Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
File:                     44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json)
Hash identifier:          12Xzo/5d3Aj6P8VMBg3KaITZTHJj+TOZm5AbK1gJ9rc=
Subject key identifier:   72:C5:CF:B9:5D:35:6D:C8:C5:F2:4C:BE:0D:11:B8:4B:6C:A3:A1:08
Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
Certificate issuer:       /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
Manifest number:          DB
Signing time:             Tue 03 Mar 2026 06:11:26 +0000
Manifest this update:     Tue 03 Mar 2026 06:11:26 +0000
Manifest next update:     Tue 10 Mar 2026 06:11:26 +0000
Files and hashes:         1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: 1FrhX1lDU15ShYVjFn8Z7YBu6X22nKVg6AzamuPBNzA=)
                          2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: 7luqkxdAYhFDQ1cLdVYDxi4/1gyDCpg9yV33Rku64hI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl
                          rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
        Validity
            Not Before: Mar  3 06:11:26 2026 GMT
            Not After : Mar 10 06:11:26 2026 GMT
        Subject: CN=69a67b8e-10b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:28:16:95:4a:2c:52:c1:96:ae:cc:26:30:
                    80:29:4b:2f:04:6b:fe:40:42:67:44:a3:f2:27:14:
                    d0:ea:19:2f:43:49:c5:98:73:64:93:8f:e4:12:54:
                    bd:6c:d2:2d:f2:8f:5c:64:54:14:1e:e9:85:12:fa:
                    1f:f9:ba:81:56:d0:b2:95:35:67:2d:a2:cd:34:98:
                    df:35:8b:29:ab:19:88:0c:b8:95:08:9f:4a:88:34:
                    aa:f7:4d:f7:e2:aa:2d:43:25:c1:e5:e6:cb:0d:ca:
                    75:cf:88:e8:ab:e0:03:7b:32:98:38:8d:36:78:a7:
                    42:3b:18:e4:e8:5b:3f:cf:fd:cf:66:95:63:e9:f7:
                    67:ac:c8:0c:77:0b:be:fb:10:c3:14:30:ed:18:e7:
                    b2:75:50:e3:e0:01:f2:c9:b3:73:d7:69:61:52:fa:
                    a3:a9:22:b0:d7:8b:b4:49:0f:66:b2:2e:03:34:61:
                    93:df:1c:4a:ec:80:66:77:24:72:0d:64:b1:63:04:
                    8f:12:cd:dd:79:a1:2b:d6:90:85:61:a2:94:18:fd:
                    09:43:5d:b7:25:43:4b:31:15:13:5e:d0:66:d5:f9:
                    c6:95:83:4a:9b:ea:fc:d9:74:4a:55:fd:76:db:6b:
                    12:63:e3:3b:8b:f9:86:e4:d0:44:0d:1b:c3:d2:47:
                    39:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C5:CF:B9:5D:35:6D:C8:C5:F2:4C:BE:0D:11:B8:4B:6C:A3:A1:08
            X509v3 Authority Key Identifier:
                keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:87:f2:c0:32:89:5d:cd:56:83:76:76:bd:bd:4c:4d:8b:
         3d:90:fe:97:4a:d7:7a:e1:ab:ce:92:ab:0f:e4:7b:bf:20:b0:
         4b:8e:d3:15:a1:93:92:77:2f:68:d8:e4:95:63:0c:b4:98:9f:
         e6:bb:a6:d6:79:3e:12:0b:f8:e7:d0:e0:0f:70:fe:02:9a:5a:
         49:f4:8d:4f:ab:a5:7b:7a:98:4b:c1:32:da:a7:15:80:26:e6:
         95:12:a4:c9:7c:0f:2c:43:b2:8c:cd:64:18:f4:77:23:14:fc:
         ef:14:fc:b3:c4:ea:3c:13:90:a3:a9:28:60:a4:f3:66:6d:d5:
         ec:ea:52:66:aa:06:0d:da:a0:2b:0a:7f:0b:3c:65:42:86:84:
         c9:99:ec:fe:64:d3:5c:c6:a2:42:b6:64:dc:e4:73:16:d6:87:
         d0:77:da:b9:26:92:bc:0a:34:52:b5:6b:d0:32:3d:2f:a0:28:
         04:60:16:2e:c9:03:6a:71:dc:b4:ea:d1:c0:ec:b7:2b:27:87:
         29:6d:fc:00:b7:58:c4:e3:b1:2e:84:29:7d:bf:b6:a3:19:8e:
         ca:40:7b:b1:59:6f:fb:25:ea:68:3d:00:b0:c3:6c:43:af:82:
         00:27:9a:5b:6f:ab:b1:82:17:9a:17:49:c2:57:f7:26:b6:7a:
         e6:e8:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:36:17 2026 by rpki-client