Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
File:                     cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json)
Hash identifier:          rUYH3sPNzHwkpb6w/eI+JgdPC+thKyxkEBIs/lAkSmI=
Subject key identifier:   70:91:B8:0D:99:52:8A:DF:2B:13:48:CE:1B:B8:14:76:9D:43:D5:13
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Certificate issuer:       /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
Manifest number:          0104
Signing time:             Wed 25 Mar 2026 05:19:39 +0000
Manifest this update:     Wed 25 Mar 2026 05:19:39 +0000
Manifest next update:     Wed 01 Apr 2026 05:19:39 +0000
Files and hashes:         1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: TnTNiBZuidZWCPQ6csjjyXxOhs4SFHtg204wawoCFys=)
                          2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: LUj3nw3I/55jfghfKNbIADhEH+zObxvm94ONzxqJb9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
                          rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
        Validity
            Not Before: Mar 25 05:19:39 2026 GMT
            Not After : Apr  1 05:19:39 2026 GMT
        Subject: CN=69c3706b-03aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:3c:98:97:30:46:cc:bf:88:e4:5b:94:4e:
                    ed:09:3d:d3:28:16:2a:bb:4b:a2:a3:fc:c7:c2:de:
                    73:c1:4e:b5:0b:e2:58:9c:7e:e6:ea:ad:50:9c:dd:
                    86:2f:bc:ce:bf:65:2b:6d:e5:0b:c0:4b:13:c3:07:
                    fa:51:d4:17:a1:f7:cd:95:9f:d6:1b:b2:46:39:45:
                    61:74:81:5b:d5:b2:88:c2:ac:ef:62:45:8a:72:73:
                    2f:4c:aa:b3:e8:c4:bc:03:0e:67:23:f8:b6:85:92:
                    4f:64:16:73:d3:89:17:2d:f6:ae:d8:a3:f0:c8:3b:
                    c8:b1:dc:dd:9c:44:5a:da:2f:56:35:db:9c:83:f8:
                    44:c4:b4:0a:cb:89:48:a8:1d:88:22:ad:f3:3b:34:
                    3a:0c:c0:b8:56:98:2d:a1:7b:ab:a3:24:5d:d6:47:
                    1b:16:b1:0b:d8:c7:d4:3a:e2:4b:2b:e3:2c:33:5f:
                    85:3f:8a:8d:0c:79:80:38:cb:b4:3e:6d:43:a5:24:
                    56:c4:ef:37:19:c0:25:eb:a1:39:ca:58:9e:e7:93:
                    87:68:60:ff:97:0b:3a:40:64:7a:4e:ae:43:dd:00:
                    75:aa:6b:76:11:a7:d1:dc:89:ad:63:b1:14:5b:ee:
                    e9:5f:ca:93:fb:8a:a1:7e:f9:a9:5a:74:3a:ae:9b:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:91:B8:0D:99:52:8A:DF:2B:13:48:CE:1B:B8:14:76:9D:43:D5:13
            X509v3 Authority Key Identifier:
                keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:dd:c9:bb:ec:38:de:b5:ce:8d:5d:79:37:a6:42:a2:0e:1d:
         99:f6:64:97:bf:04:96:7d:59:7e:74:90:dc:f0:e5:1d:a2:c4:
         f9:dc:c8:61:71:c5:00:57:33:a2:af:15:34:49:aa:c1:32:8c:
         63:99:d5:8c:49:6f:1b:89:79:db:1b:d2:0e:ac:be:cf:e4:82:
         38:08:52:9f:40:af:02:d9:4e:a6:a8:33:88:da:63:76:db:a2:
         4f:37:c4:b6:cb:53:92:dc:3d:40:8d:47:18:68:88:8c:c5:97:
         0a:68:09:7b:3a:ee:0b:1a:e2:61:de:51:80:35:9b:90:d2:45:
         54:19:01:b8:38:f6:ed:ae:88:9f:b6:fa:97:84:bb:14:44:be:
         de:61:a9:11:4d:93:8c:d4:e2:e5:75:ab:79:27:10:10:3c:be:
         24:1a:cf:e1:b2:a5:09:da:33:31:4d:4c:e9:69:99:82:fd:aa:
         22:56:ed:d1:9a:ee:e3:9f:05:1b:42:d5:4a:6a:5f:a1:69:a6:
         32:19:25:f3:22:b9:e4:33:b3:4c:bc:3e:1d:02:6c:a9:f8:42:
         2f:61:0f:30:be:20:ea:52:a6:ab:f5:1e:83:d0:9c:13:e3:2b:
         84:2f:57:99:99:58:87:91:28:b0:d3:d0:21:f5:5f:1e:08:cd:
         d7:a9:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:17 2026 by rpki-client