Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
File:                     -n7ee2K0e4fdE5hqjnLD_jZWtcw.mft (raw, json)
Hash identifier:          I51O5zhTgI8lhrZh5IyfmajJkBdkTUIexmX/tJlbcxc=
Subject key identifier:   2B:41:68:41:B5:7E:19:51:5A:E8:73:2C:3B:56:45:B3:04:6E:47:72
Authority key identifier: FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC
Certificate issuer:       /CN=A91E4743/serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
Manifest number:          0952
Signing time:             Mon 02 Mar 2026 01:39:55 +0000
Manifest this update:     Mon 02 Mar 2026 01:39:53 +0000
Manifest next update:     Mon 09 Mar 2026 01:39:53 +0000
Files and hashes:         1: -n7ee2K0e4fdE5hqjnLD_jZWtcw.crl (hash: Za/GeLGC5Li6tEec98Yot0F7hh5ZwxDn/TtkumXtHsI=)
                          2: ECC7CA2EF1AA11F0885E8853736F56BC.roa (hash: oWetRFPONyPjhz2G1P+9aSesJu8FRJYWjRGlV512qhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4743, serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC
        Validity
            Not Before: Mar  2 01:39:53 2026 GMT
            Not After : Mar  9 01:39:53 2026 GMT
        Subject: CN=69a4ea6b-3db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:d1:da:b5:94:34:f9:e5:1d:12:3c:04:2c:
                    55:c8:6b:ed:65:84:ce:9f:f8:3b:f9:25:9d:86:c5:
                    12:d5:59:7a:e0:75:7c:50:71:e7:c6:08:72:28:2c:
                    14:c3:64:60:f5:e4:3c:9c:b9:95:40:aa:94:45:6f:
                    d7:5b:95:4d:f3:1a:bc:72:97:47:73:38:e0:cc:4a:
                    af:b0:36:ee:83:d5:d2:4c:e3:dd:d6:c6:5a:8c:15:
                    a7:0f:8a:85:6c:66:f3:15:db:b4:66:4a:7f:95:3a:
                    e8:ef:d1:d2:60:d5:5b:ce:6a:ba:e1:e1:81:87:a4:
                    d5:8b:33:2f:d2:5b:6b:96:ed:b6:43:40:04:2b:72:
                    43:72:28:da:dd:47:1b:95:31:6d:b3:6a:03:bd:69:
                    74:d8:a5:1b:2e:6d:c5:b3:2a:90:7d:bb:2f:fe:99:
                    e6:96:cf:22:50:5a:2b:c2:c4:1c:45:db:c8:9a:57:
                    8f:f7:14:9d:74:6a:c0:14:9c:8d:9d:43:d0:2c:31:
                    ab:27:5e:95:d5:a1:c3:bf:7c:99:8f:58:4d:6a:e6:
                    62:97:11:c8:60:89:e0:5f:10:43:f0:b2:b2:1c:f5:
                    44:08:c3:15:0a:8b:59:de:43:ab:8d:d9:73:9d:62:
                    87:dd:71:2c:e3:f5:ef:c2:c9:31:0b:00:f4:bd:81:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:41:68:41:B5:7E:19:51:5A:E8:73:2C:3B:56:45:B3:04:6E:47:72
            X509v3 Authority Key Identifier:
                keyid:FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f9:a7:de:bb:ea:ef:fc:cf:25:e6:d5:4a:7c:ee:9c:ec:66:
         f7:f0:69:67:17:8f:0b:95:8f:1a:69:ab:cf:c1:78:e9:22:a3:
         5d:2a:ae:16:c4:c1:15:53:c2:ec:13:77:4a:c0:d1:fe:48:c0:
         e2:3e:a3:7a:9f:71:47:c6:ea:be:f0:7d:4d:5e:d0:d8:54:48:
         c2:03:fd:d4:bd:39:be:b9:73:68:76:df:81:8f:17:ac:58:5b:
         16:a3:66:ba:49:f0:4f:06:b2:5c:7a:91:a4:8b:a1:44:2f:e5:
         5c:e7:9b:12:42:7d:eb:96:4a:40:96:d4:40:a4:27:61:6a:dc:
         e1:b9:ee:08:58:ac:8d:aa:6e:71:2f:94:1a:ba:ef:d6:ec:0b:
         4e:fc:b8:89:a3:98:fb:6b:19:57:dd:cb:10:b1:74:00:d3:6a:
         62:b7:b3:33:cc:b2:7b:cb:4b:3d:a9:50:f7:c5:07:ae:f3:81:
         98:d3:45:cb:a8:bd:f4:0a:08:8b:49:7e:99:47:6a:9e:1d:15:
         58:7c:86:38:13:f9:ef:6d:08:1e:15:17:a4:c1:0a:98:8f:05:
         34:a3:e0:05:ad:60:4d:99:58:5b:e8:fa:b3:d2:75:02:6f:4e:
         d8:e6:91:db:36:74:0a:1b:e2:e1:f6:9a:e4:31:b0:2f:f3:a7:
         35:2d:65:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:09:23 2026 by rpki-client