Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
File:                     RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json)
Hash identifier:          Lm0Sy3tDxjaCSEbwDxp+YodpcXwYPmyYImZXTGz6m10=
Subject key identifier:   83:8F:FB:B9:6D:09:8D:18:88:A6:34:94:8E:96:FC:CE:D5:22:06:71
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Certificate issuer:       /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
Manifest number:          01BF
Signing time:             Mon 02 Mar 2026 01:40:22 +0000
Manifest this update:     Mon 02 Mar 2026 01:40:19 +0000
Manifest next update:     Mon 09 Mar 2026 01:40:19 +0000
Files and hashes:         1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: jUPQ7jw+AczeRFSKAIjmArFZL3u9X1YeCLxo2wMH9Do=)
                          2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: BKYUsrSTsEZZhJsjvVOhMg6+a6SrCr1C6umPKzfjlnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
        Validity
            Not Before: Mar  2 01:40:19 2026 GMT
            Not After : Mar  9 01:40:19 2026 GMT
        Subject: CN=69a4ea85-02eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:e7:03:a1:fa:54:b4:44:1c:a4:27:f8:33:
                    cf:63:01:5e:cb:33:c2:2e:82:ee:06:20:75:47:be:
                    41:e5:f6:34:6b:b5:c1:55:98:39:14:46:59:1c:52:
                    52:ab:4d:31:6d:ff:f9:3e:2f:0e:3c:16:d5:75:93:
                    58:8a:14:b0:29:84:dd:4f:45:da:a6:a9:aa:8e:61:
                    de:1d:bd:ae:b6:fa:28:e4:ce:35:4e:47:de:cb:7c:
                    c1:7f:a5:f8:ba:59:18:5f:d8:5f:10:83:75:11:68:
                    90:03:cf:30:86:8b:63:fb:85:a0:0c:22:4a:ce:9c:
                    9c:ed:ca:db:ea:b3:af:e1:a5:a2:59:52:a0:d8:65:
                    71:cf:90:10:70:ef:08:e4:96:ea:bf:a7:21:48:10:
                    b2:0a:92:cd:53:26:b7:4e:82:4c:87:d6:19:0c:b2:
                    63:e3:60:39:ca:ad:bc:c4:3b:39:e5:3b:3c:af:e5:
                    d7:99:cc:bc:40:40:47:9f:18:e5:ea:2d:fa:97:83:
                    18:5d:01:d1:36:68:d6:22:a8:57:f9:6e:a7:9a:df:
                    56:b7:37:bb:75:3b:a9:67:65:cc:13:4e:18:1b:22:
                    62:dc:2d:b3:e0:e3:77:7b:a4:36:50:f5:50:e8:c2:
                    c1:b8:b7:7b:69:4c:47:7d:b5:c8:29:dc:a6:8f:5e:
                    37:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:FB:B9:6D:09:8D:18:88:A6:34:94:8E:96:FC:CE:D5:22:06:71
            X509v3 Authority Key Identifier:
                keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7b:17:4c:6a:71:44:6d:06:83:63:78:ba:39:0a:5b:93:b6:
         fe:ec:8a:5d:80:38:38:d4:14:86:65:9c:6a:59:bf:3c:21:6f:
         9e:08:d8:f9:d0:56:d2:76:93:6e:77:07:ac:4f:75:60:04:83:
         ec:83:6a:25:6f:1c:a2:ba:e6:7b:db:95:df:cd:2d:be:f2:09:
         14:29:6d:a2:b7:38:6f:55:f2:99:ae:56:d4:11:55:37:5c:2a:
         bb:51:8e:e9:7e:9b:51:63:83:10:a8:f6:e4:52:da:d8:c6:cf:
         5a:84:c4:71:83:0f:e1:ea:25:ab:69:ff:32:7f:a8:dd:aa:73:
         de:29:0c:a9:95:0a:8d:8c:a4:04:6d:24:f4:a5:f1:a9:c5:36:
         19:49:8c:82:98:12:2e:20:f1:2e:0e:36:15:1d:ba:bf:12:ee:
         b4:5f:86:7e:a5:8d:1d:3d:06:e1:9c:13:4b:e5:cb:95:b1:23:
         ff:9f:eb:3b:a9:25:71:dd:53:19:3b:4b:04:70:44:c4:03:aa:
         23:63:30:72:5f:68:6b:4b:71:7f:1a:d2:46:4f:83:55:4f:50:
         7a:bb:bd:ee:ab:ef:e7:58:7f:fa:0c:ba:d8:48:fe:76:7c:3e:
         b5:5c:64:0c:d5:65:1b:6f:b6:44:c6:a0:f3:16:e7:82:fb:2e:
         9f:b3:94:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:57 2026 by rpki-client