Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File:                     aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier:          x2R+CRF7whuLbAegZ5xSQGELKOGVccgvcFa/laEnt+o=
Subject key identifier:   72:3E:67:E1:7B:20:86:1C:09:13:5A:F2:39:E6:4A:20:D3:6D:F1:38
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number:          0246
Signing time:             Sun 29 Mar 2026 02:44:05 +0000
Manifest this update:     Sun 29 Mar 2026 02:44:05 +0000
Manifest next update:     Sun 05 Apr 2026 02:44:05 +0000
Files and hashes:         1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: uOflhtPyGpu9z3GsImkSp6GfQS9oNfdQcc2KDGIMDZI=)
                          2: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: wtaIxTF17d8IiemG3sWgy0ofBOn5zvPTqbrlTJWPses=)
                          3: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: t3iwawjGJ56AujlNR7I280077YB+jhEWT3pLtX6G6h0=)
                          4: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: GKfJ2kB3yXKiTx70mXKirnJ5shWw+x/l7CpoEVzirXk=)
                          5: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: hy3xSvTP7O3mbzfHFNsYWB6zvGiymVdeaKb6AgSQN3E=)
                          6: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Oi3EWJoEgd9DWmEEG+iX3qCZVJDhp6GEs5+/XmAJvSc=)
                          7: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: 4RuwvlEUfIsojOEJPNkdcqMMKDfzfms7bbjFDB3xQI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
                          rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 02:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Mar 29 02:44:05 2026 GMT
            Not After : Apr  5 02:44:05 2026 GMT
        Subject: CN=69c891f5-3876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:93:1c:5b:1d:85:2c:97:c2:82:6f:72:a3:
                    91:fa:6b:42:9a:95:73:da:cb:e0:5d:24:1c:42:dc:
                    69:63:8e:65:dd:72:12:57:3c:ad:ec:62:e9:6f:18:
                    04:6d:0c:0c:e3:4c:4b:40:18:35:5d:cc:7c:ba:04:
                    1a:a6:77:79:dd:3e:cf:70:e7:b2:6f:28:f7:07:8a:
                    e8:55:ab:74:e9:c4:8b:b6:ac:b2:f9:ce:76:1d:8f:
                    89:a4:8e:18:f3:8e:74:20:7a:72:81:e0:6d:c0:0e:
                    ce:a3:de:16:81:81:0a:7e:ef:87:34:e9:41:69:c1:
                    94:91:b0:04:42:02:0e:4c:0d:80:b4:0e:2a:2f:b5:
                    27:88:6c:88:5b:fd:8f:3a:51:01:e4:cc:5b:80:eb:
                    0a:05:c8:34:f0:5f:d1:63:f2:b7:96:85:60:db:a8:
                    52:e1:92:d3:3d:01:24:5a:ab:32:df:e2:dd:6e:a0:
                    4f:bd:e4:ec:e0:f7:b8:b1:08:a4:6b:3d:74:f9:5b:
                    24:b2:06:09:64:70:56:ad:05:ab:26:c7:c7:7b:37:
                    b0:5e:1f:09:bf:b2:99:52:d8:72:24:22:eb:9b:6c:
                    ab:df:72:4f:7f:5b:f9:4b:d2:c3:a6:d0:7b:f6:72:
                    89:dd:a3:97:7a:c3:ed:d9:be:3e:4a:fb:79:2a:2c:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3E:67:E1:7B:20:86:1C:09:13:5A:F2:39:E6:4A:20:D3:6D:F1:38
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c2:ea:ed:b1:62:d4:88:f3:10:64:3f:8c:72:72:62:82:02:
         3b:e4:46:f0:41:17:0e:29:a1:dd:dc:e9:1b:20:7c:e8:54:56:
         a6:17:55:cc:a2:4d:51:13:a0:a1:de:ca:3e:29:eb:c2:14:3e:
         64:da:70:6a:c0:68:96:cd:0e:fe:31:35:5c:4c:4f:52:22:5e:
         d5:38:2e:59:f4:ab:28:43:33:27:fd:52:ca:c5:8d:8f:ff:f6:
         2c:20:7b:33:5a:6e:06:86:3f:b5:2f:0e:40:fb:5b:8c:45:3d:
         07:2d:de:d8:b7:92:7c:88:04:b8:c6:71:ba:ce:10:f4:78:14:
         54:f9:da:66:a0:fb:fc:d2:7d:ac:54:63:3b:e3:c6:59:00:84:
         b9:62:3f:78:2b:32:32:d0:88:3c:e5:d1:7e:39:ec:b5:93:62:
         1e:f4:d9:8e:8a:7e:c3:b6:64:3f:11:e5:31:b0:4a:70:54:f7:
         6d:3a:e5:4b:44:96:4a:36:8b:86:15:07:c8:81:64:3f:a9:2c:
         d9:da:a6:78:94:a8:8c:26:36:2a:9c:53:88:2d:b1:eb:8a:69:
         f7:e3:36:59:77:10:56:22:df:2a:df:99:e8:bf:46:a4:dd:3b:
         e2:76:8b:27:e4:e6:82:b2:55:99:f0:3a:91:9f:64:c8:1d:54:
         0b:b4:f6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:35 2026 by rpki-client