Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
File:                     R4pL3QESHRxrMz7MPiW6Gohxmao.mft (raw, json)
Hash identifier:          3CSZBTQlkJAjzcR2svaJoL6Glfvm/ovONjoFyXqI62I=
Subject key identifier:   34:30:6E:0F:15:55:FD:AB:4E:56:42:89:11:48:CB:C0:15:39:74:6C
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Certificate issuer:       /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial:       0E66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
Manifest number:          0E5A
Signing time:             Mon 02 Mar 2026 01:07:39 +0000
Manifest this update:     Mon 02 Mar 2026 01:07:37 +0000
Manifest next update:     Mon 09 Mar 2026 01:07:37 +0000
Files and hashes:         1: R4pL3QESHRxrMz7MPiW6Gohxmao.crl (hash: eRlNIao08a1qVeijUg7hzPMjxNbRZ7VFi2VLtrWxSNQ=)
                          2: 7043D43679BB11ECB6D72266C4F9AE02.roa (hash: 4apSZMW7Vfs833gnnmQpU2EzXDtEcmjJdHV9lEBaG8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
                          rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3686 (0xe66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
        Validity
            Not Before: Mar  2 01:07:37 2026 GMT
            Not After : Mar  9 01:07:37 2026 GMT
        Subject: CN=69a4e2da-7f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:3f:5e:14:84:03:28:81:26:e6:a3:0f:ef:
                    8c:d6:d8:79:72:16:d6:af:84:14:c2:23:f6:96:90:
                    33:98:0c:71:6b:53:bc:3f:ce:b7:4f:9a:74:67:ca:
                    66:17:81:f7:05:38:49:c1:03:8c:ae:da:be:3e:ae:
                    46:cd:bc:18:96:a2:44:f3:7a:31:08:a2:1d:f0:8e:
                    02:6d:5c:61:64:af:b0:1d:31:12:f8:94:95:8a:86:
                    e3:18:7d:0c:de:d7:13:f8:5e:5a:0a:c0:8e:13:23:
                    bd:cb:e9:2c:09:40:4d:60:43:dc:88:83:07:1d:b1:
                    35:96:4c:e3:70:6c:18:02:09:57:f9:17:d3:ce:09:
                    9e:43:27:01:c7:4e:00:e7:fe:8d:c8:9d:5b:0b:69:
                    f8:40:3c:17:49:e0:33:32:07:bf:a9:c1:b7:4a:e8:
                    ba:00:5a:49:7f:e6:b4:ae:e1:ed:c3:72:a5:94:76:
                    57:91:0e:77:6c:b0:20:e9:f5:e7:fd:22:11:23:29:
                    07:5c:19:f2:c9:38:76:ff:33:1c:0b:fc:97:f9:78:
                    88:32:77:89:50:c8:16:74:47:59:42:95:77:53:e5:
                    c1:64:41:97:31:07:6d:fb:4d:cb:b0:95:70:6a:be:
                    50:17:b6:00:bf:86:41:e8:9e:3e:9b:46:12:1c:cf:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:30:6E:0F:15:55:FD:AB:4E:56:42:89:11:48:CB:C0:15:39:74:6C
            X509v3 Authority Key Identifier:
                keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:57:c2:e4:de:67:fc:96:19:c6:00:c8:b5:e6:02:00:c7:
         2a:28:48:3b:93:b7:38:cf:b1:f3:6e:b1:85:2f:9f:1a:25:18:
         05:54:8c:2a:6d:22:f4:6f:e5:48:9c:4c:af:c4:a3:42:58:cc:
         6f:6f:95:ab:64:cb:1a:be:1d:ac:e0:02:f5:34:83:05:2d:00:
         2e:cc:4b:e0:fb:53:67:17:58:56:c1:5b:ce:ce:2d:af:f6:12:
         aa:7f:a7:68:43:50:d8:8a:4b:8b:07:68:fc:c2:02:68:72:d6:
         2e:68:a3:1d:85:d1:64:e6:11:5d:4c:c8:40:24:9e:5c:c4:db:
         60:a7:49:8a:bb:a9:1d:de:27:ab:fe:a6:8a:14:17:c3:df:e2:
         db:2f:ef:46:f3:c3:19:74:9f:01:c6:cb:ec:23:a2:07:6e:6f:
         1e:98:26:c1:2d:0b:b5:c2:e1:34:d5:e6:31:3f:50:7a:96:5b:
         41:48:91:90:25:bc:99:7a:08:f9:e1:98:c3:82:7a:87:12:b0:
         17:1e:27:cc:8d:3e:1f:d1:a6:3a:43:34:3b:89:59:10:52:ff:
         56:cb:95:c3:52:07:73:41:c0:f3:39:7e:5c:cc:24:ce:f5:e9:
         f8:29:3d:2d:cc:a1:0e:90:d8:0f:fb:d8:8e:8d:ac:ea:0c:aa:
         e4:3d:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:59 2026 by rpki-client