Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File:                     rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier:          R/QSMYCMjoBFDqfEXCXHHnN5+HPPp+VLv/nLesNiIRY=
Subject key identifier:   08:E5:02:04:19:34:E9:31:EE:97:82:4B:A4:16:99:45:C5:B5:84:05
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer:       /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial:       0602
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number:          05A1
Signing time:             Fri 06 Mar 2026 16:12:19 +0000
Manifest this update:     Fri 06 Mar 2026 16:12:19 +0000
Manifest next update:     Fri 13 Mar 2026 16:12:19 +0000
Files and hashes:         1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: Up6ehWCQTC+QIMnmDDi85cgoNbwAWVuJw71GdvSwISo=)
                          2: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: SB23MH7egYKIQ17nCj+xHe+4JVPIgfw/s/SRgDFUT6Q=)
                          3: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: CFOJdfAQAwrs7SLJek/PgQnllBP7mK7ufRDP4foqiCw=)
                          4: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=)
                          5: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: /rUJMh30ecAZJtef/1j5fUYrkpMN5VcKfJkxNOsXqME=)
                          6: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: 4cXqlRer52ZWlIOSKIID7G64udphrDhp88IgkcR8MHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 16:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1538 (0x602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
        Validity
            Not Before: Mar  6 16:12:19 2026 GMT
            Not After : Mar 13 16:12:19 2026 GMT
        Subject: CN=69aafce3-a7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:14:e8:16:96:f1:33:a1:b2:b3:19:71:31:
                    81:5e:97:e2:85:f6:08:69:7c:c8:69:17:44:30:ae:
                    d4:96:0d:aa:dc:96:87:81:70:3d:96:5b:e1:fb:32:
                    3b:54:69:95:c9:07:2b:69:d8:55:53:bd:d2:cd:14:
                    63:ba:ca:bc:76:a8:89:ac:c4:8b:14:9e:c9:57:1b:
                    93:56:89:e3:c8:71:8c:16:0f:c2:9a:8c:00:84:40:
                    06:90:d6:46:cd:8f:59:b8:ef:fe:dc:53:ca:e0:c0:
                    59:c7:1d:37:62:29:f0:a7:d7:da:a0:7d:d3:ab:4f:
                    10:aa:f5:42:11:c8:c9:7d:2a:57:d0:4e:1a:4e:a4:
                    fd:6b:4f:43:99:c7:a0:40:21:9d:84:d2:66:0a:d8:
                    ae:70:ba:6f:96:a7:ee:f9:c0:37:54:2d:44:8e:a6:
                    db:f3:2d:27:6d:f6:b8:f6:3d:2f:8e:13:8c:8e:80:
                    5e:1b:23:5a:81:d1:19:b0:ff:09:f9:1e:64:d3:5b:
                    e8:39:a3:8b:55:0c:b2:48:45:27:35:4d:54:ad:c8:
                    a9:fb:ae:90:46:d3:af:c1:86:14:e4:57:51:1a:fd:
                    24:30:32:13:d6:88:20:10:5e:91:3e:58:50:4f:33:
                    4f:a1:36:34:a9:b7:c4:02:df:49:98:5f:db:9a:43:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E5:02:04:19:34:E9:31:EE:97:82:4B:A4:16:99:45:C5:B5:84:05
            X509v3 Authority Key Identifier:
                keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c2:32:a2:47:53:06:6e:e2:fc:79:79:b2:18:27:1b:96:c8:
         a7:02:57:fc:16:f1:ed:62:1f:0b:93:f4:4b:60:5f:2a:8c:d4:
         f7:3e:8d:2c:aa:3f:d1:09:ba:fe:0d:14:ea:75:fa:40:11:40:
         f9:7f:8b:96:46:3c:37:f7:5a:c3:b4:35:bf:3f:40:40:52:c1:
         51:e2:5c:5b:52:34:7e:93:dc:f9:7f:00:52:70:bd:34:c0:f6:
         bd:1b:b6:67:7a:bc:dd:f5:95:0a:72:98:fa:3a:e5:00:94:00:
         6a:a9:7c:36:29:d9:70:b5:dc:dc:14:78:e6:d7:c5:2d:d2:64:
         c0:16:9c:c9:c2:3a:6b:42:34:d5:26:15:57:19:cc:97:2f:e3:
         b3:2e:1e:08:05:71:8e:39:86:b5:10:3e:62:bd:37:9e:a9:22:
         be:41:01:5e:f0:27:10:73:68:7c:03:ef:13:7a:d9:bb:1a:10:
         66:a2:30:a3:8a:6a:96:48:7d:fa:8e:d9:6f:fe:f2:9c:38:a1:
         9d:e4:8e:57:ed:c9:e1:93:d3:7a:6a:9f:84:8d:71:13:05:40:
         9c:12:32:29:aa:de:5f:fd:95:bc:a7:4d:6f:ac:5f:fa:a9:bf:
         93:ca:22:50:ab:91:e3:40:ba:a6:31:e4:ac:19:68:21:5e:55:
         96:41:99:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD
NTUwNDUzQTQwHhcNMjYwMzA2MTYxMjE5WhcNMjYwMzEzMTYxMjE5WjAYMRYwFAYD
VQQDEw02OWFhZmNlMy1hN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1/cU6BaW8TOhsrMZcTGBXpfihfYIaXzIaRdEMK7Ulg2q3JaHgXA9llvh+zI7
VGmVyQcradhVU73SzRRjusq8dqiJrMSLFJ7JVxuTVonjyHGMFg/CmowAhEAGkNZG
zY9ZuO/+3FPK4MBZxx03Yinwp9faoH3Tq08QqvVCEcjJfSpX0E4aTqT9a09Dmceg
QCGdhNJmCtiucLpvlqfu+cA3VC1Ejqbb8y0nbfa49j0vjhOMjoBeGyNagdEZsP8J
+R5k01voOaOLVQyySEUnNU1Urcip+66QRtOvwYYU5FdRGv0kMDIT1oggEF6RPlhQ
TzNPoTY0qbfEAt9JmF/bmkN2+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjlAgQZ
NOkx7peCS6QWmUXFtYQFMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx
MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1
blpxT3NxNXkwOERGVUVVNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq8IyokdTBm7i/Hl5shgnG5bIpwJX/Bbx7WIfC5P0S2BfKozU9z6NLKo/0Qm6
/g0U6nX6QBFA+X+LlkY8N/daw7Q1vz9AQFLBUeJcW1I0fpPc+X8AUnC9NMD2vRu2
Z3q83fWVCnKY+jrlAJQAaql8NinZcLXc3BR45tfFLdJkwBacycI6a0I01SYVVxnM
ly/jsy4eCAVxjjmGtRA+Yr03nqkivkEBXvAnEHNofAPvE3rZuxoQZqIwo4pqlkh9
+o7Zb/7ynDihneSOV+3J4ZPTemqfhI1xEwVAnBIyKareX/2VvKdNb6xf+qm/k8oi
UKuR40C6pjHkrBloIV5VlkGZ0A==
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:35:36 2026 by rpki-client