Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
File:                     _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json)
Hash identifier:          Teb6RtKWvLX15m4aJqI/azIsylYz7hTLbF4u6XZ8vRM=
Subject key identifier:   F9:DC:B9:F7:FD:A4:5E:C5:37:23:E1:FA:2E:DF:F4:84:03:64:FF:2A
Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
Certificate issuer:       /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Certificate serial:       0A90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
Manifest number:          0A69
Signing time:             Sat 28 Feb 2026 19:52:54 +0000
Manifest this update:     Sat 28 Feb 2026 19:52:54 +0000
Manifest next update:     Sat 07 Mar 2026 19:52:54 +0000
Files and hashes:         1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: b5n71IW3sAXl2oK15D7VSWRObqlE+ASdDXBHPzmxX28=)
                          2: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: PEGA4OC8mv05BIyz+nUXG4RC+NNc/DMmZ+NwYP8Ecm0=)
                          3: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: K3Jiwqbs2s6HeOThkch0vOjp6h9iTL9bb147FzB60BU=)
                          4: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: KV+MftwNraCF0gkNRAqYBvwtZwLwc4d8fM/ROUiYBrw=)
                          5: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: 8+KPASZ/M50Dm6KRLst04BpGO2ukj2WfRt4KxgVGboU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
                          rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2704 (0xa90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
        Validity
            Not Before: Feb 28 19:52:54 2026 GMT
            Not After : Mar  7 19:52:54 2026 GMT
        Subject: CN=69a34796-5117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:a4:cf:25:ab:b8:5a:15:6c:c1:4a:57:cc:
                    88:94:18:ed:c7:53:bb:24:0a:16:47:75:86:df:aa:
                    9e:5e:cb:34:be:fe:4e:57:19:36:6d:5d:6a:a1:98:
                    41:f2:e4:f2:8a:5e:b7:e4:0e:5d:ed:de:41:76:95:
                    74:e8:17:11:17:d3:b5:87:ae:86:03:24:e0:57:56:
                    f1:d6:07:45:55:bc:4d:b0:6a:52:1c:9c:39:6d:0f:
                    76:89:38:61:65:62:89:4f:2e:3e:f9:d9:8d:46:da:
                    5b:9e:66:a2:d9:37:77:94:55:16:0d:78:b2:24:44:
                    68:a5:80:8a:ac:22:a7:72:e5:f7:75:04:0a:dc:f3:
                    ae:a1:42:02:92:84:5e:08:6a:57:76:61:64:5b:73:
                    94:ca:62:02:e0:00:e5:c2:6a:9d:a2:03:a5:00:84:
                    19:8c:0c:2f:d0:c8:83:23:f3:50:7f:ab:89:6b:2c:
                    80:bf:c7:eb:ef:c7:07:46:e3:b9:c3:2c:c6:13:d2:
                    49:31:dc:8a:f3:83:36:11:67:6d:d0:fc:5e:ac:77:
                    fe:56:37:ef:e1:3a:e6:f9:da:99:1e:93:e3:8e:c1:
                    25:b9:6d:f9:8a:22:7f:cf:d9:cc:d0:0c:d3:5d:2f:
                    3d:4d:5a:9f:fe:82:6f:61:30:12:6d:25:3d:21:c3:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DC:B9:F7:FD:A4:5E:C5:37:23:E1:FA:2E:DF:F4:84:03:64:FF:2A
            X509v3 Authority Key Identifier:
                keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fe:20:4e:e2:40:27:58:80:b6:97:a7:55:63:92:20:cb:0c:
         4b:d3:64:d7:c8:f0:34:4e:42:c3:5d:1a:02:73:9f:db:a3:fb:
         78:4d:47:c7:af:61:b9:89:c8:cf:ab:99:57:8d:4c:06:77:4e:
         1e:63:6b:10:e2:9d:0f:1f:90:c9:b0:7b:f5:8a:77:f6:bb:93:
         17:ef:2b:71:91:8d:75:68:3d:c9:ff:1e:0d:00:8a:6b:08:25:
         16:85:27:53:c2:11:52:cf:58:e8:04:87:a2:2f:cb:64:6d:8f:
         e1:00:68:5b:50:db:63:d0:bb:bb:da:68:c6:64:07:a9:a7:0d:
         1e:64:1c:00:9d:1e:5e:c9:27:df:e3:30:27:3c:7c:37:ec:80:
         9c:0d:7e:cd:25:c1:5a:f8:ca:b4:cf:ab:59:de:fc:0c:27:e6:
         cf:7d:be:cd:fc:9a:9e:ba:3c:f4:3b:6e:2b:06:f4:51:d1:67:
         69:5d:5c:38:64:0d:82:34:cb:68:bd:6c:5d:3f:b2:7f:a1:be:
         f4:b6:51:ee:9c:01:8b:b0:77:cc:29:3b:11:b6:e3:e2:01:c2:
         5c:e5:77:1b:50:d4:40:cb:ab:05:67:8a:2e:46:5f:58:6b:a9:
         27:9a:e3:c4:22:3f:11:96:f9:7a:a2:fc:8c:d6:cf:a2:d6:25:
         a2:c9:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:15 2026 by rpki-client