Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
File:                     -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json)
Hash identifier:          Rb+kQDZ3aEQaQD5XmgUsyZs3BU4ztA4Ff+9D2Oqg5oQ=
Subject key identifier:   89:49:40:69:70:B5:BF:66:37:B9:57:0C:33:15:EA:0D:66:F6:E6:B7
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Certificate issuer:       /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
Manifest number:          E4
Signing time:             Wed 25 Mar 2026 05:45:49 +0000
Manifest this update:     Wed 25 Mar 2026 05:45:48 +0000
Manifest next update:     Wed 01 Apr 2026 05:45:48 +0000
Files and hashes:         1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: SVUoO+qex+mDmd5BaB6R/Yt076M/KWBlDXTN5jwlBPI=)
                          2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: h/SmLSS017YgGA7zYy4/07yQ0L9fFewbCCdQwU4sBFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
                          rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
        Validity
            Not Before: Mar 25 05:45:48 2026 GMT
            Not After : Apr  1 05:45:48 2026 GMT
        Subject: CN=69c3768d-fb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:72:7e:70:3a:47:b8:98:14:96:f6:16:04:
                    dd:d4:9f:33:dc:e4:17:82:54:29:ba:8f:21:58:6e:
                    83:36:a3:ec:a0:2f:11:b3:22:f7:5c:b6:4b:1a:06:
                    35:b5:7b:aa:4e:25:e2:e0:32:70:a6:82:d8:90:9b:
                    f7:5f:27:ba:e5:28:d2:1a:17:eb:01:aa:f2:d8:f2:
                    27:45:0a:96:bc:bc:19:bf:c0:ec:64:6b:5b:67:cc:
                    4e:c3:45:c2:63:a1:71:d9:ce:80:cb:8c:59:58:95:
                    fa:27:a2:69:f9:73:2b:c4:d7:b6:15:82:4a:b1:ff:
                    e0:b8:3a:f0:fb:d7:af:cf:87:b9:87:00:df:db:41:
                    ea:7d:df:4d:17:aa:58:3e:31:1d:ab:4c:98:49:eb:
                    6c:73:1d:db:05:8d:de:b9:80:04:bc:9b:81:d2:25:
                    ad:82:4d:10:ff:95:1e:78:76:c6:0d:49:76:ab:89:
                    cd:29:1d:b5:96:19:b2:3a:ea:f5:67:00:53:c9:36:
                    c2:93:26:a3:78:4c:5d:be:f1:68:b9:70:11:98:f9:
                    fc:e9:07:2a:f4:a9:60:c2:c8:ae:61:76:85:7a:e3:
                    b7:79:87:34:92:9b:9d:7a:88:4d:cd:a1:08:1b:6b:
                    cc:ec:b4:aa:1a:7a:ca:bc:ef:29:84:05:39:0a:06:
                    7c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:49:40:69:70:B5:BF:66:37:B9:57:0C:33:15:EA:0D:66:F6:E6:B7
            X509v3 Authority Key Identifier:
                keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d6:f2:79:6a:a4:f3:9c:3e:9e:99:11:3f:9a:cf:8c:d1:b9:
         fd:2c:67:43:3f:08:b4:a7:c6:ce:e5:91:5e:89:8f:16:e0:20:
         f7:67:be:46:54:b5:19:81:74:7c:a3:db:aa:08:be:8e:2a:e3:
         e6:11:8d:05:27:9e:ba:aa:d7:d1:83:80:be:e4:46:a6:f1:de:
         95:43:0c:20:67:6e:ad:38:5a:f3:c9:56:eb:68:1d:d3:a7:ab:
         68:54:02:19:81:16:68:86:f2:9b:0f:a0:87:14:40:56:7f:8f:
         fd:9d:48:de:de:72:05:bd:cf:0c:10:0c:8e:3d:e8:10:3a:a3:
         7c:5f:29:fb:21:b4:af:70:0c:a5:a8:c3:a2:bc:59:5e:62:a0:
         9b:14:5a:53:e4:e2:31:2c:51:91:ac:8c:54:f1:b5:59:b2:e9:
         b6:c8:aa:9e:e6:a4:b1:0a:99:ba:19:a4:4c:fe:74:64:13:51:
         83:d8:28:e4:a1:6f:c2:16:3e:42:eb:0a:9e:fa:b8:29:a3:88:
         8d:9f:a6:39:62:d0:8c:61:de:e4:82:cd:01:5f:d7:2b:18:fa:
         3c:e5:ed:e9:85:47:ed:b3:56:64:b0:0b:33:9f:a9:13:97:cd:
         fe:cd:b1:43:b0:76:25:c8:36:60:f7:2e:bf:c9:d3:10:5f:75:
         11:ba:d5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:29 2026 by rpki-client