Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
File:                     D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json)
Hash identifier:          al7lOyiKHbmSvJxDk+mQztl+74Endv4zkez4dtUkcuU=
Subject key identifier:   08:3F:2C:02:C2:FD:09:86:A1:18:38:34:17:4E:42:3F:40:74:EA:46
Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Certificate issuer:       /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
Manifest number:          0213
Signing time:             Wed 25 Mar 2026 02:14:53 +0000
Manifest this update:     Wed 25 Mar 2026 02:14:52 +0000
Manifest next update:     Wed 01 Apr 2026 02:14:52 +0000
Files and hashes:         1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: +Wu64O90MHqS4s7vcW91/BvhA0uQ1ZC4akCtPO9I/6s=)
                          2: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: weDayyeYutvx0b8e1SLUbhE0mFruNtfvUzk0Kx4AkzY=)
                          3: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: hT0A2KRW/3QOLTyxBn8Un7aA6iluT3rc/l0TDSw8688=)
                          4: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: d03oC9NyvqRx8U/l5SE7fqdhkjTewkYgCSF6lgvXCMc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl
                          rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
        Validity
            Not Before: Mar 25 02:14:52 2026 GMT
            Not After : Apr  1 02:14:52 2026 GMT
        Subject: CN=69c3451d-dee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:3f:dd:51:f8:fb:2d:1f:2a:78:8c:85:a4:
                    10:f4:78:51:50:44:35:a2:77:f6:20:c0:9d:eb:55:
                    ce:b0:4c:40:50:46:30:bd:06:01:5f:80:89:63:02:
                    19:a4:4d:9c:2c:fa:3d:50:d5:50:50:ad:dd:3c:a5:
                    08:4f:68:e9:66:a7:cc:f4:3b:06:a3:a7:de:29:9f:
                    d8:09:f6:76:3b:7d:e6:0c:e5:37:1d:c5:9f:b6:f9:
                    1a:3a:00:27:13:fb:3b:0d:0e:3d:5b:36:86:e9:83:
                    0d:2b:b6:b8:6f:af:1f:8f:80:6d:01:a2:45:da:af:
                    cc:d3:8e:72:95:45:c0:f3:90:4a:ce:25:35:c4:a9:
                    99:b6:6c:ce:64:b9:13:23:5e:d8:1c:c0:bf:af:e2:
                    42:79:eb:fb:34:02:f0:26:21:ae:5b:90:70:54:6b:
                    61:f6:05:ac:21:fb:3e:24:77:42:e8:5f:67:1c:ee:
                    58:94:71:8f:c1:ea:68:46:12:99:4b:58:26:06:4e:
                    20:37:2e:88:29:c1:08:83:2b:26:45:ff:39:71:aa:
                    64:44:c6:34:cd:84:1c:58:7e:e0:47:f8:41:42:4d:
                    6e:21:34:8f:6f:07:76:b2:34:21:2c:86:f2:5b:61:
                    03:b9:19:17:c8:18:53:a7:1c:77:39:21:d8:40:1e:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3F:2C:02:C2:FD:09:86:A1:18:38:34:17:4E:42:3F:40:74:EA:46
            X509v3 Authority Key Identifier:
                keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:eb:bb:ab:a2:1c:4d:92:e0:a1:98:f5:ff:9d:dc:5d:13:54:
         8d:d8:a3:07:53:a6:d6:3a:3a:fd:7c:67:42:04:5e:61:72:d0:
         af:7b:1c:05:45:a6:1c:fd:0b:5f:cf:37:40:92:1e:5f:13:b0:
         85:84:01:63:db:9a:8a:06:27:49:02:33:76:40:4a:b8:21:01:
         a1:66:43:71:9c:d0:d4:47:76:da:2f:ba:b4:00:29:54:67:3e:
         63:7f:92:3d:b7:8b:3b:9c:a7:48:97:79:a6:11:19:b2:f2:af:
         6b:ec:2f:c4:55:66:98:04:c8:47:e3:81:bf:ef:a6:67:6e:67:
         fb:7e:b0:5e:63:7e:fd:1f:0c:94:bc:f0:df:06:1b:2a:14:e9:
         a6:7d:b9:bf:52:ab:01:a3:f7:79:e3:6a:6f:1e:54:de:b4:55:
         b9:a1:eb:29:1a:23:34:8c:8d:51:ac:f2:c6:f2:64:69:1a:78:
         07:30:05:73:82:e4:29:b1:97:57:60:bb:96:ff:ee:77:3a:58:
         b2:2b:9d:9f:aa:7d:d2:82:6d:aa:c8:77:83:77:6b:c0:26:29:
         45:75:98:a6:fb:0a:b4:79:cd:15:f8:26:e0:1f:f4:4e:2d:66:
         dd:3e:0c:05:6d:94:29:22:c3:63:6a:28:86:fb:ce:bc:45:52:
         1d:fd:f0:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF
RUM5QkJCQUUwHhcNMjYwMzI1MDIxNDUyWhcNMjYwNDAxMDIxNDUyWjAYMRYwFAYD
VQQDEw02OWMzNDUxZC1kZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm9I/3VH4+y0fKniMhaQQ9HhRUEQ1onf2IMCd61XOsExAUEYwvQYBX4CJYwIZ
pE2cLPo9UNVQUK3dPKUIT2jpZqfM9DsGo6feKZ/YCfZ2O33mDOU3HcWftvkaOgAn
E/s7DQ49WzaG6YMNK7a4b68fj4BtAaJF2q/M045ylUXA85BKziU1xKmZtmzOZLkT
I17YHMC/r+JCeev7NALwJiGuW5BwVGth9gWsIfs+JHdC6F9nHO5YlHGPwepoRhKZ
S1gmBk4gNy6IKcEIgysmRf85capkRMY0zYQcWH7gR/hBQk1uITSPbwd2sjQhLIby
W2EDuRkXyBhTpxx3OSHYQB4XiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAg/LALC
/QmGoRg4NBdOQj9AdOpGMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw
NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1
NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2
Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAReu7q6IcTZLgoZj1/53cXRNUjdijB1Om1jo6/XxnQgReYXLQr3scBUWmHP0L
X883QJIeXxOwhYQBY9uaigYnSQIzdkBKuCEBoWZDcZzQ1Ed22i+6tAApVGc+Y3+S
PbeLO5ynSJd5phEZsvKva+wvxFVmmATIR+OBv++mZ25n+36wXmN+/R8MlLzw3wYb
KhTppn25v1KrAaP3eeNqbx5U3rRVuaHrKRojNIyNUazyxvJkaRp4BzAFc4LkKbGX
V2C7lv/udzpYsiudn6p90oJtqsh3g3drwCYpRXWYpvsKtHnNFfgm4B/0Ti1m3T4M
BW2UKSLDY2oohvvOvEVSHf3wYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:33 2026 by rpki-client