Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
File:                     aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json)
Hash identifier:          9FNCBzpL+cF2v0X5NQXzpdqErTPyfdAA8hiFSrGBGi0=
Subject key identifier:   C8:02:DC:D8:C2:D7:73:7C:97:E7:68:26:4D:D9:F8:E5:43:B0:2D:C1
Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9
Certificate issuer:       /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
Manifest number:          017B
Signing time:             Mon 02 Mar 2026 15:06:11 +0000
Manifest this update:     Mon 02 Mar 2026 15:06:10 +0000
Manifest next update:     Mon 09 Mar 2026 15:06:10 +0000
Files and hashes:         1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: 43pqqDhR8F2j4qaDDRo8mQG83FAfX0x/Wd5T0BhEK2o=)
                          2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: zxuaZzlcmhX82a6gqkXLEm5BVO4/5hjHvdupOdmi2DI=)
                          3: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: Kg5Gr3/4P3sEwkP/uByHr/MaXUD2e2owmRGRXgdGcwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl
                          rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9
        Validity
            Not Before: Mar  2 15:06:10 2026 GMT
            Not After : Mar  9 15:06:10 2026 GMT
        Subject: CN=69a5a763-1d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:0a:5f:4f:df:51:c9:0b:1b:cd:31:a4:95:
                    29:c7:d1:a0:35:fa:27:19:7a:e5:9c:b1:ab:35:36:
                    59:0c:62:2d:31:90:52:c6:32:0b:a8:7f:e9:9d:ff:
                    c0:79:7b:27:34:c4:6c:bf:8d:be:16:4c:1c:a6:27:
                    2d:e3:47:6f:e9:39:42:5e:57:7e:fb:f6:e1:eb:d7:
                    41:31:d0:ed:ed:47:9e:b4:cc:d9:a0:be:e2:d5:33:
                    a7:0d:be:04:b8:b7:c3:dc:70:c6:18:87:ff:07:88:
                    3e:bd:53:1d:86:bf:36:35:f7:fe:48:16:01:ed:c8:
                    73:28:12:95:3a:b8:c5:91:f0:df:6d:3e:c5:a0:cd:
                    e1:ef:23:fb:65:6f:95:06:bb:51:77:1a:70:78:2b:
                    83:33:25:4e:68:d7:aa:fb:0f:d0:90:25:a9:e2:0f:
                    1d:ac:50:81:06:7a:1d:83:d1:53:99:a3:c5:eb:fb:
                    a4:3a:62:44:f8:86:c9:8e:1d:4b:88:99:cc:9d:d9:
                    c2:ba:b6:55:08:b5:8c:54:27:ca:3e:2d:5d:a2:46:
                    04:61:4a:b8:83:02:8c:d1:87:17:98:ca:18:ba:2f:
                    e6:36:0a:a6:cc:9c:e6:09:b6:ac:12:65:6c:d8:eb:
                    61:cb:2a:28:28:09:0d:92:40:bd:19:59:7f:37:bc:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:02:DC:D8:C2:D7:73:7C:97:E7:68:26:4D:D9:F8:E5:43:B0:2D:C1
            X509v3 Authority Key Identifier:
                keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fe:70:ac:3e:3d:62:81:66:42:ba:cb:09:f2:8e:a2:fe:52:
         32:85:f6:b4:20:93:59:e4:af:2c:f5:df:39:0c:1c:d2:c2:10:
         e2:e9:22:ae:8d:83:79:63:a4:c1:05:54:d6:fd:c3:70:b0:09:
         cf:2c:a9:78:81:c9:fc:d3:66:9c:98:11:77:5e:b5:61:b6:1f:
         69:f5:25:60:74:1d:e3:08:aa:66:b5:27:a4:04:14:9f:0b:52:
         0d:01:f7:69:9b:29:90:86:37:0f:4c:ce:4a:6d:07:79:92:11:
         9b:71:52:07:c5:f6:0d:2e:97:d3:4b:cb:be:96:96:9f:cd:ac:
         a7:5b:e0:89:0b:5d:42:0c:a6:61:e1:c4:ba:3c:5b:2e:48:2c:
         d2:c5:2e:6c:9a:c5:02:d0:a4:e6:5d:5f:47:03:e9:d5:3d:aa:
         a7:32:de:47:b2:b5:9f:0f:c8:d9:a4:2f:9e:ae:ab:4d:5f:7a:
         9e:ad:d9:ad:45:d7:62:39:89:13:76:24:27:47:54:2b:9e:dc:
         12:ab:0f:14:5e:4a:11:de:cd:ab:2f:79:fd:1e:b0:8e:7e:cd:
         d3:27:a1:e1:af:2e:dc:d5:85:26:05:76:f6:b3:34:ac:5d:87:
         df:2c:e9:af:b0:b7:2e:c0:7a:6f:3a:b9:ce:b5:02:21:7f:cf:
         88:67:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:26 2026 by rpki-client