Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
File:                     grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json)
Hash identifier:          SXHVXjhuMcS19wde6HC2ODNxqOBrd2ASo1dPDpPHkyY=
Subject key identifier:   57:8D:15:EA:8F:90:44:A1:0A:74:06:C1:F3:5E:9C:25:2E:AB:58:AF
Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
Certificate issuer:       /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
Manifest number:          0138
Signing time:             Sun 01 Mar 2026 06:27:19 +0000
Manifest this update:     Sun 01 Mar 2026 06:27:19 +0000
Manifest next update:     Sun 08 Mar 2026 06:27:19 +0000
Files and hashes:         1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: QrUyGd/M9Bywp7UaAE+YKYUls5hsYpcU5vbYmUSgBRY=)
                          2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: CcMzmbCEE24xcvNE3zqONcKn9u4xDYDRcCqHcVACgAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
                          rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
        Validity
            Not Before: Mar  1 06:27:19 2026 GMT
            Not After : Mar  8 06:27:19 2026 GMT
        Subject: CN=69a3dc47-b1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:51:b8:48:ac:02:5c:7f:d7:30:b4:13:b2:
                    a3:87:4b:15:1d:61:ca:3e:4b:75:b7:b5:cf:de:0a:
                    d5:12:44:36:7f:0c:b9:33:3f:0d:98:01:98:c1:f5:
                    06:2b:a9:6d:7d:bc:7b:91:b6:67:03:e2:70:23:6b:
                    37:05:8b:70:c4:23:4f:21:41:e8:c9:54:6c:c0:6e:
                    19:e2:6f:2c:ee:7e:2f:ae:2b:22:22:e6:3d:74:dc:
                    b3:ed:9d:70:ee:dc:4a:6e:cc:46:c5:42:40:80:12:
                    93:f4:a4:3a:ca:95:fb:b6:89:92:a9:5a:50:26:5b:
                    44:83:6b:28:66:f9:57:37:6b:a3:54:18:d1:aa:77:
                    20:32:5e:04:4f:83:32:06:7e:00:a9:a3:3d:f1:e5:
                    33:df:20:71:74:b0:2b:4d:a0:32:06:f5:15:36:e4:
                    9b:3b:06:0b:97:80:fb:6e:5e:f0:2f:2d:24:dd:99:
                    a5:71:25:db:a1:c4:c8:94:8d:98:84:9b:69:2a:04:
                    3f:c2:74:16:e7:1a:dd:61:73:08:0c:6d:05:11:64:
                    d1:b0:79:c0:f4:4b:91:78:b9:45:8d:ec:78:cf:f0:
                    56:99:8c:5c:11:65:26:70:17:41:d7:bf:7d:27:19:
                    1e:ff:ee:15:c1:11:3d:43:a1:f8:80:bb:08:5b:6f:
                    1a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8D:15:EA:8F:90:44:A1:0A:74:06:C1:F3:5E:9C:25:2E:AB:58:AF
            X509v3 Authority Key Identifier:
                keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:34:73:f6:79:eb:9f:d5:73:8c:67:16:9e:65:95:cd:8c:fb:
         d4:dd:77:2a:1d:45:58:34:40:5c:c5:6e:8d:14:57:6c:63:69:
         cb:23:86:4b:52:83:75:92:6b:c6:7f:82:ed:3f:31:40:34:06:
         9a:19:fd:93:17:ef:86:c7:58:c4:1a:72:3f:7d:a4:b7:7b:a9:
         8b:cb:b8:93:e8:14:e7:c3:40:74:e8:af:97:94:68:0c:8a:d5:
         78:84:b8:a7:5e:67:22:cb:46:81:84:89:21:46:e3:26:56:c3:
         33:54:92:a6:a8:ea:53:f7:03:4a:f7:75:6e:33:f8:44:79:fa:
         e7:f3:e7:a5:1c:88:27:ff:c0:6a:bb:a6:33:42:ec:9b:95:ab:
         84:80:ab:4a:74:2c:b5:f5:c0:c6:43:19:69:de:23:b8:b7:4a:
         4f:4f:ae:62:57:ea:65:e0:5d:44:f7:21:87:fc:fa:f5:70:f3:
         d8:3f:62:13:2f:97:3f:a0:94:2b:3a:cd:38:9b:fb:83:7d:4b:
         2e:a7:79:ca:cc:43:5a:54:6b:2d:19:0f:f0:04:28:ff:59:9d:
         fb:ef:81:bb:b7:d1:50:56:cd:49:e0:37:5d:a2:2b:b3:bd:40:
         f4:d3:bc:b6:5c:5e:87:53:c7:fd:3b:1d:08:2a:7b:45:e6:a5:
         eb:e5:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:55 2026 by rpki-client