Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
File:                     e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json)
Hash identifier:          YJR8vQ37L5ehDe0bTHBQrNDgu6Yy+bb9AEbK3e5RaIc=
Subject key identifier:   D4:1F:09:AC:76:52:1B:96:B4:BF:AB:F8:8B:C7:18:73:79:B9:24:4F
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Certificate issuer:       /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial:       0434
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
Manifest number:          042B
Signing time:             Wed 25 Mar 2026 00:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 00:01:25 +0000
Manifest next update:     Wed 01 Apr 2026 00:01:25 +0000
Files and hashes:         1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: uWSpkT3JxO5GlneJAzZ5jFD6q8sWq3cZiuWR7JE9gb0=)
                          2: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: ewFG9f1A1EcDgaPSb2+JVSwRlChjjJB/i/qV3kUsLPQ=)
                          3: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: NDb1B6PZCJBf2fRK/qRZGkVfT4s79ZM1HP5X452K/f8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
        Validity
            Not Before: Mar 25 00:01:25 2026 GMT
            Not After : Apr  1 00:01:25 2026 GMT
        Subject: CN=69c325d5-ffe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:9c:bc:d4:86:23:6f:0d:fa:a5:44:8a:49:
                    be:f5:4e:9b:34:71:33:45:70:5a:5b:9f:78:83:a5:
                    6b:d2:db:91:b4:76:bf:a5:b6:3c:6c:1c:3b:22:63:
                    27:be:54:da:0e:a4:3c:44:04:09:3a:00:15:87:03:
                    09:27:99:b4:81:87:82:80:86:49:f8:ee:f2:44:4c:
                    18:14:fd:1c:04:80:53:7d:5d:76:c6:09:c8:06:1d:
                    37:69:2c:98:2e:bd:de:5a:ac:32:f9:2b:07:37:07:
                    80:f5:0e:be:fe:06:6e:1b:eb:7a:3b:ad:67:d2:c3:
                    a6:8f:b4:9e:09:97:12:62:93:29:bd:78:e3:7c:b8:
                    b3:72:2a:79:b2:15:16:14:29:97:50:eb:00:76:4f:
                    3a:9f:14:68:f2:63:5f:a7:cc:9b:9c:d2:f6:4a:5e:
                    47:aa:99:77:88:5a:09:48:3c:2e:1c:a4:35:5c:f5:
                    ba:97:79:e4:4e:ca:ef:6f:5c:cb:d8:63:31:30:a0:
                    3f:86:c0:34:59:37:56:ff:9c:85:49:20:e2:0c:b5:
                    ab:a5:72:68:3f:7a:08:23:75:44:ef:40:6c:df:91:
                    3f:07:06:4f:c9:eb:84:9e:3f:2d:18:8d:88:a1:ea:
                    93:10:37:8c:91:39:05:84:4b:33:28:bd:c0:62:f6:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1F:09:AC:76:52:1B:96:B4:BF:AB:F8:8B:C7:18:73:79:B9:24:4F
            X509v3 Authority Key Identifier:
                keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1d:75:94:08:e3:73:7f:0a:05:e5:a8:d7:c2:b7:c6:6f:43:
         a0:0e:4c:c8:16:75:3f:8c:a3:86:bf:2b:26:8f:6a:59:fd:5b:
         26:52:3b:cf:d8:4c:ec:0a:41:ce:ec:c2:12:ed:27:13:87:13:
         27:96:16:f8:99:5e:6a:e1:81:0b:13:0c:1f:21:d7:e1:f5:d5:
         18:9d:cf:7f:9a:93:52:a9:e5:11:de:07:9d:04:ed:6a:51:ed:
         3e:e2:4d:4f:83:81:2e:b0:f3:68:1b:43:d4:c5:06:2c:cc:5f:
         09:3e:b8:d2:65:29:30:43:ef:1e:9b:8b:30:6e:27:29:50:9b:
         ec:dc:f6:db:17:cd:f1:09:ab:40:59:11:58:68:c0:02:1f:c9:
         bf:a7:07:b6:49:dc:1c:03:c3:50:7d:f8:89:d7:67:d3:78:4c:
         b4:b6:b6:d6:1a:02:f0:9a:30:05:6c:df:2b:bc:7c:76:6a:07:
         fa:a6:20:e9:34:7d:c9:14:0a:de:eb:7e:44:22:e0:18:9c:85:
         a1:f6:5f:e5:a2:58:8b:ce:ce:bb:72:4f:57:81:1a:09:7e:36:
         f1:9d:ed:50:5b:53:98:43:f3:01:a5:1d:3f:53:83:d0:0e:09:
         04:30:c1:ef:04:eb:c1:0f:12:24:13:cb:f7:39:8d:b2:e6:f0:
         d6:8e:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:17 2026 by rpki-client