Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          UJhZnLKae6njvesbylbbsr5syK9wXQ6wiph9mjsauVY=
Subject key identifier:   09:12:71:4D:D2:78:C9:9E:4E:75:A0:4D:CD:6F:3D:51:49:DB:6E:03
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0D37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0C6C
Signing time:             Fri 06 Mar 2026 18:42:52 +0000
Manifest this update:     Fri 06 Mar 2026 18:42:52 +0000
Manifest next update:     Fri 13 Mar 2026 18:42:52 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: Co/2eu1VHpDm0peDSokho3Hwk9/o+mz/WAHIMdHRxpU=)
                          2: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: bq9TzRhG0YcuxnkwLOhAfWs5GL/Qvk3+Q63cN6+9Ro4=)
                          3: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
                          4: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: rx1Mf7ylLJlz5TrZQMaxu72qnNGJnnaZIoeFSJobN+E=)
                          5: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
                          6: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: s+8+Ay/MDWEzNmYQjEi8P9yXENJTqx4r4dR7RY92skY=)
                          7: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: xoDpq08pk4J79jEIKFdCTmKgZjWM0ljw83Bh6A1frK0=)
                          8: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
                          9: 5164F13EDBD811F0A0A88CE756641951.roa (hash: eLZKuHsW1ycAr9Iq4696bBhI1gKyx3N1WwU1Y5PnRJ8=)
                          10: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: RcYolDaRAN1Hi//EmOTv5sFW3I9hLGGajXq2gFlI3o8=)
                          11: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: gHvNsWly8Kw30Typ48MzQXoDCYERYi0RW34Z6gmffVg=)
                          12: 52636904771911F083181320C4F9AE02.roa (hash: UAiNELXH70OL86XaWxZjrYCNqtPx4ilCRQebJzTfN3c=)
                          13: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
                          14: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
                          15: E3903588DA3311F082FD85DA8AD3641D.roa (hash: MfOj3lbGuO/G5TuCaMkDAViR5jscnY+4WI5jIiqpGsA=)
                          16: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: xx9TeHOBj2OiOI8r7wwibUAIIL4Fl8ddiQuAnrOI7w8=)
                          17: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 18:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3383 (0xd37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Mar  6 18:42:52 2026 GMT
            Not After : Mar 13 18:42:52 2026 GMT
        Subject: CN=69ab202c-201e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:c2:e1:f8:a3:59:ff:be:35:82:4e:ba:c3:
                    30:9a:4f:be:29:9a:f8:b7:62:d1:33:70:99:3a:4c:
                    15:81:c5:98:28:41:db:c8:27:64:14:f3:e9:dd:cd:
                    e0:88:42:e9:03:4d:77:8f:e5:fa:6a:1d:45:31:f2:
                    53:27:bd:b7:40:ad:55:66:43:85:26:66:1f:82:ec:
                    bf:1f:38:79:12:eb:78:dd:04:05:fe:d0:29:a6:13:
                    85:1e:60:14:95:bf:bc:59:52:97:e3:67:40:d3:bd:
                    e1:99:7f:a9:61:f7:4c:9d:b0:e6:14:61:19:1b:bf:
                    c9:ef:f1:3c:e7:50:a7:a6:2c:f5:b4:ac:b8:27:f6:
                    90:5f:c6:9a:34:53:3b:6f:b3:66:22:37:a5:21:e9:
                    79:97:67:22:29:b7:b2:85:a3:29:2f:8f:ea:e0:f9:
                    22:d7:51:77:40:9f:cb:9d:83:f0:45:c6:e5:da:1a:
                    da:f2:12:bd:31:00:7b:df:9c:e2:43:93:ea:c1:4a:
                    6b:28:81:9c:9d:a8:d2:19:a7:77:bc:bf:f8:80:5c:
                    e0:b1:93:56:5e:1f:58:9a:ca:e2:8f:ea:a0:95:fd:
                    d2:2c:a7:16:73:5a:df:96:8a:d8:ef:48:97:7c:94:
                    67:c1:38:64:ce:e3:e9:f0:a5:d1:db:d9:4a:85:21:
                    d3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:12:71:4D:D2:78:C9:9E:4E:75:A0:4D:CD:6F:3D:51:49:DB:6E:03
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:55:79:5c:1d:4e:8b:f7:41:cf:ed:c0:5f:b4:9b:69:92:af:
         93:1d:a8:05:c3:a3:8d:f9:a5:2d:3f:9a:e0:54:b0:58:12:30:
         9f:fa:21:0a:3b:bc:05:81:94:11:20:a9:27:6e:a7:e4:38:be:
         57:f1:18:75:35:b3:aa:a6:d1:6d:83:10:cd:88:08:5c:29:dd:
         0f:b2:97:7b:c5:c5:25:1c:ac:40:5f:31:12:82:ff:84:55:0c:
         ce:bc:39:5d:74:e5:b8:59:21:08:8a:5a:d1:c7:c7:3e:a1:1e:
         4d:fd:37:27:f6:69:7e:1e:08:82:24:68:4f:19:de:89:bc:63:
         2d:db:bd:b2:ff:e5:bb:97:98:e1:b0:1c:a1:51:ae:8f:28:55:
         aa:bf:0d:33:67:a5:bb:b2:06:28:e1:41:60:41:1c:25:97:28:
         b5:26:ee:3d:a9:0a:7b:fc:9b:3a:49:23:2a:75:0e:da:21:e9:
         f5:92:2b:e6:4e:f9:ee:74:ff:57:47:6d:1f:c0:d7:87:6f:64:
         d0:1a:d8:81:23:95:8b:5c:bc:96:7c:a1:1b:f8:de:d2:2e:d3:
         82:94:81:e3:c0:d4:97:28:3f:da:35:b7:72:6a:2c:ef:53:20:
         89:02:40:ad:1a:8e:27:fa:cf:74:50:2c:18:cb:e0:dc:91:8e:
         ac:0c:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:49:18 2026 by rpki-client