Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
File:                     90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json)
Hash identifier:          kzdyZBjP8GEVa4MtHUFyxanQCPmNy6uwkEP5E57Xw6M=
Subject key identifier:   26:60:49:38:87:17:38:35:65:E4:2B:C7:89:EC:2B:37:98:73:91:9F
Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
Certificate issuer:       /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Certificate serial:       0258
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
Manifest number:          0252
Signing time:             Fri 27 Mar 2026 01:51:28 +0000
Manifest this update:     Fri 27 Mar 2026 01:51:28 +0000
Manifest next update:     Fri 03 Apr 2026 01:51:28 +0000
Files and hashes:         1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: Pq2X8YnQBN4WDHtyFdY5N+Dd09rTVmnUdx5zd+W06Gg=)
                          2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 6qNNz/jU6Jc8rG9yGhVLuObMTM5ias6oQqU63sjwttY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
                          rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
        Validity
            Not Before: Mar 27 01:51:28 2026 GMT
            Not After : Apr  3 01:51:28 2026 GMT
        Subject: CN=69c5e2a0-7a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:0a:e9:b8:3f:52:65:71:70:8e:71:88:64:
                    f8:c0:0c:dd:17:57:ba:95:2d:f3:7d:13:cc:25:5b:
                    bb:d0:8b:31:20:78:0c:c7:64:76:be:5e:60:f8:ec:
                    78:14:bc:39:b1:53:fc:bc:35:a1:b2:b8:54:d8:a5:
                    42:10:6f:df:9c:1a:3d:b9:2c:c4:28:22:a2:6e:78:
                    e2:d9:26:2b:b7:86:2e:0d:65:a3:d5:bb:bc:ab:03:
                    39:18:b0:36:dd:4f:78:35:92:8c:0c:9b:b2:1a:10:
                    af:56:96:50:44:3e:2e:64:82:07:01:b7:2e:6e:f8:
                    ce:7a:6f:a3:87:d4:89:63:6b:cd:08:78:8e:c5:b5:
                    de:30:77:2b:e1:47:81:9d:20:21:db:03:3d:46:6f:
                    56:c5:3b:bb:3b:cf:a0:e7:39:7f:81:71:de:1b:7d:
                    9d:fd:13:70:9d:63:e7:1d:ac:2b:67:04:65:15:1a:
                    b2:1f:a0:3d:6e:ad:10:96:6f:0a:73:d6:96:51:5a:
                    7e:47:64:57:b3:54:e1:45:b7:5d:9c:a8:37:76:f4:
                    ac:39:42:0b:70:59:35:25:04:98:ab:27:15:34:b9:
                    8b:28:28:84:31:1b:f6:bb:e1:a7:9a:cb:d6:f7:d6:
                    6e:f3:fd:0e:bf:ab:d7:97:a3:e5:60:28:01:25:1c:
                    30:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:60:49:38:87:17:38:35:65:E4:2B:C7:89:EC:2B:37:98:73:91:9F
            X509v3 Authority Key Identifier:
                keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:36:6f:24:c9:ee:4c:7f:17:26:6b:9a:6d:c6:fd:7c:7a:
         f2:44:5a:18:9b:e9:30:7a:c3:7c:9b:c4:92:c9:0f:c0:07:3f:
         fe:f3:b0:9b:4c:4e:22:1c:3b:d8:67:65:49:68:e5:6e:8b:b7:
         63:24:fb:65:f6:c2:da:be:98:62:81:a8:91:e7:1f:99:63:bc:
         40:46:c5:6a:63:41:8d:58:a1:37:52:d6:da:a8:3b:cb:73:d2:
         61:c9:57:92:6e:e7:ca:eb:15:21:09:b9:2f:9a:c0:6d:38:90:
         bf:f6:14:42:24:31:5d:64:6c:b0:16:50:ce:e3:06:18:7a:03:
         b2:80:15:aa:7b:2b:9e:8d:9a:b0:d4:85:a4:cd:e5:17:b3:db:
         b0:7e:5a:f3:da:34:28:dc:28:7d:6d:d1:a3:a7:d2:6e:bc:48:
         d4:e0:2e:55:dc:f0:42:ca:dc:bc:3a:17:e9:65:bc:eb:4b:55:
         ca:8a:b7:61:79:7f:56:d4:ea:be:1b:08:a1:af:01:c2:14:39:
         72:85:05:aa:97:6d:07:58:87:29:f7:bb:6c:57:e0:f3:36:59:
         05:1a:91:bd:87:29:7c:ff:96:7b:9f:5e:6b:02:c5:b9:ee:64:
         de:27:a0:97:70:37:ea:ab:67:cc:6c:e1:89:3b:ce:a6:c1:bc:
         24:bc:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:51 2026 by rpki-client