Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
File:                     a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json)
Hash identifier:          Z8x/EAq2hnOlSZnq7tXR5KyB5xX6fWQBnPW9Q5i/3rk=
Subject key identifier:   B7:ED:08:BB:23:1F:FD:2B:57:01:6C:44:42:44:59:CF:72:0B:8C:A1
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Certificate issuer:       /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial:       0915
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
Manifest number:          090B
Signing time:             Wed 25 Mar 2026 09:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 09:00:56 +0000
Manifest next update:     Wed 01 Apr 2026 09:00:56 +0000
Files and hashes:         1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: s1LxGdpyiyaNmmA89+V3HvTt3eAU/sHjTYXFlsuK1pk=)
                          2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: A+vGSKzHOEr6WQMmXCqrBXQC5qCQ1zLl1m8jTRo1SXQ=)
                          3: 1FB57044282911F18EC27654C4833773.roa (hash: cIC3mh9+HScM982pQxZELzTgJLhXi90s7mwohLJpYHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
                          rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325 (0x915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
        Validity
            Not Before: Mar 25 09:00:56 2026 GMT
            Not After : Apr  1 09:00:56 2026 GMT
        Subject: CN=69c3a448-b839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:d0:cb:8e:89:f7:24:43:97:41:8c:62:48:
                    68:37:6a:92:5f:f6:af:fb:ef:fe:10:7a:84:8a:e9:
                    2d:11:b9:19:2b:92:01:75:24:7e:72:0f:a7:e5:d4:
                    77:4d:d0:20:aa:17:f1:59:cc:42:9f:0a:58:de:78:
                    de:73:e2:90:bc:33:ac:25:e8:9b:99:52:16:64:50:
                    4d:b0:2b:24:39:f7:ef:dd:92:3a:f6:9e:39:0e:e4:
                    b7:97:85:88:3f:71:91:6c:23:0c:44:6e:1a:93:f7:
                    d5:41:e1:49:89:b6:fc:b6:55:04:e9:27:54:9f:3a:
                    72:79:67:88:19:dc:35:ba:a4:a9:b6:96:c4:83:be:
                    01:b0:d5:76:8e:ed:cb:0b:eb:67:6e:39:a3:19:33:
                    d8:41:e6:ba:e4:e0:e3:14:2d:36:6d:ff:52:72:c3:
                    ee:aa:cf:c9:80:b5:82:2e:24:70:27:b3:05:96:a8:
                    f3:94:21:a5:61:3e:cf:ec:03:53:09:76:e3:ce:96:
                    3f:41:f2:32:b8:d3:1b:bc:27:e4:79:af:18:cf:95:
                    10:65:e6:65:9e:2c:12:3d:d2:9e:34:27:49:fd:c0:
                    c4:67:49:61:c9:85:03:b9:68:35:b2:38:7c:8f:4a:
                    b3:0e:fc:df:47:66:d4:a1:77:fd:7b:9c:ea:24:0d:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:ED:08:BB:23:1F:FD:2B:57:01:6C:44:42:44:59:CF:72:0B:8C:A1
            X509v3 Authority Key Identifier:
                keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7d:ef:35:14:f5:18:7f:ee:03:7d:b8:8b:45:c3:0c:42:fd:
         d3:5f:bd:03:9e:36:9b:80:8e:6f:7d:49:1c:75:fe:b2:44:80:
         56:14:72:c1:cc:f6:a4:98:81:93:0b:3c:e0:19:c7:38:42:e3:
         9a:d3:53:c5:fa:de:72:c0:6d:b1:a9:ec:cb:ec:45:ea:4a:38:
         90:89:11:32:07:c8:f0:e5:c4:7b:32:03:0e:a7:84:30:9d:ff:
         46:c5:76:f6:08:df:fd:eb:6b:e6:27:f4:cf:17:20:f7:8a:33:
         35:d8:84:bb:ff:b0:04:1f:a6:cf:06:63:c7:99:09:b0:3b:cb:
         61:8a:59:a2:b2:65:1d:ea:f6:15:3b:3e:cd:dd:d2:9b:1a:2c:
         b9:33:76:f8:d4:83:b4:f9:1b:6e:f1:a3:2e:96:8f:c1:01:2d:
         ad:20:d3:53:52:c9:73:3d:f6:31:16:0c:c7:9b:dc:e8:93:8e:
         f6:1d:de:a9:96:b9:df:29:3b:de:9b:d3:73:74:1b:3e:8e:92:
         37:c9:c3:0b:33:e3:55:ba:74:ca:8a:a2:68:65:56:11:06:9a:
         32:73:c4:62:dd:ec:1d:b5:10:db:7d:5a:61:07:b3:7d:27:4a:
         74:5e:c1:e3:a2:23:8a:ce:0f:dd:29:f6:f7:74:c1:be:82:5f:
         05:f0:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:09 2026 by rpki-client