Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
File:                     cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json)
Hash identifier:          mad86AJti+oZb4i0PLqLGJSjYqLz0XckqWQDpKljQVE=
Subject key identifier:   2C:FE:CD:BD:07:21:60:09:15:50:8F:E1:EF:4F:DF:73:19:FB:14:C9
Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA
Certificate issuer:       /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
Manifest number:          01F8
Signing time:             Wed 25 Mar 2026 02:39:23 +0000
Manifest this update:     Wed 25 Mar 2026 02:39:23 +0000
Manifest next update:     Wed 01 Apr 2026 02:39:23 +0000
Files and hashes:         1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: e9eZEB8EI3s0v7V1eCkldCTigpF1gRM/TWk5USY0ebs=)
                          2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: I+nMBsoAOQUiZCzFaQB/KvumSoVrGOcDZwsmBZeS6yw=)
                          3: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: zTVOLFIEBPDpPfLXlenxlDqoCu7oEt/TG+aQAHRnkO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl
                          rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
        Validity
            Not Before: Mar 25 02:39:23 2026 GMT
            Not After : Apr  1 02:39:23 2026 GMT
        Subject: CN=69c34adb-2cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:2d:5a:2c:ab:bb:6e:cd:42:1d:41:14:c4:
                    11:b4:7a:4c:e7:f1:ea:e5:27:ff:55:c4:f9:88:cc:
                    11:78:05:c3:c5:40:38:a3:e9:eb:33:1b:ae:d5:58:
                    59:00:e7:f8:bd:85:7d:6d:eb:8c:d4:53:9f:4f:a4:
                    c0:86:89:c8:96:fd:99:31:6b:66:42:c3:48:62:83:
                    35:88:2f:a5:62:a8:ed:4d:bb:9a:0f:6e:c0:1d:b7:
                    73:10:82:70:d0:46:8e:43:b0:ae:f5:b9:d0:ea:6c:
                    49:2c:a8:7e:bd:b7:82:4b:e7:c0:e1:6e:87:0c:84:
                    d9:68:20:f2:18:7d:ef:1c:a3:9e:5b:a4:22:68:fd:
                    ac:10:49:ac:76:03:e7:27:6d:42:a2:2b:c7:b7:c7:
                    fa:d1:86:79:e6:4f:a8:5c:24:d1:45:95:28:ee:30:
                    8e:67:e5:52:07:79:3b:dc:6c:b6:85:44:5f:4b:8b:
                    00:bf:fe:e8:a3:8c:3b:d8:09:c3:7c:d1:e1:95:7b:
                    e4:af:b8:5e:bb:eb:9f:b9:11:e7:30:f7:f1:55:e9:
                    ac:78:43:81:b9:77:dd:a3:c3:2f:54:4b:30:e7:7e:
                    54:ed:83:7d:1b:ec:d8:c7:82:cc:5d:de:02:63:35:
                    b4:ef:dd:14:8a:45:0e:48:ca:e7:0e:0d:61:6b:95:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FE:CD:BD:07:21:60:09:15:50:8F:E1:EF:4F:DF:73:19:FB:14:C9
            X509v3 Authority Key Identifier:
                keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:83:90:c5:11:23:fb:d8:41:ee:33:ac:61:6e:db:96:1f:31:
         a0:34:21:ce:38:42:99:36:5c:64:6e:5b:56:ef:69:4e:f8:eb:
         76:67:a9:b5:e9:1f:e6:10:2d:a8:8f:42:ec:ea:99:fd:f8:b8:
         dd:07:ca:fa:dd:3c:b6:3d:6a:d1:c4:59:4d:5e:96:b9:d4:56:
         da:47:41:b6:d7:8d:ed:9e:24:86:37:cc:68:ca:4a:35:c2:77:
         30:41:3f:23:89:38:15:eb:df:3b:46:7c:bb:5f:66:80:d5:b4:
         65:07:43:eb:25:26:75:3c:4f:fb:31:69:ee:c9:5f:2b:bb:9c:
         2a:8a:af:1d:fd:6d:c1:b4:8f:d3:32:a6:7b:dd:b2:38:18:f7:
         59:1e:e9:d7:03:ff:5b:a9:19:16:a4:3c:ae:dd:26:ef:56:d8:
         e6:b9:d0:0e:be:0c:8a:a8:6f:95:d6:25:c6:dd:d6:28:8f:60:
         d3:14:1d:33:6d:3d:49:65:0b:b5:56:3b:90:b8:ee:b3:54:4e:
         5b:25:3b:79:f1:b1:4e:3b:34:ee:13:12:84:c9:9d:5a:ab:db:
         c0:0b:ec:69:e6:57:5c:26:d2:58:2d:f5:ec:7c:f1:3d:15:27:
         80:87:57:0e:62:75:10:a8:b2:32:44:9a:7f:20:ba:b9:2b:ed:
         de:13:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:59 2026 by rpki-client