Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File:                     fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier:          rqbDoVWEAgMnhD/G2VTz2khBflSHtltY+yqsHqfqr6A=
Subject key identifier:   28:1E:C9:8A:9D:F5:F2:F4:1B:AE:EA:53:9A:14:E1:26:CB:C5:55:67
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer:       /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial:       0246
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number:          0240
Signing time:             Wed 25 Mar 2026 01:53:25 +0000
Manifest this update:     Wed 25 Mar 2026 01:53:25 +0000
Manifest next update:     Wed 01 Apr 2026 01:53:25 +0000
Files and hashes:         1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: 90XPtzBPpNE02P0KYZjbJp/z8EAg2goh+Rpr3r1EJZk=)
                          2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: 6SZegSN1bEm8IpeY56I3OBOVi6qp9uRdOosU1uc4tzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
        Validity
            Not Before: Mar 25 01:53:25 2026 GMT
            Not After : Apr  1 01:53:25 2026 GMT
        Subject: CN=69c34015-d937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:b8:59:b1:95:fb:e5:60:9b:97:bc:26:ee:
                    d8:35:be:b5:fa:72:10:e2:66:b8:73:ef:15:ee:67:
                    bf:84:38:56:57:e5:23:e0:a4:6b:76:fe:e6:50:87:
                    ce:da:26:c9:e0:b2:04:7b:58:8a:65:d5:a4:0e:61:
                    48:30:08:4b:c8:d7:8c:83:b8:e6:36:bd:c4:66:46:
                    63:53:f5:94:c2:b3:00:1a:ce:b2:42:c5:03:03:52:
                    9b:09:73:37:fe:48:3c:ad:8d:d7:0b:b8:21:cf:55:
                    02:3b:98:eb:2e:fb:0b:3a:83:81:7d:b5:0d:82:ce:
                    ec:7d:8c:4c:16:60:5e:e2:ed:55:08:05:3a:ea:12:
                    21:fa:e7:1b:cd:01:be:5f:08:8e:9d:c8:9a:d0:f8:
                    fb:ba:83:7a:0a:71:87:ee:2a:38:f1:b7:4b:96:28:
                    82:62:2e:15:74:db:f9:9e:1a:77:84:a2:5e:6b:eb:
                    9e:20:71:8b:81:fc:ff:de:8a:1d:6a:19:65:43:cc:
                    14:c8:7a:23:5f:85:38:62:9b:b9:2d:cd:25:ae:7d:
                    ea:f6:5f:49:4c:3a:d0:cb:b9:12:f9:ca:53:e8:7a:
                    c5:96:bb:46:bd:04:e9:ac:bc:7b:8a:e9:9c:7a:f9:
                    d7:0d:2c:92:a1:dc:3a:0a:91:88:39:00:2a:65:dd:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1E:C9:8A:9D:F5:F2:F4:1B:AE:EA:53:9A:14:E1:26:CB:C5:55:67
            X509v3 Authority Key Identifier:
                keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:d9:1e:ba:d9:f5:f1:f6:14:fc:4c:da:4b:33:c5:2b:1f:
         22:6a:20:ce:68:07:25:19:d3:d5:01:df:ae:98:2e:dc:92:fd:
         ac:5c:0d:58:c8:6b:bc:67:02:c7:43:2d:f9:09:98:41:0d:a5:
         37:8e:9a:82:6c:75:7c:3b:e1:eb:6f:a6:9d:42:3a:33:8c:ec:
         80:e5:b1:71:96:11:52:2f:d9:ad:b6:73:61:59:f9:21:67:29:
         fc:36:02:d8:06:c1:44:94:46:2f:38:d5:63:18:e6:91:d0:72:
         7c:bc:86:18:77:72:52:0e:ca:03:40:f4:ae:49:13:3c:cb:3e:
         fd:b7:5e:8f:89:96:a3:e9:47:b5:51:f9:c1:6a:4f:4b:28:35:
         8a:1d:2c:f2:de:b3:8a:17:79:f2:23:f7:4d:11:c9:57:f4:19:
         8b:32:77:f3:e6:cd:15:ce:5c:6d:b9:0b:96:c6:74:1b:4b:a7:
         3a:b5:38:e4:ef:aa:93:15:36:b6:49:26:b5:60:6e:4f:3b:54:
         df:3c:18:6d:87:cf:98:b2:0b:32:2b:61:63:74:92:de:62:6a:
         9a:25:67:e8:9a:85:06:ff:6a:b6:fd:37:c1:69:9d:3a:70:32:
         44:30:54:fa:f0:06:94:c6:71:a1:c5:8b:70:a0:fd:f0:c3:66:
         ed:00:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:30:06 2026 by rpki-client