Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File:                     DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier:          aKFUi9Nk1Xb8Mm9UXsZTke47VgMZwBhCPZvkWTbvJ4g=
Subject key identifier:   21:53:A9:FE:05:4B:60:5E:DB:95:6D:CD:25:7B:70:D7:06:BB:8B:36
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer:       /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial:       0E96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number:          0E8B
Signing time:             Sat 28 Feb 2026 17:51:35 +0000
Manifest this update:     Sat 28 Feb 2026 17:51:34 +0000
Manifest next update:     Sat 07 Mar 2026 17:51:34 +0000
Files and hashes:         1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: snslqA3KQ4fJWI6RHQ+2sW6fOeL9iOmi0KbNz/hiQ/k=)
                          2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: M2L1TDDyX72ReECKnE9vUgAsmnB0Pz4FwQ7PdyDyDV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
                          rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3734 (0xe96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
        Validity
            Not Before: Feb 28 17:51:34 2026 GMT
            Not After : Mar  7 17:51:34 2026 GMT
        Subject: CN=69a32b26-c68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:53:ea:df:67:fa:7f:b9:7e:0c:86:96:b8:
                    9d:c8:5c:50:89:71:6a:e1:a0:86:89:65:ae:b6:8f:
                    ed:8c:de:73:2a:31:6f:be:4e:2c:bd:61:25:89:ec:
                    de:56:74:e6:53:66:3d:9b:1b:eb:6d:61:91:47:49:
                    bb:3e:ef:cf:db:a5:ab:38:62:29:63:28:84:5b:90:
                    7c:06:cc:34:2b:2c:25:d8:d8:41:b6:38:e6:c5:1d:
                    3c:25:25:b6:25:d5:c7:75:86:28:a7:b5:d5:1e:11:
                    d4:2c:64:16:a1:41:d9:0f:60:35:ba:a9:e5:00:9c:
                    c2:99:1b:1c:11:5a:f8:fb:81:c0:7a:57:cf:18:fd:
                    13:52:65:46:0f:d7:d9:ec:b1:5a:3d:c6:a4:2f:cc:
                    4c:b5:3b:1b:f9:dc:02:dc:47:81:ba:37:1e:4f:fe:
                    3f:37:f9:9a:76:79:91:d5:62:a2:dd:63:a2:23:33:
                    41:2d:bc:c3:2e:4f:c3:73:dc:33:9e:d8:c3:87:85:
                    ce:c5:4d:11:89:cb:51:75:62:32:59:0c:b2:70:6f:
                    ca:81:79:5a:d6:fc:bc:f2:77:c6:79:a1:ab:7a:6e:
                    cd:bc:be:6b:fe:dc:ac:24:72:f4:be:9f:2b:4e:79:
                    80:a8:4f:70:86:41:cb:c6:11:99:22:3c:43:06:87:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:53:A9:FE:05:4B:60:5E:DB:95:6D:CD:25:7B:70:D7:06:BB:8B:36
            X509v3 Authority Key Identifier:
                keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:fe:0e:2a:19:e6:b8:e6:8f:77:87:ae:94:0a:0e:a7:8d:b0:
         0e:ec:79:4c:ef:09:86:9f:a2:32:e3:93:16:6b:58:eb:ba:a0:
         3b:16:e3:8e:be:ca:8f:0d:83:86:5e:55:50:54:7d:85:f5:4b:
         5a:4d:5a:68:47:fe:8f:62:82:63:05:8c:52:ab:cb:2d:6b:b4:
         4c:57:0d:ce:2c:26:6e:37:28:1c:df:45:71:27:0c:36:b0:40:
         2f:e1:52:66:11:78:64:73:35:ae:fc:ee:90:2f:a1:3e:63:0f:
         72:5a:41:b2:8c:d6:de:a7:d6:04:b1:32:0b:2e:8c:7d:f1:a6:
         ec:c8:2b:3e:fb:2f:b5:7a:4f:60:7a:fa:d5:2f:5a:51:e8:1a:
         03:7b:e9:ce:b1:27:0b:1c:30:52:f5:d4:bd:cb:ab:e6:69:c1:
         d7:30:09:e0:f0:49:56:88:eb:c9:6b:1a:e4:7c:26:f7:d4:33:
         e9:13:68:fc:b2:db:bb:f7:31:5c:81:0b:46:4e:cb:01:b2:f6:
         c9:1c:ee:9f:b8:83:5b:ea:dc:ef:20:21:6f:72:41:3e:50:aa:
         64:2b:51:fe:29:41:6c:dd:77:e8:c4:6f:2f:b6:e0:48:d0:42:
         e6:7c:79:34:5d:fd:88:bc:d3:10:18:02:37:3b:8b:34:91:39:
         be:30:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:02 2026 by rpki-client