Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
File:                     u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json)
Hash identifier:          AwG1oBNsHWk4cnLpCrq1bfSxfP097yQToT8Tl/bqAQM=
Subject key identifier:   9A:40:36:D4:2C:EF:30:15:E9:B4:60:42:D2:D3:17:24:5D:DD:B1:FE
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Certificate issuer:       /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial:       0704
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
Manifest number:          06E0
Signing time:             Mon 02 Mar 2026 21:44:34 +0000
Manifest this update:     Mon 02 Mar 2026 21:44:33 +0000
Manifest next update:     Mon 09 Mar 2026 21:44:33 +0000
Files and hashes:         1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: EhiTTWe/HyY4RhDiT7CF/t5g9600Ikxx7SoWHE83CQk=)
                          2: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: /IhoZrHLS7mKMxuodlFyZTmLLtfy6GDD39NpDwvO+Xw=)
                          3: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: N9eG1bQhX1YdCDkzKaSF+f+WLANX5CsAn9fANFhO8B8=)
                          4: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: p9oLeg7LyY+vlGNticT0e8fg65yu3rD7mdYWF8Pyt1o=)
                          5: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: VDBG2w47npIoKGnSUG19h4msTJ7z1dezZlZeedxqUyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
                          rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 21:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
        Validity
            Not Before: Mar  2 21:44:33 2026 GMT
            Not After : Mar  9 21:44:33 2026 GMT
        Subject: CN=69a604c1-83e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:3d:a8:2a:82:13:51:cd:da:94:26:07:d1:
                    3f:f8:99:67:60:63:2f:80:ac:cc:06:c1:60:42:36:
                    42:5e:ad:03:ee:ef:53:27:6b:8c:4f:95:4e:85:d3:
                    c6:83:d3:2d:24:03:90:1b:a1:e8:1c:50:d4:f3:9c:
                    aa:36:29:8d:c9:17:af:40:79:f5:b9:82:d6:06:c7:
                    f1:30:4a:2c:33:82:33:e3:00:d8:c9:43:e0:01:be:
                    85:ef:69:ff:eb:24:a6:1f:b0:38:c2:95:08:96:b6:
                    91:4e:ef:b5:6e:01:64:45:76:c2:a0:85:dc:25:29:
                    46:24:1e:54:4b:d6:33:30:b0:53:a2:7e:a3:ba:a1:
                    a2:5f:ff:1f:5f:4d:ea:0b:8a:b1:ce:73:7d:78:0e:
                    ae:ca:f7:40:bf:ed:43:52:95:14:81:c7:d0:3f:47:
                    90:16:d2:6f:da:6b:04:78:d9:10:d2:b4:3a:bd:4a:
                    98:68:31:1b:82:34:35:52:ea:db:57:47:f4:0d:50:
                    38:ca:32:4b:45:8f:e9:16:e5:5a:7e:7a:2e:12:11:
                    62:e6:79:de:15:c4:63:c7:ea:73:db:3d:2b:e0:6d:
                    ab:a4:c1:d2:bd:9e:e7:52:ea:a3:af:01:82:82:ed:
                    78:b0:0a:04:c8:8c:94:db:5d:d0:48:f5:00:44:fb:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:40:36:D4:2C:EF:30:15:E9:B4:60:42:D2:D3:17:24:5D:DD:B1:FE
            X509v3 Authority Key Identifier:
                keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:aa:f6:70:44:07:8d:25:de:6a:73:96:38:ab:9f:52:7d:57:
         90:d1:15:db:e0:75:f5:99:29:3a:e5:93:a7:c3:8e:b3:86:9a:
         59:c0:84:67:d0:41:03:bb:c1:cb:39:8b:4d:d5:f0:33:bb:1f:
         00:52:b1:0f:42:70:d2:fc:5e:ef:c0:5f:c8:bc:4c:20:2c:34:
         98:74:91:35:2b:6d:9d:02:55:28:ef:09:ba:8b:4e:34:9a:77:
         6d:3c:d4:69:da:a1:92:63:85:55:30:f6:11:97:76:af:9c:28:
         1f:ea:b4:56:8e:25:a2:ff:0b:73:2d:88:56:ed:b6:58:f4:19:
         dd:51:7e:41:53:39:02:69:c1:c2:9c:bd:6f:04:2c:9c:9e:88:
         6a:40:83:40:ef:d3:c2:40:63:3b:29:20:fa:27:df:ba:11:ac:
         1e:2f:53:84:5b:53:a3:8e:b4:9f:69:09:dd:d6:1e:6f:1f:da:
         0a:6d:3a:34:cf:df:0c:68:d1:06:ba:6d:23:20:c0:69:b2:88:
         02:fe:7f:9b:c6:cc:9b:63:53:09:f4:8d:0e:12:ec:00:d3:eb:
         c6:96:a2:0a:57:75:a5:51:87:47:c1:8a:96:69:f5:2b:a8:65:
         1a:09:40:16:76:e8:8c:26:4b:70:68:40:02:0b:1f:5e:42:e0:
         12:2b:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:20 2026 by rpki-client