Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
File:                     X1zijATRbpUODrzVlVVCSD05VtA.mft (raw, json)
Hash identifier:          5FY2TnSX//lU5yPD7GDDIXamRgNHc4lUrvqzs0oB2I8=
Subject key identifier:   CB:1B:79:2C:96:53:13:55:6B:1D:EA:45:00:CA:B0:3F:7F:FD:C5:6E
Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
Certificate issuer:       /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
Manifest number:          01C3
Signing time:             Mon 02 Mar 2026 02:05:59 +0000
Manifest this update:     Mon 02 Mar 2026 02:05:57 +0000
Manifest next update:     Mon 09 Mar 2026 02:05:57 +0000
Files and hashes:         1: X1zijATRbpUODrzVlVVCSD05VtA.crl (hash: Gq4nayhA4G8PfxRdOc+hWHd06G8OSXrYStSrAgUWuwk=)
                          2: 85BF2BE4710111F093C54468C4F9AE02.roa (hash: j9SKLInNcpVR2MVZ8Thc62Fi6/lQmCSnVrmSmxlo0RM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
                          rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0D86, serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
        Validity
            Not Before: Mar  2 02:05:57 2026 GMT
            Not After : Mar  9 02:05:57 2026 GMT
        Subject: CN=69a4f086-10ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:d3:ca:8a:69:54:db:85:c4:5a:c0:eb:64:
                    6e:0b:e0:34:90:6c:c2:d9:94:c0:0e:cf:35:71:31:
                    af:52:be:5c:5e:b1:df:6f:e5:0c:db:af:54:eb:f4:
                    ad:41:5b:61:bf:6a:31:6b:b7:46:7d:81:5c:0a:3d:
                    58:7a:66:89:63:af:eb:44:ed:4d:7b:f8:67:23:21:
                    b2:c1:36:fb:6a:5f:8a:40:1e:94:08:40:a1:1d:fd:
                    b3:1d:f7:c7:0a:d1:fa:ba:14:4c:6b:ed:aa:7b:4d:
                    a7:6f:a1:b7:aa:f4:a0:99:31:cd:c9:17:ff:d0:1e:
                    c6:c7:83:80:85:81:fa:06:da:ba:6f:65:ee:b6:e8:
                    54:dc:a2:d8:d5:b9:37:7d:ad:91:18:b2:4a:39:61:
                    e9:bd:ba:91:da:38:5d:1d:35:36:2b:36:33:5b:f8:
                    55:a6:4d:88:c9:1a:2f:80:a9:24:75:07:a2:f6:80:
                    c2:bd:81:67:b4:ab:a4:c7:05:18:28:28:87:d5:a6:
                    02:ca:2f:e8:38:e3:5f:a0:c9:2c:31:0c:c3:0a:03:
                    77:4b:3d:69:b2:a7:44:c2:7f:7b:ca:4d:81:17:cc:
                    a4:7b:40:7e:d8:d3:05:3e:fd:ed:ee:dd:08:20:9b:
                    85:7c:ff:5a:5a:9c:e7:3f:35:1f:67:c9:b3:ef:ca:
                    9c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:79:2C:96:53:13:55:6B:1D:EA:45:00:CA:B0:3F:7F:FD:C5:6E
            X509v3 Authority Key Identifier:
                keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e1:59:39:41:8f:34:03:19:dc:cb:49:8d:02:c4:b9:1f:34:
         92:f8:f4:99:43:53:08:5b:73:9f:da:47:71:6a:3a:93:83:97:
         d3:8e:7b:7f:2d:f5:cd:8d:1c:b5:9b:ce:dd:65:d1:45:76:d3:
         50:a0:cf:a5:69:80:ee:bd:7a:d9:0e:f9:47:8c:ab:b4:c7:7b:
         a4:ce:44:75:a3:c5:bd:2c:89:d8:3b:4d:1f:a4:87:a5:62:19:
         18:be:72:af:91:b6:02:e4:61:ad:45:90:1f:c6:e6:8d:96:8e:
         8c:44:25:0f:81:4b:ba:cb:5c:ff:8e:2e:da:9c:48:0f:53:02:
         4d:b4:c3:bc:b3:5b:b9:9d:e8:46:e1:18:5a:b5:e7:78:75:88:
         64:3a:12:aa:a2:bf:26:13:9a:72:05:05:e4:e3:7f:c0:e1:8a:
         b0:9f:ab:f1:3d:6e:0b:9d:7f:89:1a:9b:b9:ea:8d:cb:a3:4f:
         e5:dc:52:3e:4e:20:a5:c7:f4:e5:4a:6a:bd:4d:65:81:83:d5:
         94:94:45:36:1e:51:17:1f:84:40:82:0b:11:bd:3e:cb:f0:a7:
         6e:99:b9:3c:49:b6:e5:e6:b2:e3:a6:c0:3f:46:ba:16:30:92:
         ec:91:ee:5c:d0:4b:de:be:56:f1:ce:9f:db:53:c8:2f:a1:20:
         09:0c:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:18 2026 by rpki-client