Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
File:                     3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json)
Hash identifier:          oTzPgWlnhm0NEBXG16qJdGcbsXfpEdAZTaSnEdvf/ms=
Subject key identifier:   39:D0:FD:A9:16:48:38:FB:F9:6F:15:D7:70:84:8D:7E:B5:FE:0F:B9
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Certificate issuer:       /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
Manifest number:          010E
Signing time:             Sun 01 Mar 2026 07:00:11 +0000
Manifest this update:     Sun 01 Mar 2026 07:00:11 +0000
Manifest next update:     Sun 08 Mar 2026 07:00:11 +0000
Files and hashes:         1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: skjmN5fHPOoOuaHiaj1JjfyVJA/ed38zIEwtMeJ86yo=)
                          2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: bXsYiFs/1LAAvnPFWc2oF5LhYtHyhSVuRh2eDok+L9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
                          rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
        Validity
            Not Before: Mar  1 07:00:11 2026 GMT
            Not After : Mar  8 07:00:11 2026 GMT
        Subject: CN=69a3e3fb-3c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:83:0d:7c:85:2c:e9:a2:5e:fa:0b:07:d5:
                    43:77:69:bf:a5:bf:b6:83:df:e2:47:40:6e:ff:da:
                    c2:1c:78:a4:51:de:f6:05:66:cd:06:c6:4e:da:67:
                    f3:9e:f3:db:28:f8:00:4c:32:0b:3f:0b:88:a8:e8:
                    4c:72:2d:cb:ed:42:8a:a7:23:db:bb:0c:63:de:99:
                    38:75:42:21:96:f4:c0:f7:19:1d:a1:2a:06:bf:e9:
                    b8:21:e8:90:b4:22:1a:83:07:02:57:64:0c:6e:a7:
                    81:04:be:97:84:dd:09:06:26:c6:10:c1:d3:82:e5:
                    e0:84:78:18:08:95:b4:13:a1:21:2a:0a:bf:5a:a1:
                    6e:32:27:c4:0a:c3:67:77:16:05:1b:c8:80:1d:31:
                    5e:e1:e5:a2:eb:43:4f:96:76:f8:6b:e9:8b:4b:4b:
                    ed:df:9d:21:6a:b5:5e:3d:ab:6c:3c:a3:1c:82:b1:
                    ea:a8:e0:8a:60:39:76:64:10:a0:6f:3c:32:6b:ed:
                    aa:20:26:93:54:a0:4c:ac:a8:2a:fe:69:89:6f:01:
                    51:bf:42:69:89:c9:34:97:12:c0:5b:a3:0d:aa:a5:
                    6c:5f:ab:ef:36:8f:9a:4c:c7:48:41:00:55:75:53:
                    9d:dd:c8:81:6b:2d:1a:e6:34:7c:3d:22:e7:3a:f2:
                    f1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:FD:A9:16:48:38:FB:F9:6F:15:D7:70:84:8D:7E:B5:FE:0F:B9
            X509v3 Authority Key Identifier:
                keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:54:de:31:ff:4e:40:8c:bb:bd:3b:08:d2:91:51:43:b9:3b:
         d3:01:3b:e6:46:cd:ae:eb:89:a7:5e:e9:b8:6c:68:bf:82:fd:
         90:ae:77:5c:23:2d:b3:88:e2:a1:d9:8d:61:0b:4a:c2:d5:50:
         27:b0:72:fc:1f:a6:2f:f0:73:f1:3b:a4:02:0b:ed:5f:5d:bf:
         88:67:ca:26:7c:09:fc:0a:f0:04:40:b0:ef:fa:b4:97:22:6c:
         f2:fa:53:48:98:a7:63:0f:07:d0:03:a8:11:0e:af:9c:e6:db:
         fd:45:b4:28:d7:8f:24:d2:27:03:0a:ea:a8:ca:a3:17:78:09:
         a7:19:d0:ac:6e:5f:bc:11:b5:ba:ab:7d:67:fa:9c:88:d9:eb:
         cf:fc:b5:fc:0e:ca:c7:7f:cc:44:30:88:0b:7c:33:ac:12:3d:
         67:20:ec:c9:fb:3f:15:1a:77:cc:03:17:b2:76:ac:2a:c3:a4:
         c4:c9:96:eb:5a:4f:c8:d6:a3:1f:a1:47:11:c2:89:ac:97:cb:
         90:83:07:0d:75:86:60:91:f9:69:6b:3e:50:60:73:f5:f2:c2:
         2f:f0:76:9a:dc:76:8e:bd:78:11:b9:7d:0f:61:85:45:5e:bb:
         2e:42:ea:e8:dd:fb:f8:25:25:a8:b4:12:1f:40:72:d6:41:fe:
         8e:89:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:40 2026 by rpki-client