Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
File:                     kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json)
Hash identifier:          QmSqQ/W8Q9AlCREaNfNyjIEOnTsnlk4BJ90K2NddeM8=
Subject key identifier:   B6:27:29:4A:80:64:BD:17:84:CB:DB:F8:DB:AE:AB:91:24:43:4B:2E
Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
Certificate issuer:       /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Certificate serial:       0880
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
Manifest number:          0877
Signing time:             Tue 24 Mar 2026 20:23:17 +0000
Manifest this update:     Tue 24 Mar 2026 20:23:16 +0000
Manifest next update:     Tue 31 Mar 2026 20:23:16 +0000
Files and hashes:         1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: jBlv2AlXIH/zpyNFKg9NUEweQIuWWy45OPMETv/Dvn8=)
                          2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: Zu7ovE1EUW36D/gzrtGv9a6ZOHHzmdXPGruHnQFEs4E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2176 (0x880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
        Validity
            Not Before: Mar 24 20:23:16 2026 GMT
            Not After : Mar 31 20:23:16 2026 GMT
        Subject: CN=69c2f2b4-54f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:d6:86:ff:20:9d:fd:6c:3c:7d:9d:9e:a8:
                    eb:4a:f1:d8:fb:8b:08:b6:ca:25:81:d4:33:dc:97:
                    d0:36:c2:c9:4d:e1:b6:9a:69:6b:8a:84:39:aa:8e:
                    46:b1:eb:10:ac:fa:fc:93:c8:19:55:53:4a:36:e6:
                    48:a1:8d:d9:79:67:eb:57:12:eb:90:42:a9:c6:54:
                    1d:1d:1b:20:a6:71:08:f7:bc:a3:32:a3:3b:a9:69:
                    b4:40:13:43:de:4e:e7:45:18:af:29:15:3a:95:8c:
                    e0:90:a3:96:08:f9:07:d2:19:37:57:9e:a1:4a:45:
                    18:29:1f:e2:bd:48:b6:50:ec:14:02:60:ea:34:f9:
                    90:df:14:bd:ca:cf:ae:56:bb:1a:3c:f6:ca:93:52:
                    7d:3c:1b:ee:8a:de:0f:09:f3:98:83:6c:1d:96:b0:
                    55:3a:3a:94:81:b2:f2:1a:c8:69:76:47:56:56:75:
                    94:c2:49:b8:2d:ac:dd:cc:e0:1f:9d:fb:a8:61:30:
                    91:7d:9e:36:2c:af:e0:09:f2:e3:2e:51:dc:2c:81:
                    90:51:9c:ad:46:2e:42:82:e9:b0:18:58:56:b1:19:
                    bb:74:ef:e6:c2:63:00:a1:c9:ee:08:1d:1f:56:fc:
                    aa:01:eb:82:21:84:3e:36:df:42:99:03:c2:7b:f2:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:27:29:4A:80:64:BD:17:84:CB:DB:F8:DB:AE:AB:91:24:43:4B:2E
            X509v3 Authority Key Identifier:
                keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:dc:4f:7b:22:2d:3e:a6:24:30:4d:3f:42:06:8c:64:50:29:
         b2:2b:c0:b1:ee:75:29:59:69:2a:aa:b7:74:33:e1:7e:01:f4:
         c3:2f:f5:89:20:1c:5b:7e:2e:6c:6e:34:2f:17:f4:3d:ef:c9:
         1b:5a:3f:03:d7:ca:7f:89:7e:6a:58:25:a3:60:73:5d:86:12:
         70:4e:0a:f4:dc:eb:78:f8:c7:3a:59:0c:3a:06:8b:e4:81:94:
         0c:cb:fd:75:e9:48:0c:7f:50:11:2f:6e:31:54:b5:bc:a2:70:
         4a:ff:b1:22:39:f0:e3:33:ce:d3:2f:95:dc:0e:97:b0:7b:51:
         55:cd:0b:6f:53:1c:a1:5f:d9:b8:98:5e:3e:6e:56:1b:5f:d4:
         de:df:43:9e:b4:55:75:a9:77:69:00:d4:6e:25:e1:76:79:37:
         e7:7a:73:1b:99:b3:c9:a7:bc:6a:81:8f:1f:4c:31:46:ab:d9:
         0d:c5:1f:49:10:2d:9a:29:f6:59:49:51:e2:7f:b5:23:88:0c:
         77:72:f5:8a:15:19:16:5b:8d:38:1d:c2:56:ae:4d:d0:80:2b:
         ae:dc:63:44:54:6e:1b:8e:4a:d3:d6:81:21:87:df:dd:1b:85:
         d2:cf:10:b4:56:8b:8a:cb:a1:28:73:cb:d8:c8:7f:7e:4d:26:
         5d:53:ea:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:10 2026 by rpki-client