Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
File:                     tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json)
Hash identifier:          9yzbxEyyKU9+VfllS3PGVamqgBVIdubjWEAgM2Wk5os=
Subject key identifier:   91:1D:93:DA:3C:6A:89:B4:93:D1:0C:C5:6C:8A:FB:D5:D5:68:47:90
Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
Certificate issuer:       /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
Manifest number:          01C5
Signing time:             Wed 25 Mar 2026 03:07:08 +0000
Manifest this update:     Wed 25 Mar 2026 03:07:08 +0000
Manifest next update:     Wed 01 Apr 2026 03:07:08 +0000
Files and hashes:         1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: a+0txx+ILTdAfdTBGE/7YfLcsnAzoLrXYrDVormNZ3k=)
                          2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: L3P+vRozuZM4KUNk6105/r7juMnJomgd4sf8WLIhiGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
                          rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
        Validity
            Not Before: Mar 25 03:07:08 2026 GMT
            Not After : Apr  1 03:07:08 2026 GMT
        Subject: CN=69c3515c-91df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:69:95:39:24:e3:78:30:dc:ff:f8:12:a8:
                    0f:73:14:16:d1:81:c7:de:54:c4:16:b5:80:36:d9:
                    c2:63:ff:32:81:83:9c:91:e0:1a:7f:d8:67:be:e0:
                    55:eb:18:ff:26:6e:aa:02:74:71:73:6c:82:a6:0b:
                    75:e1:a5:9f:22:dd:12:be:f6:b2:a3:57:a7:46:e5:
                    eb:42:66:d0:a9:39:83:b5:86:1a:cf:0a:85:d7:31:
                    82:49:cb:36:8b:46:86:17:e6:14:eb:dc:37:b0:27:
                    f0:fa:b9:e7:2d:d6:82:04:f4:95:7f:01:ff:4c:f3:
                    46:53:24:69:b5:28:ac:67:d9:0c:4f:4e:02:4f:af:
                    8f:b0:8a:bb:6d:8c:e2:ee:2c:2f:40:b0:d5:e6:97:
                    74:7b:e5:1f:b4:c6:d0:fd:8a:c9:95:87:d3:d4:04:
                    55:d7:b5:af:d3:57:2f:e4:65:ec:dc:ce:5b:0e:ad:
                    af:78:50:fe:30:75:80:d8:51:60:43:85:df:80:5b:
                    39:97:08:4e:83:65:98:7d:64:15:03:08:ee:e4:42:
                    85:cd:58:3c:9a:9e:21:52:6f:39:2b:6c:22:76:fd:
                    06:df:5e:f1:bf:01:b0:17:cb:9e:89:f1:28:e9:38:
                    fb:23:fb:af:02:3e:89:43:ac:43:57:3f:ca:39:db:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1D:93:DA:3C:6A:89:B4:93:D1:0C:C5:6C:8A:FB:D5:D5:68:47:90
            X509v3 Authority Key Identifier:
                keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4b:54:22:3c:43:b8:c5:c9:ff:29:43:a0:d2:45:fa:6b:65:
         52:77:a6:aa:46:f5:a8:30:51:d1:57:47:28:1f:66:d5:d1:f5:
         34:b2:ba:dd:38:12:e3:0e:6a:7f:d5:07:87:e8:0e:84:0c:42:
         d6:d3:54:69:76:f2:9b:ed:51:4a:ab:47:74:ae:1c:02:94:7b:
         5d:ff:e6:cc:0a:34:48:93:8c:e6:18:d9:50:e3:24:e5:ab:4a:
         43:ec:92:73:00:54:c3:91:48:58:5c:de:95:73:2a:1a:7f:d9:
         c8:d6:f7:ae:c4:7b:84:49:5a:18:3c:40:34:f4:ed:c4:39:89:
         7d:62:e5:4c:0a:ec:de:55:d7:4c:be:06:2f:f0:50:73:1c:5c:
         de:4d:06:a1:bb:cb:44:9c:68:12:1b:4d:75:49:ea:de:cc:e9:
         ce:0d:ff:c9:48:08:11:22:63:1a:24:59:1c:2a:09:a5:27:a9:
         99:7f:2a:8f:19:e4:41:16:d4:8a:6a:0c:01:df:98:b1:e7:6b:
         4c:8a:75:82:54:04:33:e5:a6:1e:02:48:9b:48:8c:27:8e:4d:
         63:1b:bf:2b:53:9d:78:52:72:77:60:d3:8d:66:ff:12:dc:5d:
         74:7c:01:39:d7:dc:d5:0f:0c:4b:ff:1c:80:c8:6a:cc:c3:86:
         e3:e9:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:23 2026 by rpki-client