Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
File:                     83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json)
Hash identifier:          55rZyeHzjXkKV1UMmw25JUAeY1FdpkTzzuf7hfEGzr0=
Subject key identifier:   A3:0C:6E:38:3A:50:F4:8B:0F:53:67:AD:28:EA:0A:A3:61:E3:F5:1A
Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
Certificate issuer:       /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Certificate serial:       0A1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
Manifest number:          0A12
Signing time:             Thu 12 Mar 2026 19:31:12 +0000
Manifest this update:     Thu 12 Mar 2026 19:31:12 +0000
Manifest next update:     Thu 19 Mar 2026 19:31:12 +0000
Files and hashes:         1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: J6irx7JnHaYmvMORsCEl9ESWxI1Ltp76SiE0PUSE1M0=)
                          2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: ouYBwpfCXuAbXe6I0vrvzKSbU872/FUx3W+kR5PDwWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 19:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2589 (0xa1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
        Validity
            Not Before: Mar 12 19:31:12 2026 GMT
            Not After : Mar 19 19:31:12 2026 GMT
        Subject: CN=69b31480-e74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:cc:6a:91:9e:66:5d:a2:a8:c5:3b:66:69:
                    62:c8:38:fa:c2:df:ac:73:e1:12:67:4f:8b:94:58:
                    7b:eb:3c:08:45:04:d9:a9:b2:85:73:6f:fc:86:f8:
                    4c:c7:4f:6e:f6:02:b3:81:d6:a8:01:4c:11:bb:c9:
                    40:5f:ea:62:ec:3b:71:07:48:ce:ef:5e:50:b9:10:
                    de:4d:d3:a5:0d:d3:d3:78:b8:e6:27:d4:6e:35:72:
                    50:b6:f9:cd:5c:9c:4b:02:3b:65:a8:90:21:42:46:
                    b2:84:e2:4b:94:b7:84:20:03:54:c4:9c:f0:61:a6:
                    55:f6:ce:53:84:3a:2c:96:50:b9:a3:cc:5f:1e:3e:
                    f1:1c:6b:e6:db:af:61:18:e0:a0:67:ee:26:25:4d:
                    3f:26:18:3f:9b:26:d9:76:81:e1:95:6d:68:13:19:
                    65:c3:11:67:c7:66:b8:77:a1:6e:a2:ba:83:84:b9:
                    65:e8:77:06:ac:d5:4e:bc:ac:aa:83:de:d6:01:35:
                    43:fe:55:7e:5f:cc:25:d9:ef:79:8c:1f:3a:64:f5:
                    3c:3c:90:38:f2:5f:7b:c6:f2:68:2d:27:06:35:85:
                    68:8b:6c:8a:7b:aa:9a:2a:94:bd:b1:46:8b:b0:e7:
                    7d:9d:7d:83:61:d7:9d:3b:93:12:d0:c9:f2:fb:53:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0C:6E:38:3A:50:F4:8B:0F:53:67:AD:28:EA:0A:A3:61:E3:F5:1A
            X509v3 Authority Key Identifier:
                keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:81:92:eb:98:8f:0f:90:88:56:e0:0d:b4:66:9a:e1:15:
         59:90:53:95:92:75:8f:3d:90:71:7f:30:78:96:39:a2:58:3a:
         53:eb:68:62:a0:1c:cf:57:e0:82:a3:11:99:b6:b7:71:b0:96:
         5b:d0:bf:0b:cc:b9:40:5b:16:2b:89:90:6e:7e:72:ae:97:41:
         41:65:56:1c:be:63:e5:18:e1:3f:fc:88:06:fe:f4:ac:56:e5:
         cf:55:0d:a5:27:a0:ae:94:2e:ff:04:b8:10:59:f0:2e:ac:67:
         4f:fb:a8:24:bc:9b:c9:ce:52:56:70:ff:d3:97:b7:9f:d8:80:
         76:25:61:3b:7e:c9:90:11:13:39:32:23:7b:db:8e:06:fa:55:
         a2:f2:f6:a4:c9:85:de:19:ae:59:94:4c:9e:5e:d6:59:9a:d9:
         d2:c1:03:d5:ac:d8:84:ab:0f:01:9d:86:c1:c5:1f:c5:85:73:
         81:be:bd:74:0b:99:c6:6f:b8:b6:4b:57:d9:b3:d3:84:48:67:
         69:d1:80:c7:cc:0a:34:da:5b:9b:f4:dc:97:ae:76:b8:b6:b4:
         b4:1b:46:ad:07:d8:f5:27:e5:b3:c1:8c:f3:8d:50:6a:01:c8:
         75:43:21:d4:c4:32:9f:52:80:f0:f6:09:30:12:72:bf:83:6a:
         25:c7:96:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:53:41 2026 by rpki-client