Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
File:                     wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json)
Hash identifier:          /BSLYxZnjDMzL4lLBqEkvgOWPwKFSvXFpjApPwSVv+U=
Subject key identifier:   81:2E:FF:1B:08:71:FA:B6:03:6A:AE:D1:50:7F:72:34:C9:BA:3D:2E
Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
Certificate issuer:       /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Certificate serial:       08F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
Manifest number:          08F1
Signing time:             Mon 02 Mar 2026 01:26:02 +0000
Manifest this update:     Mon 02 Mar 2026 01:26:00 +0000
Manifest next update:     Mon 09 Mar 2026 01:26:00 +0000
Files and hashes:         1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: OfAfQDaSloqK+1eb/jyDqNcRrBC4AExKIWJMYrcd5/g=)
                          2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: edI7/Y3QUQ2H0PLGPWgqOSTulDJowXskUVxpUOtA7Co=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
                          rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296 (0x8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
        Validity
            Not Before: Mar  2 01:26:00 2026 GMT
            Not After : Mar  9 01:26:00 2026 GMT
        Subject: CN=69a4e729-f865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:50:18:83:72:0b:bb:ba:c4:f5:86:58:f5:
                    ec:52:d3:80:71:4e:34:c1:fa:df:24:15:55:4d:2b:
                    a1:cf:69:65:d2:82:da:ca:65:fa:6f:48:29:32:88:
                    90:02:38:86:d9:3d:4c:5d:6b:1a:08:14:38:55:58:
                    69:63:08:92:1c:02:00:bc:2b:a6:12:e7:33:59:00:
                    a3:85:c9:5f:d4:8d:aa:5e:05:f0:9d:80:1b:22:ae:
                    d2:9b:b2:8c:05:b4:f4:3f:54:b6:a4:c0:72:fb:d2:
                    62:22:d8:a7:7c:b3:a6:9b:b1:65:d9:f1:60:f1:68:
                    24:6c:42:cb:ee:6b:46:da:1a:f8:82:17:29:f4:76:
                    bc:f4:60:20:29:e4:2e:10:34:31:58:72:e9:70:ca:
                    1b:37:4a:59:31:28:07:46:cc:38:64:bd:da:7f:d1:
                    e0:f5:1d:73:2f:ac:55:d8:d2:d5:39:37:50:88:61:
                    1e:e0:d0:9f:30:58:1b:89:f4:16:2c:a5:87:26:1a:
                    2d:fa:2e:96:af:f2:4b:73:29:8a:22:ef:42:db:47:
                    ec:1f:6f:ac:56:5c:78:b0:22:f2:4c:28:9a:a2:2a:
                    d2:40:b5:b0:cb:3b:c5:e6:1a:40:78:dc:25:d1:22:
                    3e:db:3c:e1:98:b4:c9:cc:50:24:94:01:3d:6a:de:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2E:FF:1B:08:71:FA:B6:03:6A:AE:D1:50:7F:72:34:C9:BA:3D:2E
            X509v3 Authority Key Identifier:
                keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:be:5d:5c:a4:56:f7:4c:af:e9:1d:05:ba:00:09:aa:99:7b:
         d7:b5:f5:4a:b7:02:87:d8:a9:51:68:de:40:a4:d7:79:f6:87:
         59:96:cd:c2:ce:51:74:40:26:98:0a:03:b4:3b:12:00:93:3d:
         25:6e:70:57:b4:0b:36:ce:e7:12:a4:94:0b:2f:41:36:c6:4d:
         e3:b7:8b:ea:fd:32:9b:6a:24:94:7a:37:78:39:63:61:18:3f:
         68:46:7d:f4:2b:c8:ef:46:ec:fb:73:11:38:4d:2d:2f:14:7f:
         14:50:6c:d1:79:c2:a8:bf:eb:53:5f:06:60:2c:cd:19:c9:ec:
         ef:4f:28:f9:35:1f:7b:2b:53:ec:78:76:dd:a4:cf:c9:37:94:
         9f:51:d8:3e:bb:49:05:f6:ee:89:cb:82:43:e7:98:45:e0:69:
         5c:06:46:2a:30:32:d8:01:78:61:bb:e7:98:ef:1a:a7:02:d4:
         69:92:57:95:78:c0:d1:8f:f3:c8:38:c3:7c:d0:1b:15:7c:8d:
         6c:7d:70:da:4f:6b:2d:22:f4:f5:aa:43:f7:de:80:51:69:9b:
         fc:ec:df:d4:f9:6a:d8:a5:37:ce:85:d3:5f:06:fe:94:d9:c1:
         14:f5:97:de:88:50:11:80:d1:6a:c1:69:15:ad:da:54:13:25:
         be:18:32:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF
ODE3RTM5QUQwHhcNMjYwMzAyMDEyNjAwWhcNMjYwMzA5MDEyNjAwWjAYMRYwFAYD
VQQDEw02OWE0ZTcyOS1mODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAostQGINyC7u6xPWGWPXsUtOAcU40wfrfJBVVTSuhz2ll0oLaymX6b0gpMoiQ
AjiG2T1MXWsaCBQ4VVhpYwiSHAIAvCumEuczWQCjhclf1I2qXgXwnYAbIq7Sm7KM
BbT0P1S2pMBy+9JiItinfLOmm7Fl2fFg8WgkbELL7mtG2hr4ghcp9Ha89GAgKeQu
EDQxWHLpcMobN0pZMSgHRsw4ZL3af9Hg9R1zL6xV2NLVOTdQiGEe4NCfMFgbifQW
LKWHJhot+i6Wr/JLcymKIu9C20fsH2+sVlx4sCLyTCiaoirSQLWwyzvF5hpAeNwl
0SI+2zzhmLTJzFAklAE9at5IAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIEu/xsI
cfq2A2qu0VB/cjTJuj0uMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2
RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjE3Ni84OEFCOEU5NEM2RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXRO
TmNwUXFUblQyY3ZvRi1PYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh75dXKRW90yv6R0FugAJqpl717X1SrcCh9ipUWjeQKTXefaHWZbNws5RdEAm
mAoDtDsSAJM9JW5wV7QLNs7nEqSUCy9BNsZN47eL6v0ym2oklHo3eDljYRg/aEZ9
9CvI70bs+3MROE0tLxR/FFBs0XnCqL/rU18GYCzNGcns708o+TUfeytT7Hh23aTP
yTeUn1HYPrtJBfbuicuCQ+eYReBpXAZGKjAy2AF4YbvnmO8apwLUaZJXlXjA0Y/z
yDjDfNAbFXyNbH1w2k9rLSL09apD996AUWmb/Ozf1Plq2KU3zoXTXwb+lNnBFPWX
3ohQEYDRasFpFa3aVBMlvhgybQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:38 2026 by rpki-client