Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft
File:                     eT80tql6t1A1WBv90ICDiTOrPwM.mft (raw, json)
Hash identifier:          DGB1SGfEVnmp2/1gCaW410UdfVrie7dOghD7shKc8WY=
Subject key identifier:   9F:D2:45:65:7F:F2:52:B1:4D:38:F6:8D:C9:69:9A:AD:F7:26:70:87
Authority key identifier: 79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03
Certificate issuer:       /CN=A91EB9FC/serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft
Manifest number:          0127
Signing time:             Sun 01 Mar 2026 06:39:09 +0000
Manifest this update:     Sun 01 Mar 2026 06:39:09 +0000
Manifest next update:     Sun 08 Mar 2026 06:39:09 +0000
Files and hashes:         1: eT80tql6t1A1WBv90ICDiTOrPwM.crl (hash: XTbBgNgUKjbZM3WeDmMI7jIdgKVRJJ2zocF8V4yq91A=)
                          2: 20E7CCE2595D11EF90E23670C4F9AE02.roa (hash: u2oQCfujekc2CkfkL8oYEg3qrwIogCmjgXuusuY8hmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.crl
                          rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB9FC, serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03
        Validity
            Not Before: Mar  1 06:39:09 2026 GMT
            Not After : Mar  8 06:39:09 2026 GMT
        Subject: CN=69a3df0d-fdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:a9:da:ba:6a:3b:c8:fb:c9:89:c1:b5:f4:
                    41:54:73:27:29:f2:3d:5a:cd:a8:0b:8c:8c:38:64:
                    e9:da:ae:7f:6a:c2:88:21:43:73:5d:35:7e:a7:d7:
                    7d:5a:64:e5:66:b8:2f:38:94:3e:ec:1e:4a:34:5a:
                    2e:4d:ce:ab:83:fa:36:84:20:5d:ba:46:d1:ff:ae:
                    0d:2c:20:72:d9:5f:22:5a:ce:82:77:d2:ca:67:59:
                    3b:30:c8:89:58:bc:0d:34:18:41:06:65:e2:3b:5e:
                    79:4a:cb:41:dd:19:1c:9b:3e:db:50:0e:1d:b8:d4:
                    8f:35:9f:83:4b:d1:dd:3e:78:2a:07:91:96:7c:e0:
                    11:82:85:bf:f6:41:92:79:b8:fe:22:17:0b:3d:65:
                    42:d1:3c:b1:91:82:5f:14:41:85:02:fb:9d:80:b2:
                    ed:5f:e0:9c:7a:1b:b0:5a:31:01:ed:20:ae:e9:39:
                    ee:23:f3:68:01:61:ed:55:b2:59:6e:26:f4:7d:3c:
                    28:5b:6e:13:1c:7b:99:d2:59:9f:32:c4:1f:6f:d3:
                    f9:47:91:4b:ea:eb:08:9f:46:d3:dd:fb:53:76:55:
                    12:27:7f:d3:75:f3:06:ef:ab:c1:3c:0b:4d:df:9e:
                    ec:08:61:f7:90:31:7d:c7:02:ae:43:bd:27:fc:18:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D2:45:65:7F:F2:52:B1:4D:38:F6:8D:C9:69:9A:AD:F7:26:70:87
            X509v3 Authority Key Identifier:
                keyid:79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:43:98:9d:36:5f:6f:8b:39:d5:6f:d4:5c:7d:6b:6c:cb:ba:
         2f:44:56:a4:db:02:ff:eb:cf:a6:ae:8c:a4:52:f8:37:67:32:
         7c:66:ff:5e:3b:42:c9:bc:6c:95:5e:14:e3:c6:4a:83:11:e2:
         be:73:ec:0a:15:16:24:d2:32:b1:ce:74:0c:d4:fe:43:6f:ac:
         cb:2c:eb:52:d8:3e:b9:68:80:37:3e:7a:61:67:d2:08:77:16:
         5a:4f:7f:ee:21:cb:2c:17:0f:a6:42:89:fb:87:dc:11:7a:82:
         c8:0c:4f:f8:5f:49:36:9a:38:08:31:2b:78:04:8c:ba:71:c2:
         a2:2f:4c:0e:7f:21:cb:a5:3d:03:9e:33:ca:04:f7:ca:4c:a6:
         0c:53:88:13:4f:91:14:79:d9:c9:c3:30:7b:63:d5:a2:59:1b:
         bc:a1:b0:ce:01:28:8d:e0:c6:7b:b4:3a:4d:f1:4a:0a:5b:92:
         b5:97:5e:30:1d:b1:eb:24:e8:0c:54:4d:b5:0c:89:ab:75:2c:
         97:b2:e3:0c:17:80:d8:06:45:83:fa:91:77:5a:3d:eb:f0:e4:
         5b:2d:30:4c:de:2f:1e:b5:7d:44:73:23:b3:fc:5f:ff:06:78:
         fb:c6:21:cf:bc:e4:9c:a2:3d:e8:7e:57:d9:5b:e3:dd:ad:88:
         03:86:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:14 2026 by rpki-client