Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File:                     xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier:          7vbHSqeLm6uyYu2s0YKq62fcsanWwGO9Ll0Dz6Bq7iY=
Subject key identifier:   29:6F:0E:EC:45:F3:29:69:4C:E4:16:98:04:79:3F:86:C3:20:5D:02
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer:       /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number:          0119
Signing time:             Wed 25 Mar 2026 05:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 05:01:07 +0000
Manifest next update:     Wed 01 Apr 2026 05:01:07 +0000
Files and hashes:         1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: hUQ3Q+lrGP92IbVpKVQ8VANmLEro4uBx/qkuA3De8AE=)
                          2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: mfW/Qkg0MzRAXyBHrSlkZ0QHKIFcW/HURnHy5WY1eYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
        Validity
            Not Before: Mar 25 05:01:07 2026 GMT
            Not After : Apr  1 05:01:07 2026 GMT
        Subject: CN=69c36c13-ee78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:6f:b5:ac:74:1c:e5:76:8f:69:0e:64:f8:
                    f6:8b:a7:3a:96:9f:c6:de:72:54:82:39:41:0e:31:
                    61:c7:8d:95:ba:9b:58:9b:7e:39:b8:53:79:a3:3b:
                    60:2f:c3:e8:59:f0:2f:19:81:17:9d:25:46:37:fa:
                    2c:87:75:01:71:01:c9:a1:92:c0:32:66:db:cc:ba:
                    e4:44:79:69:a5:b1:92:fa:27:da:46:5f:d5:63:33:
                    cf:37:7f:73:89:49:e8:6e:bc:59:36:d7:b4:73:de:
                    f3:be:e2:87:53:3c:7b:67:99:28:47:bb:64:95:ff:
                    2e:c8:df:92:27:8d:33:bd:c0:ce:0c:6d:5d:7f:5c:
                    a6:92:92:ff:d6:f7:8a:69:fb:28:0b:b0:2e:c7:31:
                    32:99:b0:a2:4d:40:c0:16:aa:2c:34:7c:28:82:ec:
                    ca:31:9b:e5:11:72:70:b9:9b:98:c5:ab:8b:3f:57:
                    83:67:77:71:a3:62:a2:c9:71:60:94:0a:5b:9a:fc:
                    a3:d6:d1:0d:28:1b:bc:b8:d0:76:e2:9d:01:fe:77:
                    a3:6a:8c:92:d5:29:b9:3a:23:64:ff:6c:c1:a9:3a:
                    a0:5d:8f:87:23:1a:18:b8:5f:58:2d:1c:73:97:a1:
                    00:6b:bb:e4:d8:70:e6:d8:4a:95:b0:8b:44:c4:32:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6F:0E:EC:45:F3:29:69:4C:E4:16:98:04:79:3F:86:C3:20:5D:02
            X509v3 Authority Key Identifier:
                keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:42:e5:3e:e1:e3:fd:13:55:bf:52:39:52:2b:dc:be:99:68:
         a8:af:60:ca:e1:45:dd:af:72:7e:aa:c1:21:25:27:9f:86:86:
         be:6d:b7:96:3a:df:ab:e7:7a:74:ac:4f:a5:a1:54:60:7c:7c:
         1c:7f:53:21:20:be:a0:48:db:41:af:ef:36:ec:cb:39:e1:67:
         1d:fd:f5:1d:52:54:77:40:9d:29:fd:ec:bc:d9:29:aa:16:af:
         53:1d:9c:09:52:65:72:76:db:d9:75:f3:10:1c:e6:3e:7d:a6:
         76:85:c6:16:72:a4:7d:c3:6c:27:e9:98:2a:01:bc:00:9b:20:
         99:c6:7b:d1:2d:0e:6a:70:bd:ce:a9:80:b9:df:bf:36:14:de:
         69:a9:d8:58:02:23:5a:58:4a:ba:ab:67:d1:e5:42:3c:5a:51:
         1f:a2:f0:16:a7:26:59:82:f5:7c:5f:0d:a2:b4:f7:eb:f7:5a:
         0c:74:01:8b:be:6d:bd:21:30:5d:c0:b6:4b:14:e6:f9:81:e6:
         2c:7b:b7:3b:13:5f:29:cf:6b:26:2c:82:3a:c5:53:1c:8c:09:
         dc:5a:aa:8b:a6:fc:6e:2f:ef:f5:ce:8f:41:3e:6e:de:43:b1:
         85:31:6a:2f:66:2a:87:a6:34:48:86:1b:e5:c8:9a:e1:a1:80:
         dd:ef:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:41:33 2026 by rpki-client