Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
File:                     75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json)
Hash identifier:          iPh2Bpbgs0C8yEOoNnGF13gxite8IInDOf1SQSVeB+s=
Subject key identifier:   11:EB:0A:7A:76:A5:B8:CF:63:63:F2:9F:7F:4C:4F:3D:B8:3F:97:A7
Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42
Certificate issuer:       /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442
Certificate serial:       0CFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
Manifest number:          0CE8
Signing time:             Mon 02 Mar 2026 18:08:25 +0000
Manifest this update:     Mon 02 Mar 2026 18:08:24 +0000
Manifest next update:     Mon 09 Mar 2026 18:08:24 +0000
Files and hashes:         1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: CHY2s7/C+Djyh4mfidCipW0FhGnF77MxT2EWkKHxQJw=)
                          2: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: UvXINsVdmgJ+8axZ9DhL372u1E0J1vH5XbDCRfLraeY=)
                          3: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: 3w1ZCU5DBe8qob2yfo+1JFPIsMpuEFgSBiA3mSkvjmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3323 (0xcfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442
        Validity
            Not Before: Mar  2 18:08:24 2026 GMT
            Not After : Mar  9 18:08:24 2026 GMT
        Subject: CN=69a5d218-e7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:48:0f:91:b3:d1:04:99:fc:d3:a5:d1:8e:
                    b8:3d:6a:30:38:00:a4:5e:55:74:c5:1d:e2:85:2f:
                    c2:3a:2a:f4:66:54:b6:e7:e9:80:b8:4c:ac:4c:a8:
                    91:47:84:b5:4e:b8:be:8f:e4:98:c2:b8:72:fc:f8:
                    c5:b9:79:c7:06:63:35:18:9b:ee:e3:4d:37:ce:f8:
                    c2:59:5c:53:90:c9:be:f5:97:65:60:18:98:37:9b:
                    6a:2e:33:b9:c1:57:b2:53:68:e0:02:55:92:85:19:
                    9f:ee:d2:42:bc:f5:d0:79:b9:45:c4:ee:d7:f4:10:
                    65:b5:70:71:50:37:a5:8a:e0:de:5d:72:88:26:45:
                    b3:7c:e5:6f:d0:68:24:bf:63:71:ed:77:0e:17:65:
                    e0:bc:2f:28:e6:36:89:01:93:96:71:06:28:ab:1a:
                    af:18:db:b0:f7:0c:80:46:25:ac:ff:d9:32:bf:a9:
                    ce:93:89:68:b0:2a:11:07:1c:a8:04:7b:f5:2b:18:
                    76:3a:7c:af:8f:7f:53:0d:33:23:35:71:10:31:dd:
                    67:f8:60:52:61:ef:02:41:81:9f:2c:c0:3e:03:db:
                    07:de:aa:59:39:9d:35:be:2b:00:ca:cb:96:4b:a7:
                    a2:5b:e8:be:13:64:50:ca:f2:49:87:78:2d:4f:1c:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EB:0A:7A:76:A5:B8:CF:63:63:F2:9F:7F:4C:4F:3D:B8:3F:97:A7
            X509v3 Authority Key Identifier:
                keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:dc:8c:a6:61:a3:a8:1b:4e:94:16:bf:1e:fd:17:87:a0:d8:
         23:05:36:c9:c1:15:76:40:83:ab:a5:43:95:2a:84:f7:4d:0c:
         2f:7b:c5:9f:5a:21:f5:66:f1:91:4a:40:ce:ef:c6:8c:66:99:
         8d:a0:4f:dd:d2:59:aa:e2:89:ee:f1:82:f5:36:eb:5b:52:97:
         33:bb:7f:ea:15:05:21:d3:21:f2:09:97:98:59:65:16:f3:c6:
         c2:84:7b:e7:9b:0a:74:f1:f2:79:a8:6d:01:33:b4:82:9c:24:
         f7:13:46:b4:51:f2:ef:a1:d4:4f:bf:42:78:46:eb:a8:2a:9a:
         21:c9:cb:80:40:8d:66:ec:02:5a:57:2e:74:6d:39:13:95:f5:
         35:fb:e8:69:e6:77:68:b5:d8:8e:03:51:40:54:71:18:b1:91:
         f6:7e:a6:19:ff:c9:a1:cd:be:10:c8:db:95:be:15:44:86:8e:
         a7:a1:e3:36:46:a6:17:61:55:d5:4c:02:3f:3d:26:86:b8:0d:
         ae:64:b5:96:8a:34:55:66:42:4f:8e:38:a5:0f:a8:e6:9d:65:
         2b:47:da:89:58:d5:e4:65:0f:d1:bc:10:12:88:b8:d0:ca:72:
         9b:a5:60:0a:6e:ce:3d:5f:60:1f:69:c1:13:42:2a:07:4a:8d:
         14:d0:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:29:20 2026 by rpki-client