Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
File:                     M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json)
Hash identifier:          D2/lReiNPLWfnDNQLJrkfaj/MFo3lllvaRa5sMwceV4=
Subject key identifier:   0A:AA:AA:2C:DC:19:48:CC:98:6B:56:92:2B:CB:FD:00:8B:AE:A5:39
Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5
Certificate issuer:       /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
Manifest number:          C4
Signing time:             Mon 02 Mar 2026 01:52:17 +0000
Manifest this update:     Mon 02 Mar 2026 01:52:16 +0000
Manifest next update:     Mon 09 Mar 2026 01:52:16 +0000
Files and hashes:         1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: FRivcWXG7IeYAcK5B5bkshCT7WHVxJlBdYoY6rZTk98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl
                          rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
        Validity
            Not Before: Mar  2 01:52:16 2026 GMT
            Not After : Mar  9 01:52:16 2026 GMT
        Subject: CN=69a4ed51-7919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:0f:de:64:7f:a3:0f:74:92:09:a6:bd:80:
                    f1:ac:e2:40:36:60:38:cc:87:9d:7e:3d:ab:c9:a8:
                    3e:27:35:8b:76:3f:10:25:17:89:53:4f:63:71:d6:
                    05:1a:1c:94:e2:32:80:35:31:bb:d0:cf:36:7c:6d:
                    84:db:43:09:b5:b2:44:24:df:2a:f5:d4:64:e4:36:
                    fe:7e:c2:a9:6f:62:fb:07:2d:f3:70:eb:bc:41:d5:
                    f0:bf:0b:26:16:cb:70:48:00:66:f4:6f:f6:e1:a6:
                    14:24:30:c7:e5:f1:4d:d6:57:65:98:48:85:0c:de:
                    da:e3:6c:4d:f7:5f:2f:40:03:a4:95:4a:b3:54:47:
                    11:a4:26:32:d4:61:2b:c4:51:2d:3c:d3:44:2f:f5:
                    31:d7:6c:58:49:19:a9:c9:3b:d4:92:d4:55:dc:bc:
                    43:61:5b:a5:5f:2c:09:35:07:2a:5e:bf:05:00:7f:
                    d3:1c:50:90:20:b2:fc:91:80:ce:f4:9c:1c:ce:e6:
                    cc:99:85:b6:66:33:2c:5d:78:5d:db:5f:65:e5:82:
                    22:ab:31:c3:1b:72:1d:1d:5e:9f:a2:c1:2a:30:c7:
                    92:dd:7f:78:19:94:b0:3e:92:e5:b1:64:42:58:b4:
                    46:47:07:ed:98:dd:41:ad:7a:01:76:a4:4b:9b:69:
                    ca:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:AA:2C:DC:19:48:CC:98:6B:56:92:2B:CB:FD:00:8B:AE:A5:39
            X509v3 Authority Key Identifier:
                keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:27:8e:80:7b:17:25:3a:3b:f5:54:3b:0f:25:f8:c4:4c:b7:
         a6:77:4a:83:b1:c8:1f:48:d5:e0:24:ca:5d:19:dc:26:eb:04:
         c2:57:2a:a9:8e:eb:7d:50:9b:e9:64:c9:5b:fe:87:c1:bf:83:
         a8:6d:70:08:a2:bc:44:c6:ae:7c:81:14:f6:46:3e:6d:b9:97:
         17:8f:9e:ca:b0:3d:38:44:12:ba:9f:43:da:55:c2:27:f3:65:
         22:a8:c7:eb:c9:18:3d:4d:10:96:fd:ce:73:94:05:cc:c0:2e:
         0a:36:34:76:e7:3b:96:05:6c:ba:fe:b8:04:c9:9a:9f:b7:ec:
         32:64:29:b9:8e:f2:0b:b9:c7:54:9c:2b:a3:de:5e:df:1f:13:
         8f:c0:ff:d6:a7:0b:b0:52:a5:18:9d:55:d3:b1:e2:95:20:60:
         12:da:47:e3:7f:01:ba:0b:37:e8:6e:db:36:c8:7d:b1:0e:38:
         1f:70:93:8c:8c:b3:35:aa:83:bf:a0:d6:6b:60:ef:35:c7:59:
         a6:b6:d7:b3:e3:8a:7d:42:a7:20:81:d7:f8:4e:e5:b0:83:5e:
         ca:f0:3b:56:67:13:6f:71:20:c2:31:ca:5a:e6:3c:1f:f9:8a:
         1e:b0:67:d9:79:aa:cb:d4:30:04:1d:61:c5:7f:7f:57:47:80:
         de:87:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:51 2026 by rpki-client