Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File:                     agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier:          XaL7ahkjXFfX6KEtYyqwSoeiPmV//boQhPgOHP47LlA=
Subject key identifier:   EB:BE:B3:8B:85:27:E5:FB:45:93:D2:F6:EE:AF:6D:02:70:35:02:6A
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer:       /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number:          010A
Signing time:             Wed 25 Mar 2026 05:20:19 +0000
Manifest this update:     Wed 25 Mar 2026 05:20:19 +0000
Manifest next update:     Wed 01 Apr 2026 05:20:19 +0000
Files and hashes:         1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: 3RRO4jmRT+XMzAZQw9Ix37fsJHdLXLxx3Ij3wGp1f5E=)
                          2: FD380306BD4D11F091CCAA18C4F9AE02.roa (hash: cFkFVqkyH5/Yzi/+1hjNwIGGMl+Q2mo1X7sF0INIyzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
        Validity
            Not Before: Mar 25 05:20:19 2026 GMT
            Not After : Apr  1 05:20:19 2026 GMT
        Subject: CN=69c37093-1727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:89:0a:e9:1b:38:88:36:ea:b7:57:49:e4:
                    bf:0d:cb:5c:59:4b:fd:07:21:18:24:1a:0e:d8:cd:
                    88:b3:d0:9f:c9:0c:64:84:a5:f4:39:70:07:12:91:
                    f7:3b:77:a4:d9:f4:0f:e8:a2:4f:2f:36:ef:f4:3a:
                    ac:e3:56:25:d7:56:94:a6:bf:f4:a0:e4:4e:c9:ad:
                    ac:bf:ad:40:12:17:b8:74:45:32:83:81:da:8f:ee:
                    9a:6b:1f:df:55:55:db:b7:7c:e1:1d:a6:4c:69:ed:
                    6b:7b:e6:4e:7c:74:e5:49:f2:91:0c:23:62:4c:9b:
                    76:bb:e5:8c:e0:fe:d4:e6:19:a8:22:53:27:99:13:
                    12:58:d6:4c:04:38:24:b0:ab:65:8f:3e:6c:2e:26:
                    92:50:95:dd:ab:ff:4a:16:f4:91:8f:57:ef:30:a2:
                    59:0a:bf:57:61:37:c5:a3:c0:72:91:84:e2:5e:78:
                    25:79:68:44:45:71:e9:0b:f9:7a:62:ab:e0:11:94:
                    d9:06:ba:f7:65:c0:b6:95:27:b6:6c:d5:d3:3a:7e:
                    f0:bf:d0:e7:41:8a:40:db:fb:8a:a2:df:50:07:2d:
                    c7:45:71:66:df:4a:58:44:30:e8:9b:d4:cf:a3:b4:
                    26:94:96:8e:05:d7:3d:60:09:22:01:26:0a:82:c8:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BE:B3:8B:85:27:E5:FB:45:93:D2:F6:EE:AF:6D:02:70:35:02:6A
            X509v3 Authority Key Identifier:
                keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:0a:6b:6d:6c:98:68:ab:2a:93:39:aa:d0:08:d1:bd:33:
         eb:34:08:cf:95:db:9b:4f:d2:21:56:b4:96:91:e6:a1:2b:f6:
         8b:9a:2d:9e:c3:2c:9e:f9:65:30:e9:59:8a:2d:ab:f0:92:29:
         c4:c1:af:20:f0:a0:c5:6b:7b:28:d7:96:76:75:a6:82:2c:0b:
         e0:74:a5:04:df:e0:b9:d9:1b:da:e9:bf:73:52:4e:b1:33:16:
         e6:5a:60:07:a6:bb:9a:06:8d:5e:66:c7:ba:ba:fe:69:7c:cf:
         d1:bc:89:92:b1:90:99:20:43:5c:90:ef:26:69:56:2e:cc:c8:
         c4:f0:3b:a7:d8:18:31:ef:e5:8d:f4:57:79:e5:4c:18:41:a0:
         bb:1e:5b:e1:1c:06:a6:b6:cb:65:af:bc:f0:db:11:85:d1:93:
         fc:a4:d9:5c:71:70:42:9e:81:53:44:ee:0e:e5:8a:80:93:af:
         cb:27:b0:e0:fc:23:9c:e6:f0:20:a3:c9:c8:21:f9:3e:c6:a0:
         e5:91:93:08:e5:5e:c9:32:05:fd:c2:70:7b:b5:c5:db:0d:b2:
         4f:4a:25:a7:2b:cf:25:13:fc:f7:69:e4:ce:08:19:cf:82:e5:
         db:1b:d9:ab:f4:fe:6e:ef:44:34:4c:a5:5b:8f:a3:e4:b9:e1:
         eb:2a:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:26 2026 by rpki-client