Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
File:                     XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json)
Hash identifier:          JV4CwJHNS+EsZoIUXGKr/xS4uHS+dFMvDFR1Xg8PnOk=
Subject key identifier:   8C:55:8E:81:99:CC:0D:0B:66:85:7F:27:E2:41:EB:54:AE:8E:D9:4F
Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
Certificate issuer:       /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Certificate serial:       0599
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
Manifest number:          0599
Signing time:             Mon 02 Mar 2026 00:31:43 +0000
Manifest this update:     Mon 02 Mar 2026 00:31:41 +0000
Manifest next update:     Mon 09 Mar 2026 00:31:41 +0000
Files and hashes:         1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: 4yet13CsH9/Yc5pwTMTWsQL8golK6crpdibAopYWTk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433 (0x599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD89, serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
        Validity
            Not Before: Mar  2 00:31:41 2026 GMT
            Not After : Mar  9 00:31:41 2026 GMT
        Subject: CN=69a4da6f-4f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:f4:5f:f8:42:fc:a1:37:63:e5:44:28:17:
                    48:b1:19:61:ca:3c:68:6e:ef:75:ff:34:3f:4d:b3:
                    d5:95:ab:10:2c:33:6a:a1:95:df:33:12:a6:2d:ca:
                    2b:2f:1f:a4:3e:51:7a:ed:64:58:7f:26:73:62:ea:
                    06:31:36:c5:f9:fc:87:0e:9f:79:8a:5a:30:ee:29:
                    dc:9c:b1:ca:45:14:12:9f:dc:42:33:16:08:b8:c3:
                    ce:7f:73:aa:09:bb:e3:77:92:58:e0:94:91:03:22:
                    05:ce:05:3b:6d:8d:9e:41:8d:00:90:7f:52:80:0a:
                    9e:a2:4a:69:9a:0d:ae:39:bc:71:e6:bf:64:87:9a:
                    55:82:87:fa:8f:b8:0a:66:14:0f:38:0b:58:0e:19:
                    09:53:01:4f:e1:52:0b:13:79:9f:99:84:3b:99:67:
                    9f:ff:b1:70:57:92:82:fc:c5:0d:70:19:9f:35:41:
                    b9:53:2f:0e:33:3b:f0:2d:93:8c:fe:9e:20:8e:c6:
                    ed:6d:28:8a:8b:6e:98:32:c7:c1:0c:ce:42:3b:a8:
                    69:9a:34:bf:2a:e6:2b:90:bd:f4:c6:e5:ad:50:8d:
                    05:2e:ac:e6:1d:0e:52:3c:67:74:a8:34:87:cb:15:
                    2f:09:54:f3:dd:95:21:15:4f:8b:d2:8e:a4:e7:c6:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:55:8E:81:99:CC:0D:0B:66:85:7F:27:E2:41:EB:54:AE:8E:D9:4F
            X509v3 Authority Key Identifier:
                keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:44:0c:5c:1f:95:e6:48:dc:6f:b1:34:ae:87:4f:9d:28:1e:
         e8:e4:49:e5:89:5c:ab:f7:f3:7e:a1:d0:54:e8:81:d5:04:e4:
         42:04:e2:9c:a3:ff:88:b8:22:ac:f7:6a:6b:b2:5b:30:1e:3c:
         b4:b7:47:f9:33:3d:73:b6:ad:ed:d4:07:b3:03:2c:1f:f5:c8:
         61:53:de:d4:45:a0:e6:1e:b9:08:0a:b1:98:49:b7:10:c5:09:
         d6:4d:a8:39:db:d8:d3:5f:9f:df:71:d2:d2:13:a5:9d:b1:af:
         21:d9:31:ed:eb:30:20:6f:a2:17:56:f8:6d:8d:de:7c:d4:b6:
         e5:c1:8e:67:b1:15:8c:8c:c9:49:7b:c5:5f:85:ce:72:a6:ab:
         9b:da:45:17:ad:ea:a0:a7:fb:8a:34:41:2e:7b:16:aa:5a:a5:
         d1:56:46:43:ac:e9:85:88:a7:ae:db:32:07:1c:8f:17:fa:14:
         aa:6d:5d:b1:bd:63:48:3e:9d:2d:d4:5f:d2:58:3d:a6:fc:47:
         a4:30:9f:b7:4e:8c:ea:f7:68:a5:58:6b:a9:3b:16:ff:6f:d7:
         1d:6e:e3:ec:ae:a4:7b:30:46:37:cd:c7:2c:a6:d7:03:83:25:
         95:29:18:2c:b7:a5:b6:8a:08:35:b2:e9:4d:e2:a5:1f:cc:d9:
         0a:91:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:26 2026 by rpki-client