Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File:                     CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier:          IKL8vn9sDMoKXsydjyxgTTmUZ1b51gLbzzrgJwZKbV0=
Subject key identifier:   23:CB:5B:7A:28:2A:60:03:DA:C9:F3:C6:61:76:74:EA:BF:23:9F:DB
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer:       /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial:       0F99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number:          0F86
Signing time:             Mon 02 Mar 2026 00:52:58 +0000
Manifest this update:     Mon 02 Mar 2026 00:52:57 +0000
Manifest next update:     Mon 09 Mar 2026 00:52:57 +0000
Files and hashes:         1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: psMMswkARP2LU59jnMZdppLP9fpAysqykpheGNZ6wKc=)
                          2: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: vtr7yAZ74kddk2JEZlUucC+/G3kf3cROk0g8PEEHH8Q=)
                          3: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: kSNCg22bt6PXx3rEaTBPvjpdHaLrIf1YauM4yC/A/tE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
                          rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3993 (0xf99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
        Validity
            Not Before: Mar  2 00:52:57 2026 GMT
            Not After : Mar  9 00:52:57 2026 GMT
        Subject: CN=69a4df6a-ae22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:f5:51:2c:8f:3e:3e:c5:48:50:91:04:f3:
                    06:88:c2:72:8a:2e:87:55:7a:fe:96:88:82:58:f0:
                    ab:72:62:0b:18:63:fe:ad:36:ef:51:a9:fb:03:bd:
                    88:41:b2:55:db:82:32:af:ac:47:82:0f:de:4f:31:
                    f2:d7:09:b9:10:ba:01:5c:e0:4f:72:c7:76:0c:94:
                    25:cd:7e:96:3d:fd:65:e8:a0:71:be:d5:3b:31:b7:
                    cb:4a:e6:38:da:90:d6:7b:56:c1:e6:42:48:2a:29:
                    81:ef:6d:71:34:de:cc:40:40:bf:71:04:ed:02:e3:
                    2c:f6:fe:a4:f7:97:1b:72:ef:3c:1e:c5:88:ca:1b:
                    e7:c7:cd:ac:a2:dc:a2:6a:3e:b9:2c:b0:f2:e3:b3:
                    43:12:9b:b0:6d:cb:d2:79:4a:44:81:cf:c4:db:59:
                    46:1a:a5:5f:aa:fa:7d:65:e0:69:3f:0b:ee:8b:77:
                    e3:98:f6:e6:43:23:ac:94:ba:58:5d:83:d8:e1:6b:
                    aa:f6:56:d9:09:68:64:49:9f:03:16:bc:70:e3:3b:
                    9d:c3:81:3d:31:9d:19:76:ea:1e:ec:17:c2:fb:32:
                    af:e7:6e:59:a7:2c:d2:3c:f6:15:04:86:20:4d:5f:
                    d4:99:6d:fc:ee:16:98:3f:b3:7c:4c:7d:77:e8:d2:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CB:5B:7A:28:2A:60:03:DA:C9:F3:C6:61:76:74:EA:BF:23:9F:DB
            X509v3 Authority Key Identifier:
                keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:36:10:80:76:2f:3f:96:34:ce:ac:d2:c4:af:d0:f5:8f:80:
         ae:c8:c3:2d:6d:d0:37:98:62:e3:00:9b:c5:a7:68:f0:b6:0a:
         85:52:ca:e3:93:bf:11:ec:50:ef:f3:1b:a0:56:ce:d7:ad:e8:
         c9:36:2d:bf:cf:12:37:dc:af:24:5e:5d:07:ab:56:f8:53:31:
         72:c8:52:d5:21:4d:77:74:eb:ba:21:15:31:5d:66:ee:74:9f:
         1b:a8:50:da:e2:8d:bb:e0:78:ca:cf:8c:51:af:18:f1:9e:4d:
         91:03:7d:fd:07:ee:60:1e:0d:cf:42:86:05:d4:61:02:d3:7e:
         32:00:c0:2a:33:99:40:42:7f:da:1e:85:ff:e2:40:49:27:9e:
         a7:ca:ee:04:a9:b6:52:e2:78:1a:31:16:8c:4d:d7:cf:8c:d2:
         85:eb:f3:a0:a4:10:29:1d:ae:fc:28:25:ab:3d:2a:3f:10:7c:
         57:11:e9:4d:57:d8:93:37:91:ce:29:7c:50:1f:99:c0:6d:6b:
         44:69:73:0d:e7:6f:e1:0b:26:9d:98:fb:f6:70:82:4f:73:10:
         1a:df:64:40:4c:47:69:ec:7e:70:95:0f:3d:3e:5b:53:43:6d:
         69:9b:cc:1f:31:4c:b0:e9:4b:3a:1b:a3:e8:b6:86:49:6f:c1:
         6d:c4:1d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:10 2026 by rpki-client