Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
File:                     piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft (raw, json)
Hash identifier:          VeHQ+HaiV8J2Hx8dPJsu8n4C7iKw6ILtRchnnNU0e+Q=
Subject key identifier:   C1:F5:3C:6A:C9:E4:29:BE:A6:54:0E:B6:D0:8F:BF:0C:76:F7:F3:2B
Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
Certificate issuer:       /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
Manifest number:          2E
Signing time:             Tue 03 Mar 2026 08:20:59 +0000
Manifest this update:     Tue 03 Mar 2026 08:20:58 +0000
Manifest next update:     Tue 10 Mar 2026 08:20:58 +0000
Files and hashes:         1: piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl (hash: 3UM8FufXRtFMQfV5uh8qm7KgG6vv4d+zKC4wJTlOKq4=)
                          2: 276AF720D4EE11F09328C93FC4F9AE02.roa (hash: yvWe793LFDv60yfRRzGNrVWi5via5iRanXNLPGkIsZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
        Validity
            Not Before: Mar  3 08:20:58 2026 GMT
            Not After : Mar 10 08:20:58 2026 GMT
        Subject: CN=69a699eb-4ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:e1:2e:36:7c:24:b1:b1:5f:e4:d3:20:ab:
                    7d:ad:da:c4:59:c0:a3:03:d3:ca:31:57:44:a2:b1:
                    51:64:54:89:a6:ea:d1:ab:f2:a3:99:ae:0a:8a:f5:
                    84:3f:a8:0b:44:c0:9f:9d:69:1b:fc:25:e9:30:2b:
                    d7:27:c9:e6:eb:0d:30:1c:fd:de:51:78:79:47:1f:
                    01:22:f7:80:2c:40:63:27:a1:2f:3a:a3:49:44:be:
                    c3:8b:81:6a:88:c8:3c:21:f5:26:e2:cf:6a:c2:d1:
                    e6:4e:e8:63:34:8d:b2:72:f2:f0:dd:56:42:ba:32:
                    02:3e:7c:d7:8c:c1:7a:14:22:36:da:72:49:06:a0:
                    fa:a5:58:21:73:30:bb:2e:c1:1c:dc:a7:3e:c5:36:
                    73:cb:8e:a7:b5:e3:b4:d5:2e:27:15:db:f3:03:c0:
                    a7:dc:08:10:fc:c4:a6:10:cd:15:b5:da:cb:fc:02:
                    1c:c7:78:9f:5f:a3:2f:ff:30:d0:d7:5a:6b:dd:39:
                    87:d9:af:91:00:57:b3:12:8f:08:9e:49:a4:6a:8c:
                    e0:26:9f:2f:84:9d:a6:ea:d7:89:e0:6c:25:4a:90:
                    02:45:ad:84:39:a4:2c:6a:8f:60:c9:f6:ab:16:0b:
                    b3:15:aa:d8:af:1b:bc:12:12:b0:75:06:17:f7:b0:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F5:3C:6A:C9:E4:29:BE:A6:54:0E:B6:D0:8F:BF:0C:76:F7:F3:2B
            X509v3 Authority Key Identifier:
                keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7e:58:08:1f:6c:7c:54:bf:58:29:48:a2:dd:28:1a:cc:c1:
         fe:9d:78:2f:83:64:ae:06:ec:a8:f8:b5:df:07:9f:8b:d2:fe:
         46:72:ce:bc:f5:5d:2a:1f:83:e8:f6:5d:80:3e:7c:9b:04:8d:
         91:45:a4:21:75:78:bd:94:c7:05:7b:45:30:6e:ff:49:36:eb:
         71:ec:54:bd:d5:63:c5:c0:4f:b7:fb:ce:14:f6:4e:c6:70:a0:
         9b:9c:62:8a:01:2d:a0:45:95:8c:92:7a:48:e5:b4:af:de:02:
         08:1f:b4:64:3b:dd:17:fa:d7:32:5d:fd:03:21:e4:eb:8b:5f:
         6f:b3:2e:80:cf:10:8e:46:4f:c3:06:0b:f8:40:2e:42:7b:ed:
         cd:26:96:28:b9:f7:e1:ed:9c:73:46:68:b5:6b:de:1d:e0:88:
         a1:9b:0d:e7:90:4c:ce:ef:88:79:a6:9a:65:61:9c:b2:df:c5:
         e8:d0:1b:d9:68:a7:2f:fe:f2:c3:59:af:a0:ff:2d:93:3a:0e:
         b8:9b:f7:4b:dc:45:93:1d:7f:39:f4:b4:40:29:a3:76:80:93:
         74:16:23:bf:c5:e2:ee:33:e4:81:5a:d5:16:0a:06:9a:1a:c0:
         94:32:e8:c4:2e:17:b8:16:a2:9f:a0:97:a8:c9:56:e7:93:43:
         0a:fb:d0:15
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NzhCMzExMC8GA1UEBRMoQTYyMTZGQjFEOEJDNzg1NUY3NzA3MzVENDUxMjhBODdD
NzEzQUZDNDAeFw0yNjAzMDMwODIwNThaFw0yNjAzMTAwODIwNThaMBgxFjAUBgNV
BAMTDTY5YTY5OWViLTRlYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbXeEuNnwksbFf5NMgq32t2sRZwKMD08oxV0SisVFkVImm6tGr8qOZrgqK9YQ/
qAtEwJ+daRv8JekwK9cnyebrDTAc/d5ReHlHHwEi94AsQGMnoS86o0lEvsOLgWqI
yDwh9Sbiz2rC0eZO6GM0jbJy8vDdVkK6MgI+fNeMwXoUIjbackkGoPqlWCFzMLsu
wRzcpz7FNnPLjqe147TVLicV2/MDwKfcCBD8xKYQzRW12sv8AhzHeJ9foy//MNDX
WmvdOYfZr5EAV7MSjwieSaRqjOAmny+Enabq14ngbCVKkAJFrYQ5pCxqj2DJ9qsW
C7MVqtivG7wSErB1Bhf3sJurAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwfU8asnk
Kb6mVA620I+/DHb38yswHwYDVR0jBBgwFoAUpiFvsdi8eFX3cHNdRRKKh8cTr8Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEIzLzFFNTMwRkNDRDRC
RTExRjBCRjlGRTIxNkM0RjlBRTAyL3BpRnZzZGk4ZUZYM2NITmRSUktLaDhjVHI4
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcGlGdnNkaThlRlgzY0hOZFJSS0toOGNUcjhRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3
OEIzLzFFNTMwRkNDRDRCRTExRjBCRjlGRTIxNkM0RjlBRTAyL3BpRnZzZGk4ZUZY
M2NITmRSUktLaDhjVHI4US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQATflgIH2x8VL9YKUii3SgazMH+nXgvg2SuBuyo+LXfB5+L0v5Gcs689V0qH4Po
9l2APnybBI2RRaQhdXi9lMcFe0Uwbv9JNutx7FS91WPFwE+3+84U9k7GcKCbnGKK
AS2gRZWMknpI5bSv3gIIH7RkO90X+tcyXf0DIeTri19vsy6AzxCORk/DBgv4QC5C
e+3NJpYouffh7ZxzRmi1a94d4Iihmw3nkEzO74h5ppplYZyy38Xo0BvZaKcv/vLD
Wa+g/y2TOg64m/dL3EWTHX859LRAKaN2gJN0FiO/xeLuM+SBWtUWCgaaGsCUMujE
Lhe4FqKfoJeoyVbnk0MK+9AV
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:21 2026 by rpki-client