Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
File:                     IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json)
Hash identifier:          zxBQZOxyW1LNM8dTJl+pxjZ5Gm1LrJkX40BNAxPCYRw=
Subject key identifier:   F7:B1:8B:7C:90:EF:55:83:68:4A:79:D6:A4:DE:35:64:30:74:D8:4D
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Certificate issuer:       /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial:       03A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
Manifest number:          0399
Signing time:             Sun 01 Mar 2026 01:37:02 +0000
Manifest this update:     Sun 01 Mar 2026 01:37:02 +0000
Manifest next update:     Sun 08 Mar 2026 01:37:02 +0000
Files and hashes:         1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: o6L28jPgCB8LtnijOdXLbU/yGUDbGDdnx3CzjnfLt+c=)
                          2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: PFX9ngxGMRis9Vcn57kZ6QiID7onGEj0xFx0QKLjFhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
        Validity
            Not Before: Mar  1 01:37:02 2026 GMT
            Not After : Mar  8 01:37:02 2026 GMT
        Subject: CN=69a3983e-f319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:6c:ff:12:7a:c2:24:c6:9b:0f:bf:cf:a1:
                    3c:25:0e:fd:a4:6f:ee:6a:67:af:ab:56:c6:9a:b9:
                    be:d0:f6:36:e4:4b:00:e9:fd:0f:ae:c2:04:b4:f6:
                    1b:b1:e7:d7:04:dc:db:6e:d6:e3:61:9b:fd:3e:b7:
                    42:07:fa:a9:6b:91:8d:d9:dc:22:1f:84:d5:0b:5f:
                    a5:42:9f:a4:d9:f1:ce:aa:2f:26:bf:01:65:95:c1:
                    64:65:c0:97:99:2d:fd:68:f6:eb:08:e6:65:61:51:
                    b3:ad:d5:86:fb:8c:d6:24:7a:ae:11:ad:54:69:fd:
                    b9:e6:ba:0e:6d:ab:ff:95:4e:50:db:02:a7:36:8b:
                    d3:82:88:32:a4:78:43:1e:9d:f7:db:2f:21:68:3b:
                    3d:41:5b:07:a9:ac:97:54:83:7d:e4:8c:1c:7a:8c:
                    b6:f2:68:05:b3:bb:e3:82:6a:c7:42:de:19:a9:c1:
                    22:68:f6:b4:02:67:46:94:68:a2:3e:f9:c8:9a:a6:
                    fc:1b:3c:49:9c:bb:46:92:2b:4c:38:8f:d3:88:7e:
                    9f:a6:8c:f3:27:f5:75:1b:12:33:9d:c6:87:ca:6a:
                    24:e5:f2:29:40:a8:0d:22:77:2c:e1:10:fd:79:11:
                    02:8a:e8:97:4c:03:bc:a7:f2:45:95:4f:33:45:6d:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B1:8B:7C:90:EF:55:83:68:4A:79:D6:A4:DE:35:64:30:74:D8:4D
            X509v3 Authority Key Identifier:
                keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:99:bb:ac:33:01:86:c7:07:c5:51:c2:8a:4f:ca:d2:30:8b:
         80:d9:18:82:e6:52:17:52:0d:8c:10:a2:30:59:0d:f8:0d:ba:
         cd:10:38:19:19:58:ee:6c:fc:8c:5c:52:9f:19:ee:c3:38:ce:
         33:25:db:5c:70:9c:41:16:39:83:c3:bb:22:37:d5:5f:6a:a3:
         c0:c7:49:bd:81:f2:5f:8b:bd:e3:6e:d3:ae:79:ca:7d:78:be:
         4f:57:0d:6b:fa:20:d1:f1:84:83:f5:0f:4b:b9:2c:0e:b6:9d:
         9b:cb:9f:bb:db:e3:cd:0c:34:47:02:2e:4c:83:9f:51:b6:ba:
         29:b1:be:89:67:cb:6b:25:a5:5f:05:b9:4e:c7:76:27:b2:c9:
         82:a8:2e:28:17:8a:5c:38:78:32:c1:ba:30:1e:ca:44:6e:ea:
         2e:9e:31:d2:9a:c4:11:d5:0d:c3:63:d9:08:e7:22:2a:3f:c0:
         2a:8c:66:02:82:0a:60:b2:ce:72:7c:3b:bd:98:df:6f:45:6a:
         5b:1f:b7:11:e9:ce:00:66:4c:dd:36:b2:b8:94:36:73:34:41:
         c1:8a:d7:ef:85:44:a5:30:b5:61:dc:e5:19:39:6c:60:60:1e:
         1f:96:66:df:85:18:e1:ab:64:d5:31:66:b3:7b:bf:04:50:4f:
         f9:e7:b9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:23 2026 by rpki-client