Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
File:                     _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json)
Hash identifier:          MJLimuA9012E7ZepsrZ6Xg4sxYrbJ3yVwDW84VXHjP0=
Subject key identifier:   97:84:CD:30:4E:C4:9E:7B:4C:A3:6D:51:27:18:10:FB:44:63:C0:6C
Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09
Certificate issuer:       /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
Certificate serial:       0A14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
Manifest number:          0A0B
Signing time:             Tue 24 Mar 2026 19:36:26 +0000
Manifest this update:     Tue 24 Mar 2026 19:36:26 +0000
Manifest next update:     Tue 31 Mar 2026 19:36:26 +0000
Files and hashes:         1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: kdoxxdGchj6ORhQ0TEb/sXLCKL/PHyMQzk1lVsvvnuQ=)
                          2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: cDOd12lHJvxwUolrfTe3odnYbC9rB4VadWNGF5sIPUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl
                          rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580 (0xa14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251EF, serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
        Validity
            Not Before: Mar 24 19:36:26 2026 GMT
            Not After : Mar 31 19:36:26 2026 GMT
        Subject: CN=69c2e7ba-aecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:da:da:b3:3e:ae:39:f6:2b:8e:e8:63:cc:
                    60:a7:32:8b:b6:80:f9:4c:60:ef:5c:f6:7c:fe:06:
                    f5:e6:a0:2f:80:6c:94:29:59:83:46:34:f3:a1:2c:
                    71:1f:d3:80:4b:10:7a:30:02:dd:22:ad:d0:44:7c:
                    3d:dc:01:a5:e0:58:b4:1b:01:f1:16:09:7f:1d:a7:
                    0b:f2:d3:3c:4c:0d:a8:37:df:4f:6e:d5:8e:a8:9f:
                    84:fc:31:70:09:76:98:fe:9c:7d:89:95:28:5f:84:
                    96:c5:4e:96:cc:e2:a8:dc:da:71:f2:40:6c:7d:27:
                    85:7c:4c:f5:64:a4:1e:d7:18:c4:a6:e3:f2:15:bf:
                    c8:29:23:f4:52:dc:b8:33:0b:5f:3f:be:74:d0:17:
                    c3:9a:14:48:7c:3c:04:7e:bb:27:8b:5c:2a:9f:aa:
                    5b:c6:a1:02:28:99:9a:30:48:3e:7b:2d:3b:85:1c:
                    e6:d2:c2:27:a2:44:de:b7:52:52:88:60:11:f1:70:
                    40:56:8d:8e:9c:64:34:14:79:70:7b:11:ba:d2:e3:
                    16:66:86:ce:94:27:a6:6f:34:fb:36:1f:4c:90:e3:
                    19:e1:05:31:9e:0e:5c:04:d6:d0:de:05:ed:bd:26:
                    db:cc:f8:de:7e:2b:19:32:67:bf:43:37:1a:5a:6d:
                    c2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:84:CD:30:4E:C4:9E:7B:4C:A3:6D:51:27:18:10:FB:44:63:C0:6C
            X509v3 Authority Key Identifier:
                keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:c1:77:7b:e4:c8:be:4d:56:95:db:79:83:55:51:73:5b:cc:
         4e:b1:c6:f1:40:51:e9:18:54:7f:0f:9e:cb:12:08:54:d3:bc:
         99:d7:e8:f8:23:55:b0:cd:1a:6a:16:e0:1f:d9:3d:67:5a:40:
         46:90:77:39:00:67:96:9f:4e:46:06:0d:f7:fe:4f:7a:63:a6:
         61:08:c7:96:6b:70:36:79:ce:63:24:28:1c:54:11:5c:80:5e:
         5f:c9:e4:ad:31:91:0a:e1:2f:d9:09:97:f1:78:f2:67:8d:34:
         6e:09:c9:e3:f1:dc:81:09:1a:b7:22:6b:d1:55:ee:eb:f1:c9:
         a9:7e:d1:1e:8a:59:81:33:a0:16:e0:12:20:d6:4c:27:6c:8a:
         d4:f7:bf:28:f6:b4:f3:87:7b:33:ee:50:c5:af:98:50:02:86:
         9b:70:64:13:19:2e:62:ea:fb:d9:17:9d:14:a4:f5:6d:50:58:
         1c:a9:4c:a1:06:24:94:df:4b:6d:8f:52:28:b9:5d:e7:29:6e:
         a3:41:45:d2:58:60:ec:82:4e:0c:94:32:0b:84:36:f0:b6:3c:
         bc:98:99:31:81:ff:da:e0:eb:92:12:c1:a3:b7:10:e9:4e:69:
         1e:f5:12:cc:aa:b9:b2:37:a8:ce:3f:a7:72:34:23:ca:39:c2:
         33:05:c1:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxRUYxMTAvBgNVBAUTKEZDQzUwNERBNEIzOThDNjZEREJGMkMzOTJCNzUxOUND
OTBDMUExMDkwHhcNMjYwMzI0MTkzNjI2WhcNMjYwMzMxMTkzNjI2WjAYMRYwFAYD
VQQDEw02OWMyZTdiYS1hZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLPa2rM+rjn2K47oY8xgpzKLtoD5TGDvXPZ8/gb15qAvgGyUKVmDRjTzoSxx
H9OASxB6MALdIq3QRHw93AGl4Fi0GwHxFgl/HacL8tM8TA2oN99PbtWOqJ+E/DFw
CXaY/px9iZUoX4SWxU6WzOKo3Npx8kBsfSeFfEz1ZKQe1xjEpuPyFb/IKSP0Uty4
MwtfP7500BfDmhRIfDwEfrsni1wqn6pbxqECKJmaMEg+ey07hRzm0sInokTet1JS
iGAR8XBAVo2OnGQ0FHlwexG60uMWZobOlCembzT7Nh9MkOMZ4QUxng5cBNbQ3gXt
vSbbzPjefisZMme/QzcaWm3ChwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJeEzTBO
xJ57TKNtUScYEPtEY8BsMB8GA1UdIwQYMBaAFPzFBNpLOYxm3b8sOSt1GcyQwaEJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFFRi8yRTk0ODc0RTkx
REExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpHYmR2eXc1SzNVWnpKREJv
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19NVUUya3M1akdiZHZ5dzVLM1VaekpEQm9Ray5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTFFRi8yRTk0ODc0RTkxREExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpH
YmR2eXc1SzNVWnpKREJvUWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2MF3e+TIvk1Wldt5g1VRc1vMTrHG8UBR6RhUfw+eyxIIVNO8mdfo+CNVsM0a
ahbgH9k9Z1pARpB3OQBnlp9ORgYN9/5PemOmYQjHlmtwNnnOYyQoHFQRXIBeX8nk
rTGRCuEv2QmX8XjyZ400bgnJ4/HcgQkatyJr0VXu6/HJqX7RHopZgTOgFuASINZM
J2yK1Pe/KPa084d7M+5Qxa+YUAKGm3BkExkuYur72RedFKT1bVBYHKlMoQYklN9L
bY9SKLld5yluo0FF0lhg7IJODJQyC4Q28LY8vJiZMYH/2uDrkhLBo7cQ6U5pHvUS
zKq5sjeozj+ncjQjyjnCMwXBwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:54 2026 by rpki-client