Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
File:                     7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json)
Hash identifier:          z1yDiSPK/eakHxDs9zVC8Uh3mGnLCTNJwN6dzJzT40Q=
Subject key identifier:   E6:67:37:F4:36:B0:AC:10:41:40:18:05:9D:40:C0:B1:99:46:C8:C6
Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
Certificate issuer:       /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D
Certificate serial:       0C44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
Manifest number:          0C3D
Signing time:             Sat 28 Feb 2026 18:56:23 +0000
Manifest this update:     Sat 28 Feb 2026 18:56:23 +0000
Manifest next update:     Sat 07 Mar 2026 18:56:23 +0000
Files and hashes:         1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: GVbdIcuqnv5HpSTxLlUAMj+iqG9WjdCi/yxk4fMdSYQ=)
                          2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: 8GDf3I9852qXD+b3ayI/msO5LQ8MTGT66pzFOsliyto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3140 (0xc44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3CA, serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D
        Validity
            Not Before: Feb 28 18:56:23 2026 GMT
            Not After : Mar  7 18:56:23 2026 GMT
        Subject: CN=69a33a57-5c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:57:d6:f1:aa:bc:54:21:e5:66:35:40:32:
                    b4:33:9e:c3:51:e8:f0:29:51:7a:f0:b8:7f:55:12:
                    59:e2:50:12:30:1e:d6:8f:cc:f6:f0:03:5d:6e:3e:
                    36:2c:28:9a:ac:69:6f:9b:3f:18:58:85:8a:fa:74:
                    19:fb:c2:63:6d:24:a2:e9:60:21:dc:78:12:e4:8e:
                    d7:57:1b:9e:37:73:a6:e0:4a:91:09:71:4b:e8:14:
                    6a:bc:e4:07:20:35:cf:c2:07:d0:3f:b5:67:24:a6:
                    b8:0d:4a:60:e6:a0:61:48:6c:46:32:34:91:67:87:
                    a4:cb:17:17:f6:a8:f1:ea:52:03:ac:3f:88:5c:3f:
                    fe:1f:34:d2:fe:ec:20:12:a6:15:08:6f:7e:6f:12:
                    27:75:d1:43:d9:bb:07:6b:5a:42:30:7d:68:7a:9c:
                    c7:ea:c7:23:97:b5:57:a0:84:85:80:2a:05:8d:de:
                    1d:17:c6:67:f9:2b:b9:57:62:bc:d9:b8:00:6d:9d:
                    6c:3a:5a:48:d4:63:62:11:15:d6:9a:3e:72:57:8c:
                    af:e4:a3:6e:f5:e3:c1:fd:79:6d:2f:ee:3b:36:2a:
                    69:4f:66:33:df:f2:87:18:e1:56:ff:51:e4:08:61:
                    bb:45:dc:15:9c:79:b7:df:5b:71:39:29:8c:e4:41:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:67:37:F4:36:B0:AC:10:41:40:18:05:9D:40:C0:B1:99:46:C8:C6
            X509v3 Authority Key Identifier:
                keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:db:66:7a:90:d1:6a:47:f6:ff:9f:fa:6a:26:d6:34:13:93:
         88:3d:1c:f7:22:bc:70:80:c4:af:1e:37:77:c6:3a:94:a5:ec:
         d0:b1:fe:59:cc:8c:93:62:c7:9a:ac:34:8f:b1:60:6d:37:e0:
         04:71:a9:34:dd:3e:7d:11:3d:b5:0b:b5:ba:bc:2c:5a:58:3b:
         98:18:dc:75:10:c8:d8:ad:9c:ef:f7:89:b5:3b:43:c1:3c:8f:
         cd:a7:f6:76:a1:3e:a9:08:f9:c2:76:c9:87:73:9f:d6:71:05:
         7d:67:8d:dc:fb:67:bc:64:b9:77:ab:81:f2:0e:d1:6f:6b:78:
         84:c7:2b:af:96:bc:14:a7:36:09:26:f3:c5:b1:aa:6b:be:76:
         67:b7:34:c8:eb:20:7e:7a:9c:5e:a6:c8:14:be:32:9b:a4:0a:
         8c:69:a8:ba:a6:f9:f5:5f:25:22:e5:66:29:33:9d:04:24:20:
         d7:5c:5d:3b:dd:2b:77:86:94:8e:d5:89:bd:77:4c:72:80:de:
         d0:57:f1:cd:aa:fc:83:f5:a8:94:cb:01:d7:cc:ba:fb:b4:e2:
         18:41:b3:25:41:e9:ee:56:8c:ae:08:7c:c0:f5:3f:df:0b:aa:
         ca:95:4a:bb:cf:c2:d2:1b:8c:8a:ee:06:18:76:df:cc:44:1b:
         dc:a7:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:45 2026 by rpki-client