Manifest

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
File:                     C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json)
Hash identifier:          RqaYRtKooze85A6z6WDzIprUqQ4OHQ4fyQvjv8HAAqI=
Subject key identifier:   26:01:27:95:E6:8B:77:13:6C:76:BA:47:69:7B:BB:80:93:9E:FD:81
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Certificate issuer:       /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial:       321698CAA0C66ACBD9D36B1C01B5DAF7A4429256
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
Manifest number:          0840
Signing time:             Mon 02 Mar 2026 00:00:01 +0000
Manifest this update:     Sun 01 Mar 2026 23:55:01 +0000
Manifest next update:     Tue 03 Mar 2026 00:59:01 +0000
Files and hashes:         1: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: 5aJsFTN5WVk2jtdVogk5NRRrHpQ+Tk7PnLOl1z1Mgek=)
                          2: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=)
                          3: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=)
                          4: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=)
                          5: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=)
                          6: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=)
                          7: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: nFZaUBwOUfoVPATlNk3ap16Eq0qCE4edWxVeq94Eur8=)
Validation:               OK
Signature path:           rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
                          rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 00:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:16:98:ca:a0:c6:6a:cb:d9:d3:6b:1c:01:b5:da:f7:a4:42:92:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
        Validity
            Not Before: Mar  1 23:55:01 2026 GMT
            Not After : Mar  3 00:59:01 2026 GMT
        Subject: CN=26012795E68B77136C76BA47697BBB80939EFD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:a8:e2:ca:b7:bc:bf:27:1d:d7:b3:66:4d:
                    bf:39:5a:59:cd:cf:53:f2:a0:df:69:fb:9d:61:5f:
                    5d:60:af:a2:d0:63:71:dc:aa:38:28:d5:f2:14:b6:
                    3c:ff:7f:9d:d4:47:c5:96:1f:b3:b5:e3:7f:1c:a9:
                    4e:7d:b4:51:66:98:f4:1d:d8:d8:02:9d:96:23:40:
                    7e:e4:77:d0:24:cc:38:f1:4b:dd:fc:41:51:ff:86:
                    c1:8b:e7:d7:20:24:88:8b:a5:e4:ba:ed:b1:9a:06:
                    3b:e4:d6:6e:e7:9c:4e:80:87:e2:68:d9:6b:44:db:
                    56:b8:63:9d:39:26:27:3b:a9:53:92:f2:24:5f:e5:
                    6a:60:ec:0f:e4:a4:f0:7e:1a:cb:09:56:a6:56:ec:
                    0f:f0:6e:3f:c4:90:b9:59:31:81:0d:11:2d:e1:08:
                    41:73:23:aa:ed:f8:97:b6:00:38:6d:bc:72:33:3f:
                    b8:11:60:3d:64:5f:59:4b:2c:db:5c:92:98:f4:8c:
                    92:d1:ae:36:98:6a:44:69:ca:49:2e:6a:66:79:65:
                    36:c2:fe:f6:a9:c8:72:13:7d:af:14:88:5b:9d:be:
                    cc:2f:31:41:bd:17:8b:66:97:04:9b:e7:20:a6:4a:
                    78:2b:2c:f5:32:1c:f8:9b:64:9f:51:d0:50:34:d7:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:01:27:95:E6:8B:77:13:6C:76:BA:47:69:7B:BB:80:93:9E:FD:81
            X509v3 Authority Key Identifier:
                keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:15:a4:5c:1d:1d:f8:55:1d:7f:be:2e:13:3e:1e:d3:7d:d2:
         09:fe:61:fe:9a:92:dd:7d:56:4c:ec:8d:56:d6:5b:4e:2c:c8:
         a5:41:7b:de:27:af:b4:01:64:f4:c8:7f:56:2f:08:cb:3b:e3:
         83:78:72:47:ae:a9:fd:b5:28:0a:a7:7d:8e:c5:ef:23:0f:67:
         a5:33:57:9d:86:49:51:e7:ca:76:00:28:00:e3:9c:be:21:b0:
         e0:b7:f7:a5:df:b9:8f:8c:fc:3d:1d:24:2d:6c:4e:0b:41:8b:
         3b:10:42:07:21:46:87:32:8a:f0:36:3a:d3:23:25:55:91:dc:
         cc:70:72:11:3c:1d:30:90:ae:36:9f:c3:ec:04:fe:55:51:72:
         0d:f2:38:4d:d1:8f:9f:e3:a9:e0:d4:80:90:26:11:d4:46:8c:
         b9:36:79:e7:e7:5c:ee:cb:0a:de:22:8a:f9:ab:07:c1:82:75:
         6c:7a:f7:c7:3c:10:52:81:7c:d3:69:be:14:16:ac:3e:17:02:
         7a:27:bc:b4:40:fd:b8:e7:e3:7e:3f:02:b4:db:80:aa:bf:33:
         b9:b8:28:bd:1e:f5:5f:24:0f:cf:e9:f5:58:da:e9:04:c9:f8:
         45:54:cc:30:72:49:48:14:0d:89:95:7f:a1:38:d7:33:5c:16:
         43:a9:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:28 2026 by rpki-client