Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
File:                     9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json)
Hash identifier:          2l7xzxYKEHMV0NmYIdQ3uaD/c7PpHUE2OjvwEStJBw8=
Subject key identifier:   FB:D7:E9:F1:29:C7:DE:B4:73:34:D2:13:DD:E5:49:46:75:B1:65:8E
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Certificate issuer:       /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
Manifest number:          01FC
Signing time:             Fri 27 Mar 2026 02:40:10 +0000
Manifest this update:     Fri 27 Mar 2026 02:40:09 +0000
Manifest next update:     Fri 03 Apr 2026 02:40:09 +0000
Files and hashes:         1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: IpiVc5c1Rb+9cokEX009bHUYO1LhjJG/TyQq0m4PJAQ=)
                          2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: hX2Iw++PK9Y+cjSdv5iifugQbVGCyctU8mKlkkvrChc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
                          rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
        Validity
            Not Before: Mar 27 02:40:09 2026 GMT
            Not After : Apr  3 02:40:09 2026 GMT
        Subject: CN=69c5ee0a-71c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:b5:e1:47:99:14:aa:96:b8:b0:bc:c3:2f:
                    e6:18:d0:55:66:2c:a7:ef:b6:53:db:20:4e:39:db:
                    39:62:e1:e9:1f:28:b3:6d:54:12:65:08:dc:93:0d:
                    4a:e6:be:a8:bd:9a:f5:0d:60:a0:58:07:2e:52:46:
                    a8:b6:55:a3:35:62:49:1d:a5:6a:6a:64:b0:d7:46:
                    0e:90:e5:c1:50:56:6f:e2:39:63:46:99:07:c8:af:
                    8c:ad:6b:c4:e8:a2:d0:23:88:f2:7f:52:10:32:d3:
                    1a:09:3c:04:ce:cf:00:c1:0e:67:37:c7:f6:cd:7a:
                    6e:53:e3:2b:51:79:ec:10:b9:c5:da:00:3a:79:c0:
                    a6:09:94:33:80:c8:bc:99:fd:cc:b9:e0:35:c5:d9:
                    12:64:6d:12:c0:78:05:8f:15:ff:81:cb:02:bc:98:
                    98:1f:14:2f:3f:33:3e:eb:7a:50:3e:14:a9:88:e2:
                    d7:7a:9f:88:57:e6:77:48:33:dc:91:5a:d8:ff:da:
                    7a:61:28:9b:af:8e:e3:0c:4d:d7:01:ba:53:1f:76:
                    03:c6:99:0b:b0:9b:90:a8:23:18:a3:1e:22:c1:93:
                    89:d6:f5:9d:7f:d8:f4:35:11:59:13:6e:b8:22:b3:
                    09:b8:e3:f3:fb:96:ba:74:d8:90:fc:d5:9d:21:78:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D7:E9:F1:29:C7:DE:B4:73:34:D2:13:DD:E5:49:46:75:B1:65:8E
            X509v3 Authority Key Identifier:
                keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:96:43:66:d4:ac:4c:a9:e6:60:b3:4e:ab:8a:c4:4e:d2:4d:
         fd:8e:5c:2d:ff:12:a5:4f:02:78:c6:0b:49:07:20:77:f6:a9:
         d7:ab:29:c0:7d:8c:11:8f:e2:70:82:c0:58:64:e8:6b:47:0a:
         5f:a2:f8:b8:ca:67:49:bf:e4:45:7b:86:e5:97:6a:d8:b3:09:
         85:d5:13:f5:d7:c7:0b:ed:ca:23:12:29:5a:5a:57:d5:9a:36:
         a6:07:07:61:c1:f6:4b:ba:dc:5f:eb:1d:b6:04:d8:93:f3:3a:
         7e:3d:8f:e4:15:ca:ea:57:b1:51:f0:0e:66:46:34:18:94:ec:
         7f:e0:5a:6d:94:80:4e:68:bc:25:0a:84:38:6e:da:ea:81:9a:
         f3:a7:5c:60:33:83:73:41:fe:ad:46:a1:bd:83:a9:f8:96:5f:
         d2:79:4a:29:e8:20:11:f9:a4:dd:50:e8:5e:15:85:44:84:d2:
         ad:e1:ba:a7:5a:ad:0a:1c:bd:8e:b1:3d:36:93:86:ea:f2:70:
         ea:9a:62:69:f6:55:65:4d:1d:80:18:e6:8d:de:d6:fc:46:f7:
         bd:e0:b9:14:c1:e8:42:72:4e:d4:fb:84:f4:28:50:b6:3b:3a:
         71:f5:bf:d7:98:38:8a:c4:41:a0:35:44:69:37:c7:67:28:a8:
         b4:22:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:48 2026 by rpki-client