Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
File:                     aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json)
Hash identifier:          qNuEXR/rhaPy9WjX0fCnavWXRYaahtdM8CCTwQDqA0g=
Subject key identifier:   D0:31:32:37:F7:2A:4D:55:DE:93:C6:2F:ED:BC:86:2A:7B:C8:32:A6
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Certificate issuer:       /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial:       0A6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
Manifest number:          0A65
Signing time:             Tue 24 Mar 2026 19:24:29 +0000
Manifest this update:     Tue 24 Mar 2026 19:24:29 +0000
Manifest next update:     Tue 31 Mar 2026 19:24:29 +0000
Files and hashes:         1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: 8N8cKi3LwyxddodGvYcJeKAnejYFQK0DZ+BRrVnvt44=)
                          2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: UHf93WQV3i4ARPzi/pu+UB53941OBZiuvVBenRV6yUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
                          rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669 (0xa6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
        Validity
            Not Before: Mar 24 19:24:29 2026 GMT
            Not After : Mar 31 19:24:29 2026 GMT
        Subject: CN=69c2e4ed-55df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:f2:cc:df:77:e6:39:76:b8:6c:f2:0c:81:
                    aa:24:d4:0e:96:e0:41:70:a5:2a:f1:b7:8a:f9:f2:
                    81:90:86:ab:7e:0e:44:69:e1:b8:14:a8:d3:95:5e:
                    5a:15:1e:a1:a6:6f:31:08:b1:90:f5:43:be:7d:b9:
                    9a:89:bb:4b:7b:24:48:fc:9f:89:03:b8:06:18:8d:
                    48:2d:e0:d4:9b:28:b0:d1:e3:4f:06:7d:20:4c:47:
                    28:65:c3:8c:c3:39:fd:df:cc:2b:4b:0f:86:55:09:
                    4d:0b:d6:5c:73:9a:69:8d:69:0f:d2:3d:4c:17:5b:
                    32:93:6d:9e:f6:1e:c1:f5:c5:80:59:e5:58:cf:e8:
                    a4:49:bc:70:bc:f0:3b:1c:34:3d:22:60:7f:f6:ac:
                    61:2c:c7:bf:69:70:2b:e9:48:6c:f8:de:05:0c:e4:
                    47:59:37:af:6a:27:92:3e:87:55:a0:c2:7e:63:83:
                    29:b6:a2:6d:d5:c3:7a:2c:e4:dc:dd:42:ef:19:27:
                    fb:59:3e:8f:ba:c3:d6:26:f9:ff:b6:15:fc:1a:b1:
                    39:3f:1d:f9:67:41:81:bc:98:bc:59:50:21:c2:5f:
                    90:60:b8:3b:9e:47:ef:d0:76:4e:bd:58:23:54:fb:
                    02:13:64:87:32:a4:92:a0:5c:0e:25:74:50:08:9b:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:31:32:37:F7:2A:4D:55:DE:93:C6:2F:ED:BC:86:2A:7B:C8:32:A6
            X509v3 Authority Key Identifier:
                keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:46:6b:d6:35:32:43:63:89:f9:f9:87:c3:e6:82:d4:eb:ee:
         7f:50:b9:d4:92:ea:b5:9f:07:df:2a:2a:97:21:35:9d:c2:53:
         68:12:76:19:1e:9a:f9:3b:4a:49:59:8e:ac:98:0d:b7:49:94:
         27:d0:94:20:01:3a:63:bd:9b:cb:77:7e:1b:93:34:5d:0d:b3:
         15:ba:02:e1:2a:07:94:41:8b:e3:ba:63:37:f2:de:dc:6b:8c:
         1d:84:17:07:3e:d3:07:11:af:36:b4:73:3e:24:27:d8:80:87:
         95:2c:78:a8:8c:85:a5:ac:23:f4:a0:bc:54:38:e3:50:e3:af:
         4c:c2:26:77:6f:84:e0:ba:85:05:0c:8f:7f:a5:f1:29:13:be:
         bf:be:4f:13:6e:cd:40:31:1d:b0:be:4d:70:1d:3a:1f:12:db:
         0f:24:1e:d3:a8:4d:42:2c:82:f3:82:ca:b6:dc:f9:f0:86:c2:
         cd:36:21:64:01:ec:84:49:6c:74:ee:e0:fa:16:80:16:2d:7c:
         80:22:ed:f4:6a:28:55:20:51:57:97:87:10:a3:9c:fe:d1:a6:
         fd:99:8c:1f:a4:0e:0a:43:f2:0d:c0:8f:74:81:a5:68:66:ee:
         2b:5e:8b:d6:a9:83:79:b7:84:ce:de:23:9c:1b:a9:a7:c6:0d:
         73:d9:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:48 2026 by rpki-client