Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          bK9G4dnyOsGiJud7cV0z+TpB7VNoAB8uX5+kTZvS0pY=
Subject key identifier:   BE:1E:F3:51:54:B7:09:96:67:60:EF:F5:FF:4D:E4:9D:78:D5:63:DF
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          01BA
Signing time:             Sun 01 Mar 2026 04:45:00 +0000
Manifest this update:     Sun 01 Mar 2026 04:44:59 +0000
Manifest next update:     Sun 08 Mar 2026 04:44:59 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: 6b8XRBTvu9QYPZO+Snnf+YTowp+0i6GoqBmvjaQkxIc=)
                          2: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: t7FsZVWYLMh9KVfAyE4zGbLR1KRLWwp3RkvpKfTtkKI=)
                          3: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: 7KfiMIrqCDMway6OtiafKLI6sq8wx9tSGpkCPK/N/Zw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Mar  1 04:44:59 2026 GMT
            Not After : Mar  8 04:44:59 2026 GMT
        Subject: CN=69a3c44c-34c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:07:3b:e1:23:77:00:33:6c:d4:9b:8d:7b:
                    ba:bb:0b:30:5b:03:ad:55:5a:fe:db:23:a1:d1:cd:
                    ad:ba:0d:ee:be:f3:38:06:2f:76:8b:bb:b3:73:c5:
                    79:af:ee:f4:8b:c5:f4:79:59:2a:c5:31:a6:b1:49:
                    a0:01:07:36:d0:67:a5:9c:c6:17:07:48:4e:53:df:
                    67:27:54:33:05:5d:2c:41:25:ff:14:b0:94:46:02:
                    c5:69:74:8b:62:51:6c:7b:2b:e5:ce:5c:7e:3b:51:
                    78:aa:94:c1:35:97:61:4f:68:12:97:0b:1b:ca:80:
                    c4:15:28:c5:99:e2:0c:28:b0:2e:4f:44:1d:09:e5:
                    89:12:a5:f0:4c:2e:04:ee:85:d4:4c:47:87:84:ac:
                    1e:d4:3e:ff:ce:fd:99:7c:31:68:de:1e:7e:d3:16:
                    a8:2c:2a:f3:97:c2:23:d0:79:bf:7c:cf:6f:97:3e:
                    65:8e:14:d3:78:f3:a8:db:ca:60:a7:b2:e6:ff:78:
                    36:f4:2f:97:80:22:d9:2e:3b:91:f9:68:11:37:32:
                    d1:b3:ad:86:e0:0a:c3:b9:47:cb:db:84:61:34:90:
                    38:0d:25:ae:51:50:dc:a1:5c:5b:64:7b:a0:b0:f0:
                    12:99:5e:ad:55:e9:db:85:df:0e:92:df:15:4a:53:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1E:F3:51:54:B7:09:96:67:60:EF:F5:FF:4D:E4:9D:78:D5:63:DF
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:64:3a:1e:9b:3c:88:e7:e8:fa:14:ed:a4:f7:c3:04:4a:
         1d:ad:72:cc:7b:4e:80:86:0e:49:72:d7:a4:f1:4e:8e:10:ec:
         e6:b2:01:3e:b8:e2:83:32:1f:06:8e:bf:ea:85:99:8e:3a:0d:
         50:2e:89:00:64:d0:09:34:d3:39:07:cd:5c:ef:87:c0:3e:fe:
         08:20:36:ac:87:5c:fc:52:3f:ce:a2:4c:b9:a6:05:49:3d:37:
         83:bd:07:6d:02:8a:f3:0a:1c:4a:6e:da:5a:b0:2c:85:79:5f:
         da:7a:75:c9:f0:5f:ac:23:bb:93:a4:a4:8a:c5:01:f2:d0:1b:
         53:d0:0c:6e:07:ec:0d:2e:88:3c:70:1a:6f:53:f0:b0:2b:51:
         1b:4c:e9:e0:9f:3a:17:79:55:2b:c5:33:45:84:4f:50:76:c3:
         4d:f5:4e:c9:17:f5:70:c0:7b:cc:0c:57:7c:37:f4:43:2d:98:
         f5:1c:09:68:14:c1:ad:74:8d:89:43:75:58:5f:02:cb:ea:89:
         8b:5b:ef:84:4e:48:f5:80:70:5c:d5:be:78:08:b5:d4:3f:fb:
         5b:39:1f:ba:93:9e:21:5a:64:4a:c3:11:0f:2c:6f:80:67:49:
         2f:5a:af:7e:78:b8:f1:1c:4e:51:82:0e:1c:c9:26:71:43:61:
         8b:e7:51:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:14 2026 by rpki-client