Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
File:                     8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json)
Hash identifier:          tgKJcG8Z/SGqjOmvN/syJIpgku0CSNNW6DGC3njLyKw=
Subject key identifier:   85:B4:3E:8B:32:8E:4C:2B:28:B1:C5:92:61:70:C3:1D:F5:72:9D:66
Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83
Certificate issuer:       /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
Manifest number:          01EA
Signing time:             Sun 01 Mar 2026 04:04:03 +0000
Manifest this update:     Sun 01 Mar 2026 04:04:03 +0000
Manifest next update:     Sun 08 Mar 2026 04:04:03 +0000
Files and hashes:         1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: tqEXUbA5/Elpr5us0VRlTeADogX9znDy5D3COeJbSdc=)
                          2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: JUSU1VmCrt2YGTrN+Q0jV8oiBs7Aumf+6ve9iuHLrvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl
                          rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483
        Validity
            Not Before: Mar  1 04:04:03 2026 GMT
            Not After : Mar  8 04:04:03 2026 GMT
        Subject: CN=69a3bab3-3563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2e:cd:b2:99:fa:a5:b8:ca:1b:79:db:20:ca:
                    64:80:80:96:c8:c4:b4:7e:16:9e:f7:c5:e2:98:e8:
                    2a:d6:b9:ad:76:a0:a8:aa:65:9e:e9:78:08:b6:1a:
                    6b:8c:de:9d:3d:d8:a0:1c:7d:ed:24:9c:ac:46:42:
                    8a:0c:7c:1e:22:b0:81:d0:05:c9:70:a6:c2:67:d9:
                    6c:b0:a9:50:4a:e9:c2:df:77:5b:93:fc:48:e2:d2:
                    15:0d:a1:5d:78:1c:ea:de:0e:bf:66:48:5a:8c:5c:
                    b0:5f:a3:27:1e:a5:f6:8f:59:20:44:22:5d:72:a4:
                    33:36:1b:98:3b:e0:0f:4a:c6:14:97:78:72:8a:a2:
                    7d:7c:b1:81:b2:15:38:84:3f:5e:dd:8b:64:fd:d7:
                    6f:2d:69:24:d4:1e:09:7e:22:79:a0:67:9d:f0:c8:
                    24:25:39:0f:76:1b:0a:79:5f:ac:19:63:d1:7c:dd:
                    59:f8:9a:7c:21:3e:38:28:ff:16:29:da:b0:21:0a:
                    66:e5:d2:ca:cf:67:c4:06:f2:99:5a:8d:b8:a6:68:
                    94:c2:26:9c:91:34:80:cf:f8:b8:5b:06:5a:12:4c:
                    13:8f:cb:b5:8e:f0:4d:36:0d:84:9e:13:55:7b:67:
                    84:56:ca:b4:9b:2c:05:9e:00:1c:b5:07:4f:41:0a:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B4:3E:8B:32:8E:4C:2B:28:B1:C5:92:61:70:C3:1D:F5:72:9D:66
            X509v3 Authority Key Identifier:
                keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:52:6c:b9:b2:dd:93:74:1e:de:de:84:52:be:c9:39:cb:0a:
         4c:8b:c2:a1:76:15:db:94:24:2e:c8:8a:ac:34:98:29:38:1f:
         f2:1b:30:7e:da:0a:a6:70:59:cf:f1:a4:c2:72:6a:ec:82:17:
         bc:62:77:af:91:9a:69:63:0e:a8:cd:76:2f:be:5a:49:60:ac:
         c9:0e:17:42:6e:2e:8f:d3:2f:b6:24:bb:c0:5c:e6:aa:83:42:
         3c:3a:64:ce:6c:b5:dc:fb:13:87:81:0f:7e:4e:6e:7f:34:48:
         8c:59:fc:4c:20:8d:fc:21:d7:69:53:fc:08:98:aa:08:15:b8:
         b7:bd:c5:ef:4a:2d:f3:5d:39:0d:ca:90:ef:0c:c0:e5:d7:a0:
         69:9c:36:3f:bf:7d:27:ef:73:c1:15:13:b2:7a:90:a9:5a:f6:
         bb:59:3a:73:a2:30:03:3f:7d:6b:03:2e:6f:a2:0f:95:85:81:
         2f:b8:09:2d:c5:ae:dc:04:a1:d7:6b:db:8f:43:33:65:15:2c:
         f1:a1:c2:f6:52:df:0c:0f:7d:9f:31:e6:f6:76:7b:f4:4d:e1:
         4e:b9:1a:9a:3a:86:56:6e:ae:01:c6:07:8c:8b:a6:8c:6d:11:
         cc:a3:d6:c1:1c:23:0d:50:62:5b:b4:ba:05:32:e9:1a:db:ee:
         3d:7d:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:32 2026 by rpki-client