Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
File:                     1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json)
Hash identifier:          jujqH0B1BLXXs5qBcUYfKzpntAWwG8Qdk67P8l2KrXs=
Subject key identifier:   52:6E:1C:11:26:01:2D:35:01:CB:AA:8F:EF:16:76:D2:84:A5:75:5C
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Certificate issuer:       /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial:       06E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
Manifest number:          06D0
Signing time:             Tue 10 Mar 2026 21:50:16 +0000
Manifest this update:     Tue 10 Mar 2026 21:50:16 +0000
Manifest next update:     Tue 17 Mar 2026 21:50:16 +0000
Files and hashes:         1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: dXiIWEQ13G0EtT/jRvYpYmw5qjnIHvbbH/Ar3MMiYZ0=)
                          2: C7C9E3B6125111F1B8BE3F1A2A3D8C67.roa (hash: XjNUxvWdrN/f8UvJCjdCzDeTUbQlad9gZAT9Co3kYbc=)
                          3: C6D6364E125111F1B8BE3F1A2A3D8C67.roa (hash: 2s0kYzcxntnOC74EHeYBKILmLaGPsj8ZMironzxM9RM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
                          rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 21:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
        Validity
            Not Before: Mar 10 21:50:16 2026 GMT
            Not After : Mar 17 21:50:16 2026 GMT
        Subject: CN=69b09218-986c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:8a:38:78:b1:79:b8:1f:dc:d4:d3:d0:b4:
                    5f:5c:45:b6:2a:ea:5b:71:e2:3b:1a:57:27:6a:6a:
                    b4:f3:99:18:e5:5c:97:8a:03:0f:c6:f8:53:99:75:
                    76:7f:c3:f1:d3:bf:28:c0:fc:ee:42:a6:d6:0a:4e:
                    de:d5:0e:18:0b:d1:01:a1:c6:b8:9a:71:57:37:d8:
                    65:2d:97:a3:ea:b1:a0:dd:cc:46:f5:29:f7:31:94:
                    1d:66:86:0b:3b:7f:3e:67:dd:c2:50:11:82:94:03:
                    07:9c:c0:96:2b:28:1a:e3:a1:5e:e8:da:30:4f:74:
                    bf:86:a9:aa:83:a2:dc:48:ba:73:e0:9b:9a:9e:88:
                    0b:75:9c:de:f5:b1:e3:23:9c:f7:b1:be:d8:18:ea:
                    5a:c9:ef:00:6c:02:fa:63:5c:56:ac:39:d6:77:d6:
                    a7:cb:d9:43:2f:f7:24:05:83:57:04:cf:36:ec:e1:
                    d1:cc:33:c8:76:8f:ce:34:b2:e5:07:13:78:29:8e:
                    dc:e4:b3:ea:7b:52:31:0a:92:f4:4b:a9:c7:89:92:
                    27:b6:9a:f5:b5:9f:24:b7:37:45:d3:e0:c9:e4:ec:
                    92:4c:a3:14:9f:92:cb:26:98:56:9a:ea:5f:99:a0:
                    aa:10:dc:96:01:e4:f5:4f:c7:2b:de:b6:a4:b6:5d:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:1C:11:26:01:2D:35:01:CB:AA:8F:EF:16:76:D2:84:A5:75:5C
            X509v3 Authority Key Identifier:
                keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:45:84:8e:73:ef:28:1d:03:02:88:d4:76:48:4f:7d:df:d2:
         82:14:7b:5b:45:0f:21:4b:71:c5:dc:54:42:d7:71:46:de:2d:
         fa:7c:c5:98:27:48:0b:e4:42:61:79:54:f8:e8:ca:11:10:a2:
         a9:de:f7:31:12:5d:b3:cb:40:45:ac:6b:5c:7a:1a:92:e7:1d:
         15:6e:e6:72:d3:70:9e:80:85:f1:b1:6d:51:76:41:91:68:c9:
         8a:fd:4b:04:e9:78:bb:01:86:03:01:4f:e5:dd:f2:0c:a2:f5:
         eb:c0:4a:6d:2a:86:41:d4:52:de:c1:16:f6:9e:07:83:e8:16:
         27:65:86:35:87:a3:8c:5d:97:96:c0:f6:c6:7d:7d:e3:4e:44:
         8a:9b:5b:1e:d1:86:82:71:c9:f4:f0:78:83:58:7b:f8:69:87:
         21:3b:18:ae:7b:88:e0:54:27:46:c0:9d:dd:d6:b9:aa:36:3c:
         30:31:b9:bd:b5:98:71:0e:37:99:e0:5b:89:f0:44:36:ff:27:
         29:f0:d0:8f:41:55:54:e9:35:0a:90:b4:e3:2a:e4:29:c5:24:
         f8:a0:2b:b7:84:3e:f6:37:5d:c5:24:02:32:a7:48:04:ea:c7:
         ef:2f:ac:92:3f:ca:a2:87:28:bb:3f:89:a9:7e:97:26:eb:8f:
         f5:69:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:34:39 2026 by rpki-client