:A3:F0
            X509v3 Authority Key Identifier:
                keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:65:6e:ff:7c:6d:0a:3c:54:a8:fa:b7:d0:60:4f:19:3c:
         2b:35:7d:aa:17:0b:c9:29:3d:ce:0e:ef:de:b1:09:54:7b:85:
         0d:86:de:d8:d6:02:fa:76:13:b8:c2:73:2b:98:4d:d5:7e:d1:
         54:d2:b7:7e:0e:83:76:b5:b5:bf:4f:0c:f1:32:0e:2a:c9:80:
         82:c4:04:8b:df:fa:1b:d3:6e:38:a8:ca:45:c5:84:4e:e8:8e:
         7d:f4:c5:35:62:50:77:7d:93:2f:80:8b:4f:88:42:b3:d0:70:
         c3:0f:ae:22:e5:7e:e3:29:b2:46:a2:5e:b5:13:27:5b:f2:b0:
         65:66:4a:e1:a8:fb:2b:be:03:a9:b0:00:05:35:52:af:bf:ac:
         dd:b6:06:eb:ba:a1:bf:65:a0:45:86:b0:7e:40:78:16:74:d7:
         71:3f:44:a7:b1:62:a5:af:a9:ee:d2:2c:97:fc:4c:33:b6:34:
         df:0f:24:4f:73:6a:88:de:8d:17:d5:e2:e8:3c:1e:19:39:cf:
         82:8a:d7:e0:fa:a6:13:40:70:60:18:26:3d:35:6e:7d:a2:cd:
         05:7f:8f:cf:f2:1b:ec:ac:39:10:b7:bf:f0:93:38:23:5f:b7:
         83:29:91:84:b2:fe:8c:48:54:64:7e:20:1f:26:aa:26:19:3f:
         73:13:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:46 2026 by rpki-client