Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
File:                     oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json)
Hash identifier:          P7iWB0ra4WT36KMymiXd/FAf/O2pd2+zoezf8BUfTAY=
Subject key identifier:   2B:44:6A:A3:94:CC:8A:26:76:16:C6:71:E1:2A:E9:3A:F1:36:30:44
Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
Certificate issuer:       /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Certificate serial:       02FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
Manifest number:          02F9
Signing time:             Wed 25 Mar 2026 00:54:22 +0000
Manifest this update:     Wed 25 Mar 2026 00:54:21 +0000
Manifest next update:     Wed 01 Apr 2026 00:54:21 +0000
Files and hashes:         1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: 6Yfk6SzIVYjJ5OW1dDp8eEMLFVC14Gry9F8l44tdKm8=)
                          2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: F9Rj/XqATn1zywLlT+11oxByZBWlqSz3GPhD+W7p31Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
        Validity
            Not Before: Mar 25 00:54:21 2026 GMT
            Not After : Apr  1 00:54:21 2026 GMT
        Subject: CN=69c3323e-7be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:f6:fd:32:b2:e7:14:0a:dc:53:34:c1:94:
                    31:5c:c3:33:1b:82:99:44:af:74:1b:c0:64:50:12:
                    4a:d2:e7:e9:00:c8:36:e9:c2:54:e5:f3:3b:b3:36:
                    5b:b6:20:99:0b:e3:c4:3a:1e:7f:c5:e0:03:60:9f:
                    68:14:35:98:19:fd:64:c0:ed:9c:67:6e:53:09:94:
                    71:08:8e:ac:0c:8a:c7:a1:3e:0f:0d:ca:8e:10:f1:
                    7b:98:7b:02:db:30:76:d5:ef:86:8a:54:d9:93:13:
                    1a:48:16:bf:7d:17:8a:c6:51:68:95:d7:d5:70:f1:
                    47:da:83:1e:4e:2b:9e:60:7a:54:20:2d:48:a5:7a:
                    d2:53:98:f0:61:d0:af:e9:69:ae:2a:6a:69:3b:97:
                    d9:a2:ea:69:a7:c2:f5:41:9e:8e:4d:17:dd:aa:a7:
                    9f:be:c8:27:62:b3:1a:75:91:9e:b2:e8:09:c7:35:
                    51:f4:2b:a7:7a:1b:80:f5:e8:e2:20:92:66:f6:ec:
                    27:51:d0:a2:e1:78:7f:77:1b:c1:c0:18:d9:13:69:
                    15:4e:bb:bd:5e:21:14:65:f0:a2:a4:ec:ae:e6:5b:
                    a5:f4:a6:e4:63:f4:2e:5e:92:7e:24:9f:fb:4a:f2:
                    b6:57:b3:e8:69:81:3e:66:fb:1e:c5:44:7f:00:1c:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:44:6A:A3:94:CC:8A:26:76:16:C6:71:E1:2A:E9:3A:F1:36:30:44
            X509v3 Authority Key Identifier:
                keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:95:36:28:f5:4f:2d:dd:d6:b6:43:36:e6:2c:eb:0a:82:96:
         ba:7b:78:ee:20:94:84:c1:49:26:e5:a0:0c:a6:c6:5f:70:25:
         ca:ea:af:6e:c6:6a:f6:1d:40:c8:f7:f7:6f:98:9e:1d:ba:db:
         10:a9:ed:22:b3:c7:f1:03:d5:3e:0e:d6:6e:b4:04:31:29:b7:
         17:82:80:ae:5f:b1:51:97:7b:ba:16:57:c7:35:1b:dc:73:74:
         27:86:c5:97:72:dc:fe:ae:39:af:12:80:82:f9:de:8d:34:63:
         01:94:01:c1:1a:17:46:a5:d3:85:af:8c:5f:f1:20:56:b0:7f:
         1a:e1:1e:6c:55:0b:7b:70:3e:6c:a0:99:3c:50:57:03:ea:d6:
         8c:49:15:75:c7:ea:2d:90:84:fb:4e:59:9f:bc:dc:3e:a3:52:
         b3:5b:1d:9a:93:6a:56:e2:66:41:b2:10:03:4e:b8:f2:b5:df:
         87:35:9f:df:a0:28:68:fd:e3:14:05:1a:34:bc:8a:71:4b:82:
         cc:04:e1:b7:46:13:95:eb:8a:1a:95:f9:e3:b7:3e:36:65:97:
         8e:f4:d2:bf:3d:5f:7d:e5:ec:34:9d:86:2b:56:9e:a6:d4:0d:
         44:a0:27:46:26:cc:39:b3:f5:4b:89:67:46:0b:fe:d4:c7:3c:
         59:c1:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:48 2026 by rpki-client