Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
File:                     vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json)
Hash identifier:          Ds5cRBIF3Zpq9t3jeBtUGXND8Xvevpxxz7nC8PAroZI=
Subject key identifier:   EB:91:4C:B6:72:2C:31:3F:76:32:A7:0C:2E:9E:9D:1B:48:96:0A:A8
Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
Certificate issuer:       /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Certificate serial:       02E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
Manifest number:          02DB
Signing time:             Wed 25 Mar 2026 01:00:09 +0000
Manifest this update:     Wed 25 Mar 2026 01:00:09 +0000
Manifest next update:     Wed 01 Apr 2026 01:00:09 +0000
Files and hashes:         1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: ZPBooPFNO8n1IgZxjPof6Y4pHxaYntC+Rl94aXO40gw=)
                          2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: /BvQ6kvIEgBffI02nHSKZcn99+fjwqt27ykwaYqA3zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
                          rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
        Validity
            Not Before: Mar 25 01:00:09 2026 GMT
            Not After : Apr  1 01:00:09 2026 GMT
        Subject: CN=69c33399-571f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:3a:72:57:08:fe:b5:20:12:21:2e:0d:50:
                    9e:ef:b2:b1:74:04:a1:9e:33:0c:ad:45:27:00:b8:
                    19:f2:99:f1:52:6b:c5:e4:4e:ae:98:62:a9:b0:6b:
                    08:bf:1a:13:98:f1:dc:9d:89:d6:ac:10:a3:af:90:
                    48:e5:8f:f7:eb:59:9b:a8:ed:d1:4e:9f:0d:3c:9f:
                    ae:b8:6a:5e:c8:66:92:9e:5f:fa:2f:92:61:c1:d6:
                    a1:32:79:5e:ba:7b:4e:42:d2:bd:34:25:2a:3f:82:
                    53:23:01:c0:37:d7:e4:50:81:5c:e3:f4:dd:db:83:
                    ab:27:19:b6:b2:5e:b0:17:f7:01:86:95:48:54:51:
                    37:d2:de:80:94:33:a5:c6:e2:34:97:a1:7a:ff:ba:
                    01:b2:18:e6:44:f5:04:ff:02:b9:1f:6c:9c:da:a5:
                    33:92:14:49:b2:79:0a:9f:ba:d9:0c:cc:4b:1f:dc:
                    be:f2:b5:b9:56:8a:a9:74:7c:c1:6c:b3:e6:6e:01:
                    b9:d4:ee:39:5f:a0:0c:ae:16:1b:48:3c:c5:c5:f4:
                    08:a3:33:7d:2e:80:cf:bf:7e:7b:4f:19:13:4c:75:
                    6c:dd:16:d9:4c:79:f8:33:a6:1a:b8:67:c4:76:23:
                    8d:80:69:89:22:1b:96:37:e5:97:ea:4c:83:88:49:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:91:4C:B6:72:2C:31:3F:76:32:A7:0C:2E:9E:9D:1B:48:96:0A:A8
            X509v3 Authority Key Identifier:
                keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f7:7b:b7:6a:99:ae:08:ae:3d:69:b5:88:96:76:24:4b:f9:
         bb:f3:21:40:72:9d:71:a6:5d:53:bc:9d:48:58:fa:5b:3f:31:
         20:2e:f6:9d:75:b4:75:c6:75:69:53:e4:49:5b:6f:8f:cf:f0:
         43:cf:91:c1:c7:95:bf:22:53:4f:5f:0b:24:22:68:3d:9d:ef:
         ca:6b:41:fc:1e:13:2b:cb:d8:43:93:36:1e:69:ff:19:fc:1c:
         b7:55:6c:e4:d0:46:67:a3:95:58:3f:a4:0a:70:84:5a:b0:8d:
         08:03:e6:6c:c8:5e:80:61:a2:5a:cc:e7:11:90:e8:1e:6e:4a:
         40:35:89:c3:00:f9:d1:9b:39:31:f4:e6:0a:c9:7e:7d:79:4d:
         99:86:e3:b5:58:8e:56:13:13:18:ea:25:37:41:f5:71:8d:aa:
         a0:1e:bc:51:c1:93:b7:9f:fd:dd:85:a8:ec:44:70:6d:4b:a1:
         e2:07:da:39:0e:9e:66:f8:a1:ab:f0:39:9a:c2:49:7e:3f:56:
         dc:b5:01:69:0f:ad:04:0e:35:ef:4f:c8:46:d5:d2:89:7d:16:
         b3:51:a1:ed:e3:0c:a9:93:c5:84:5e:a1:e9:b3:8b:8c:96:3c:
         bf:52:b1:cb:76:9a:c1:42:09:3c:27:ec:22:93:0f:d4:f3:de:
         7b:2b:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:47 2026 by rpki-client