Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
File:                     9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json)
Hash identifier:          04JaOfTGEoi839QCrITQJLVLvd/F5rD+JRTwf6nTgoY=
Subject key identifier:   8B:97:9C:51:1F:86:34:A3:14:F7:67:6B:34:64:56:90:0B:03:1D:A4
Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1
Certificate issuer:       /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
Certificate serial:       0836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
Manifest number:          082D
Signing time:             Tue 24 Mar 2026 20:41:16 +0000
Manifest this update:     Tue 24 Mar 2026 20:41:15 +0000
Manifest next update:     Tue 31 Mar 2026 20:41:15 +0000
Files and hashes:         1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: IkpR5zwrThHaDB0OW1lT5T8geSl5lkp31C5j5wl+UrI=)
                          2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: QiYnVEsi/7K9Ji2CODrR010/x13Jz7PV/tzx2JebDQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl
                          rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
        Validity
            Not Before: Mar 24 20:41:15 2026 GMT
            Not After : Mar 31 20:41:15 2026 GMT
        Subject: CN=69c2f6ec-5da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:c5:58:a1:af:44:75:31:8b:bf:94:0e:34:
                    60:02:0f:5a:6f:e7:ed:4d:04:37:92:ec:43:d7:e6:
                    97:c7:eb:33:f2:df:5d:37:56:d8:a7:b5:45:cb:fa:
                    34:b5:da:5f:22:10:5a:5c:de:ce:7e:4b:40:2d:e5:
                    8e:14:14:c3:fd:e0:a1:d1:29:27:a7:2b:3d:20:21:
                    07:7a:91:22:7e:98:48:77:2e:22:3e:bf:e6:ee:a1:
                    2f:28:13:ba:63:1d:ef:bc:cb:57:a9:c9:ff:14:65:
                    25:f1:78:32:b3:06:dd:04:0f:11:e8:2b:98:1d:33:
                    2e:10:96:d9:d4:74:5f:b0:f5:c5:b6:25:13:da:20:
                    e8:4d:4f:c7:74:59:2d:4d:dc:3e:b9:83:46:a2:df:
                    24:cb:57:62:14:82:67:41:69:0d:fa:b4:56:bf:f7:
                    ee:a7:db:9b:da:59:6a:14:38:6c:56:22:17:32:ff:
                    b6:0a:29:82:54:ef:e4:3a:9c:79:8a:5a:58:cc:9e:
                    9a:dd:d8:6f:2a:5a:c5:fb:20:b3:a3:59:0c:e0:65:
                    4a:02:b7:9a:5d:dc:73:e6:77:36:ab:bb:75:0e:93:
                    90:f6:01:0d:6c:7a:7a:f7:70:f9:60:8d:e2:58:58:
                    78:67:11:43:1f:41:48:62:f4:4f:99:1e:c3:0e:54:
                    15:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:97:9C:51:1F:86:34:A3:14:F7:67:6B:34:64:56:90:0B:03:1D:A4
            X509v3 Authority Key Identifier:
                keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:69:11:01:4c:7a:4b:38:c5:62:ef:dc:db:e4:8b:5a:a2:
         83:94:6d:df:e6:7c:6e:b9:5c:dc:c6:58:ab:ce:15:2d:a7:12:
         0f:a2:49:da:b7:61:94:5f:7d:7d:76:57:a5:dc:ad:49:e5:fe:
         a5:7e:d4:b1:db:be:52:f1:f3:aa:e2:e3:96:eb:6c:74:96:fc:
         24:8b:8c:ec:95:b9:88:ff:23:d2:e5:b2:2f:b8:fb:98:70:52:
         cc:62:b9:5b:c4:00:b1:58:99:e6:a2:3f:2e:8a:8b:94:a9:1b:
         f0:49:30:33:8b:e4:18:f0:26:c4:4c:67:e0:fe:ff:ff:78:ee:
         74:62:32:db:94:d3:ad:81:88:c6:c9:c7:b7:73:80:c2:1b:de:
         4c:12:be:35:41:53:8e:73:fb:06:80:e4:54:09:a8:c3:1d:8d:
         ee:e7:4f:62:f1:58:f1:b8:43:34:8f:5f:30:06:fb:f6:c7:60:
         2d:42:49:ff:92:a7:89:a4:47:9c:1c:74:f1:4c:69:c6:45:3f:
         5b:af:0f:6a:17:62:db:0d:08:de:6a:d5:14:4f:b3:3d:c2:96:
         ce:d6:dc:6b:ee:fd:a8:d7:9c:dc:06:75:9e:b6:35:dc:09:0d:
         66:8b:0b:c1:d0:52:64:2b:2f:b6:52:3f:05:76:2e:7b:a3:72:
         ca:47:eb:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD
MEExMEZBQjEwHhcNMjYwMzI0MjA0MTE1WhcNMjYwMzMxMjA0MTE1WjAYMRYwFAYD
VQQDEw02OWMyZjZlYy01ZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3vrFWKGvRHUxi7+UDjRgAg9ab+ftTQQ3kuxD1+aXx+sz8t9dN1bYp7VFy/o0
tdpfIhBaXN7OfktALeWOFBTD/eCh0Sknpys9ICEHepEifphIdy4iPr/m7qEvKBO6
Yx3vvMtXqcn/FGUl8XgyswbdBA8R6CuYHTMuEJbZ1HRfsPXFtiUT2iDoTU/HdFkt
Tdw+uYNGot8ky1diFIJnQWkN+rRWv/fup9ub2llqFDhsViIXMv+2CimCVO/kOpx5
ilpYzJ6a3dhvKlrF+yCzo1kM4GVKAreaXdxz5nc2q7t1DpOQ9gENbHp693D5YI3i
WFh4ZxFDH0FIYvRPmR7DDlQVXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuXnFEf
hjSjFPdnazRkVpALAx2kMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5
REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ
dURnUk9iTW5DWVRBb1EtckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnFBpEQFMeks4xWLv3Nvki1qig5Rt3+Z8brlc3MZYq84VLacSD6JJ2rdhlF99
fXZXpdytSeX+pX7Usdu+UvHzquLjlutsdJb8JIuM7JW5iP8j0uWyL7j7mHBSzGK5
W8QAsViZ5qI/LoqLlKkb8EkwM4vkGPAmxExn4P7//3judGIy25TTrYGIxsnHt3OA
whveTBK+NUFTjnP7BoDkVAmowx2N7udPYvFY8bhDNI9fMAb79sdgLUJJ/5KniaRH
nBx08UxpxkU/W68Pahdi2w0I3mrVFE+zPcKWztbca+79qNec3AZ1nrY13AkNZosL
wdBSZCsvtlI/BXYue6Nyykfrtw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:58 2026 by rpki-client