Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
File:                     4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json)
Hash identifier:          stezWTbIGN6U9uXiy/jtpKb9i1joXHE0RY3zD2+TvYU=
Subject key identifier:   E3:78:7B:A8:E9:D9:33:A0:A2:F3:19:06:6D:2E:4F:AE:32:76:77:85
Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72
Certificate issuer:       /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
Manifest number:          0118
Signing time:             Sun 01 Mar 2026 06:57:31 +0000
Manifest this update:     Sun 01 Mar 2026 06:57:31 +0000
Manifest next update:     Sun 08 Mar 2026 06:57:31 +0000
Files and hashes:         1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: nhncQbrwin5N/5p0RAeNxjPR4qo1MfpEtAcLYhZaqkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl
                          rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272
        Validity
            Not Before: Mar  1 06:57:31 2026 GMT
            Not After : Mar  8 06:57:31 2026 GMT
        Subject: CN=69a3e35b-fd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:e4:7c:53:cd:66:6e:92:a3:21:fd:c7:e1:
                    68:3f:2c:dd:41:7d:74:35:e3:21:fb:79:ca:54:59:
                    78:74:80:39:1f:ad:9f:6e:a8:c1:41:33:42:d4:bc:
                    0b:64:41:45:10:7b:a7:64:1a:99:01:ab:d2:b0:64:
                    1f:63:68:c7:dd:1c:80:cf:71:ad:59:01:2e:93:78:
                    3f:2b:d1:f9:f3:eb:93:64:be:34:31:d1:f3:43:6b:
                    7f:96:0e:e4:cf:36:c3:13:a5:76:09:aa:ba:2b:c8:
                    2a:3f:99:95:f0:71:14:78:01:1f:a2:10:8d:04:57:
                    aa:10:65:48:c3:30:55:5f:cd:8a:c4:07:8b:ae:2f:
                    7a:d1:47:82:6a:66:44:e6:29:d9:be:71:60:eb:0a:
                    89:78:7e:f3:66:82:0a:c6:bf:65:f3:80:a3:6b:70:
                    d1:a2:79:ac:3b:eb:a0:66:a8:9a:da:e0:a0:06:e3:
                    ba:33:a9:17:0c:fc:7f:a8:0d:df:be:6a:88:79:6d:
                    f2:ea:90:0f:f3:67:d2:58:02:6b:8b:a5:4a:40:4e:
                    e5:b9:76:2b:9f:bc:50:3f:a0:67:2b:f5:6b:fa:a8:
                    98:21:03:e4:f0:ac:e4:17:fa:02:44:cd:26:c7:c5:
                    d7:cb:df:5a:58:1c:fe:fd:9f:3f:1f:98:ef:f7:08:
                    32:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:78:7B:A8:E9:D9:33:A0:A2:F3:19:06:6D:2E:4F:AE:32:76:77:85
            X509v3 Authority Key Identifier:
                keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:51:00:f1:a7:a0:50:ef:af:73:c8:ed:50:4b:2f:65:10:ca:
         2f:02:75:7b:8e:01:2f:76:df:f1:04:5f:8a:53:9c:44:4f:6f:
         68:d0:1f:e3:c9:e5:ac:4c:65:38:c6:9c:f1:a5:39:87:56:57:
         f6:5c:5c:42:89:b1:c4:13:bc:c8:63:81:7a:58:34:7d:f6:03:
         9e:f5:e1:78:b4:5e:84:e0:8e:ff:d9:11:d0:46:de:97:15:0d:
         54:84:7c:c0:fa:b3:f5:e4:43:1c:5f:9b:99:e3:bb:c3:c2:74:
         15:cb:af:c8:6a:ff:47:83:c5:a5:0a:e2:bd:f6:a1:07:22:3f:
         44:40:ed:8f:63:c7:32:ab:01:62:d3:bb:61:80:d6:1a:04:39:
         ad:39:25:56:18:4f:d1:5d:e6:18:55:37:af:c7:50:80:70:da:
         32:57:7d:aa:ae:31:44:11:ca:b9:56:49:e9:9a:fc:c2:ed:e2:
         01:b5:61:7c:2b:02:0c:0d:74:ec:96:2a:46:79:6f:47:a6:24:
         58:a4:fc:d7:7e:da:7c:d4:93:22:eb:6c:77:32:b6:67:3e:5b:
         ba:e7:5c:45:8c:21:d3:44:b8:02:e1:03:89:7f:f2:b0:b9:ea:
         3b:c6:16:a4:87:4e:f2:9d:25:e5:61:1e:d1:02:f9:3e:9e:45:
         9d:c6:39:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU5MkYxMTAvBgNVBAUTKEUxRDc4MzdFQkNDN0E5QTREMTc1MTY1Nzg2MDQ3NjNB
MkJEMDQyNzIwHhcNMjYwMzAxMDY1NzMxWhcNMjYwMzA4MDY1NzMxWjAYMRYwFAYD
VQQDEw02OWEzZTM1Yi1mZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZjkfFPNZm6SoyH9x+FoPyzdQX10NeMh+3nKVFl4dIA5H62fbqjBQTNC1LwL
ZEFFEHunZBqZAavSsGQfY2jH3RyAz3GtWQEuk3g/K9H58+uTZL40MdHzQ2t/lg7k
zzbDE6V2Caq6K8gqP5mV8HEUeAEfohCNBFeqEGVIwzBVX82KxAeLri960UeCamZE
5inZvnFg6wqJeH7zZoIKxr9l84Cja3DRonmsO+ugZqia2uCgBuO6M6kXDPx/qA3f
vmqIeW3y6pAP82fSWAJri6VKQE7luXYrn7xQP6BnK/Vr+qiYIQPk8KzkF/oCRM0m
x8XXy99aWBz+/Z8/H5jv9wgyMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFON4e6jp
2TOgovMZBm0uT64ydneFMB8GA1UdIwQYMBaAFOHXg368x6mk0XUWV4YEdjor0EJy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xQjI5MEI1RTc0
MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFhVFJkUlpYaGdSMk9pdlFR
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRkZURmcnpIcWFUUmRSWlhoZ1IyT2l2UVFuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTkyRi8xQjI5MEI1RTc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFh
VFJkUlpYaGdSMk9pdlFRbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwVEA8aegUO+vc8jtUEsvZRDKLwJ1e44BL3bf8QRfilOcRE9vaNAf48nlrExl
OMac8aU5h1ZX9lxcQomxxBO8yGOBelg0ffYDnvXheLRehOCO/9kR0EbelxUNVIR8
wPqz9eRDHF+bmeO7w8J0FcuvyGr/R4PFpQrivfahByI/REDtj2PHMqsBYtO7YYDW
GgQ5rTklVhhP0V3mGFU3r8dQgHDaMld9qq4xRBHKuVZJ6Zr8wu3iAbVhfCsCDA10
7JYqRnlvR6YkWKT8137afNSTIutsdzK2Zz5buudcRYwh00S4AuEDiX/ysLnqO8YW
pIdO8p0l5WEe0QL5Pp5FncY5Cw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:46 2026 by rpki-client