Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
File:                     MFikabZ9AwcsLYo4Xp8qq7oTTis.mft (raw, json)
Hash identifier:          WXfxFQg4cgsBckcZMYe1xoxvhy6vgdcDCU4U6ooT6c0=
Subject key identifier:   29:54:9F:5C:48:07:1F:99:0C:0F:9B:DD:47:6A:B3:CF:7A:49:56:E2
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Certificate issuer:       /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial:       07CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
Manifest number:          079D
Signing time:             Tue 10 Mar 2026 21:10:30 +0000
Manifest this update:     Tue 10 Mar 2026 21:10:30 +0000
Manifest next update:     Tue 17 Mar 2026 21:10:30 +0000
Files and hashes:         1: MFikabZ9AwcsLYo4Xp8qq7oTTis.crl (hash: F2ps/Kfx9l/WPQPBCcwM9i6wDTH95BIBAzF09yxwm4A=)
                          2: 446CB34270E711F083707432C4F9AE02.roa (hash: kZy79YthAxUXnqeeWJ0YITudamfKZP7o+VZk50JTteM=)
                          3: B791EB5251A811F08D434B5BC4F9AE02.roa (hash: Yv4gel1CvyBk9MP04CS6oXlyji+0CdFjC5TBaKzGRfE=)
                          4: 62884F1AB6CC11EF84CBC45FC4F9AE02.roa (hash: AXDH2N6IFT5Fud9AQTkuO+onQ48n5ZtmHoBIWEhfafk=)
                          5: 7CA749FCF63E11F080BDB1B6646F56BC.roa (hash: u2rDocooyxiz9s72SCuMZgdQBeeYVSQpawmphR3YaZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
                          rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 21:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
        Validity
            Not Before: Mar 10 21:10:30 2026 GMT
            Not After : Mar 17 21:10:30 2026 GMT
        Subject: CN=69b088c6-e3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:a0:3d:08:05:3d:b2:8d:b8:27:4c:42:47:
                    fe:16:ac:2f:30:c6:73:19:dd:8e:30:66:fd:98:c1:
                    33:b2:3b:ff:5d:41:65:cc:81:02:03:c6:e2:73:e1:
                    47:0a:15:b1:35:0a:2c:d2:09:4a:8b:67:d4:08:b2:
                    e2:18:19:84:09:ac:66:4d:ca:6f:e1:d5:92:db:75:
                    06:de:d4:31:2f:30:cb:d1:4e:30:42:53:1b:a6:5c:
                    2d:b3:ec:c4:bd:5f:42:e2:a0:ab:50:2e:36:b6:2b:
                    7d:54:7c:c5:81:36:ee:1b:dc:e8:44:46:20:6a:cf:
                    a1:c8:c1:48:22:5d:4c:54:a0:6b:22:4a:d2:1d:41:
                    40:38:b5:08:0e:af:1e:d0:e7:3d:ff:28:da:84:1b:
                    64:6a:dc:26:f3:6e:1c:f8:ed:5f:37:11:56:29:43:
                    c9:61:12:68:64:9a:f0:de:29:eb:b9:0a:43:6c:fd:
                    8b:2f:49:25:28:f0:b3:08:f1:2b:7f:ff:6f:bc:f5:
                    d1:f3:72:a5:c7:35:08:85:d3:ff:8f:d6:d5:e3:04:
                    84:80:fa:fa:3d:1b:ac:6f:7f:78:80:33:26:3c:9f:
                    be:34:65:0f:61:ed:1b:09:e8:42:d0:52:7e:fd:ab:
                    17:b6:14:32:ca:ed:bb:c8:da:2a:b4:3f:77:a4:e6:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:54:9F:5C:48:07:1F:99:0C:0F:9B:DD:47:6A:B3:CF:7A:49:56:E2
            X509v3 Authority Key Identifier:
                keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:29:83:7b:b4:96:04:c1:de:9f:8b:2c:9f:89:a1:50:3c:f3:
         c3:83:26:88:55:a6:b7:0c:b1:6b:90:e5:87:1b:17:9c:12:5a:
         09:2f:15:60:c4:bf:8b:8d:6b:57:0f:d0:f1:e4:25:0d:50:4e:
         a1:87:d7:90:53:61:72:ec:ce:98:a6:10:33:41:c2:25:41:19:
         31:29:54:34:b7:4f:74:02:a2:70:db:58:42:d8:46:e3:30:9b:
         a3:32:d7:49:cf:e7:92:a7:10:6d:f7:83:f6:fe:e5:16:f5:51:
         c8:ef:1f:37:37:28:10:b3:a7:51:b5:75:9b:a2:fc:74:e8:d0:
         45:15:9d:52:9f:73:70:88:3d:9d:f9:5f:88:7d:3a:b2:63:26:
         11:bc:16:78:44:c9:aa:c0:f3:33:f2:76:45:76:2d:1b:41:7c:
         3f:d5:e5:e1:bb:f1:d9:8f:73:0e:5e:3b:7d:3f:fc:c6:c4:8a:
         5b:15:00:e1:f4:00:08:8c:cd:18:4e:50:ce:79:4a:be:48:fa:
         81:60:dc:33:03:c3:20:a9:bd:01:07:4b:08:5e:21:b3:a3:23:
         73:84:b8:36:f0:48:bb:d3:95:4a:67:d0:ec:74:da:b3:04:0b:
         79:2c:36:19:e1:ff:cd:5e:c0:68:28:91:63:ec:10:69:32:b3:
         c1:01:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:39 2026 by rpki-client