Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
File:                     9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json)
Hash identifier:          gjwQNSaR8zDPOsCAbKyoKbSau6qibjeIG1sqqw+J0s0=
Subject key identifier:   F3:32:12:48:82:47:69:21:E2:B6:99:9D:B0:D2:13:AA:D5:43:DB:84
Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
Certificate issuer:       /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
Manifest number:          01CC
Signing time:             Sun 01 Mar 2026 04:25:33 +0000
Manifest this update:     Sun 01 Mar 2026 04:25:33 +0000
Manifest next update:     Sun 08 Mar 2026 04:25:33 +0000
Files and hashes:         1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: rdt174IwN9rYv3kJzpFVaJX8W756OQHSejJd0Bux3Cs=)
                          2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: vLaYuuYnarn+LGPGR9ZLrnHgOaNMvO/0VgOiG0azlng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
                          rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
        Validity
            Not Before: Mar  1 04:25:33 2026 GMT
            Not After : Mar  8 04:25:33 2026 GMT
        Subject: CN=69a3bfbd-78ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:5d:f8:2b:87:37:63:ac:54:75:01:9b:9c:
                    3a:7e:97:2b:04:c0:61:9f:a0:ff:f8:a7:97:7a:98:
                    bb:81:ce:f5:06:22:da:5a:ed:86:0d:4b:5d:5b:04:
                    8c:ba:8b:d3:79:5b:3f:35:db:bb:b3:5e:7d:58:bc:
                    b6:06:3f:c6:5b:46:dd:3a:6f:54:5b:2c:ac:a1:66:
                    41:04:da:7e:6d:6e:ff:fe:61:74:77:cb:ec:11:17:
                    3f:36:b8:04:0d:db:0b:de:ec:cf:e9:bd:89:39:c3:
                    ac:6d:7c:e7:84:83:9a:43:a7:8a:dc:b7:4b:05:63:
                    15:d7:a6:be:94:a6:0a:5c:97:24:45:30:cd:b8:57:
                    e6:8a:49:25:4d:e2:02:c1:b1:15:85:ea:1c:67:92:
                    fc:2e:1a:73:f1:8e:62:40:eb:75:a6:b5:72:30:f4:
                    99:36:74:76:91:39:41:25:58:6e:b8:f1:90:76:af:
                    13:1a:33:87:c1:ed:10:57:cf:51:80:9d:cc:2f:79:
                    21:0d:4e:f4:48:b4:af:52:7c:10:71:f1:6b:57:d8:
                    80:6c:3d:62:96:ef:37:9e:86:e8:ba:b8:af:76:a1:
                    a1:eb:21:8e:aa:e1:b8:26:49:56:7d:cd:b9:ab:61:
                    e3:79:20:58:f2:f9:96:00:be:41:ad:74:61:ac:bb:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:32:12:48:82:47:69:21:E2:B6:99:9D:B0:D2:13:AA:D5:43:DB:84
            X509v3 Authority Key Identifier:
                keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:b2:78:49:8d:c2:b7:88:a1:e6:a2:8a:60:85:ce:9a:f6:
         29:30:6e:f7:30:e0:3c:94:56:d5:01:18:89:52:d4:71:13:6a:
         77:cf:5b:0a:f9:87:35:6e:00:b9:3c:36:1c:b5:ee:88:d7:d3:
         cb:02:86:04:ea:60:70:4d:dc:7b:a9:62:ac:1d:fe:88:b6:10:
         f5:da:19:22:6a:e2:82:57:0a:eb:b5:51:99:61:da:61:22:b2:
         60:1e:d4:71:12:02:48:90:04:1d:a5:2e:3b:31:c1:9e:7f:59:
         fa:8a:e1:62:bd:03:36:80:d7:ad:de:46:5c:2f:52:13:c4:e7:
         0a:05:04:e2:28:09:6d:7a:17:3c:7d:29:87:b2:3b:c7:5e:21:
         4f:b9:d3:80:da:4d:75:d2:6c:9d:f1:b3:24:75:47:57:47:dc:
         23:44:32:9e:6b:35:32:c7:8f:26:c2:ae:13:92:3f:b5:03:4e:
         33:df:66:07:4c:2c:ad:ff:26:e4:bc:7e:47:bd:7a:51:55:18:
         be:c6:03:93:7a:e4:0c:b1:9f:2c:31:32:23:03:25:9a:65:5a:
         31:5e:7c:f4:89:a9:5d:40:0f:7b:f0:08:43:7f:5d:70:dd:2e:
         f3:df:f5:0d:fb:5f:09:d2:88:4a:b0:51:b3:78:8f:0b:c7:a6:
         3a:f3:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:46 2026 by rpki-client