Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
File:                     MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json)
Hash identifier:          Pz3Dej2NQmqoueebQJTBzqp+EoTz6cOl7m8uC8ZfHr4=
Subject key identifier:   1B:B5:F4:CF:68:5F:33:2F:C1:7A:41:48:3D:26:22:81:63:74:76:72
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Certificate issuer:       /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial:       06CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
Manifest number:          068C
Signing time:             Tue 24 Mar 2026 22:24:26 +0000
Manifest this update:     Tue 24 Mar 2026 22:24:25 +0000
Manifest next update:     Tue 31 Mar 2026 22:24:25 +0000
Files and hashes:         1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: Mecn+FmcTOMV6t8ymW21bfzWS5crpsqPnJnx6xKjKmw=)
                          2: 70A511E6ECD111F09C92E5176E6F56BC.roa (hash: 4kvY15kmoRibeYszxVkHrvlLmTn2DqrfKOexn1KZ4Sw=)
                          3: 40583EE4424311EFB787BD3AC4F9AE02.roa (hash: 20QRaNN5HpjNTE0DjTJaVPeRVD8X2idK/zhTnjiKhQE=)
                          4: D4A6E66C184411F1A6C9F001253D8C67.roa (hash: RCo97+BQ7c4x9Y7DEYvpGWpLOBI7K1vi8X0A+4tNDLU=)
                          5: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: j6RfXO6V8txTwl+e1nfWngitaMdhNY8igbMKNAWQnn4=)
                          6: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: LJUjSG4B9nMQjlI/SiJALAQkrtQ8jXDsff/H6xkFjlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
                          rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1743 (0x6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
        Validity
            Not Before: Mar 24 22:24:25 2026 GMT
            Not After : Mar 31 22:24:25 2026 GMT
        Subject: CN=69c30f19-3373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:0f:ff:de:d4:af:39:9f:f6:c2:d8:ff:bd:
                    00:5f:c2:bf:7e:fa:cd:df:47:7d:25:7b:88:5d:f0:
                    62:e3:90:fb:40:f5:4a:96:8e:80:ba:9a:a9:df:d4:
                    06:da:58:c4:ab:2b:29:fa:0a:c6:89:29:28:6b:2c:
                    e1:4d:c7:d6:70:41:bd:15:4e:33:3c:4b:de:c9:b2:
                    fa:ff:6a:cb:e1:fe:c4:35:0e:ae:50:d7:81:82:dd:
                    06:91:fd:10:74:0b:d4:1d:10:8e:6d:11:50:df:01:
                    38:34:e3:3b:c9:cc:f2:dc:68:53:26:e0:c5:24:c1:
                    16:b3:66:a6:d6:34:02:99:b3:07:2d:07:6d:58:81:
                    43:89:0a:1d:42:7b:b1:85:3e:70:6d:7c:e1:28:95:
                    2c:75:24:2f:15:93:80:89:66:0c:6f:96:03:ef:19:
                    64:71:88:f4:f3:7b:24:f8:38:e1:dc:f1:6c:10:7d:
                    c1:83:ad:c1:39:a1:51:51:76:21:6f:7c:b0:fc:43:
                    06:e0:5a:20:ee:26:27:fa:c9:9c:3d:16:8f:d8:72:
                    fc:da:38:f3:86:9e:b1:25:e9:51:7f:31:61:00:bc:
                    90:29:d3:8a:60:4f:7f:9e:a6:2b:da:8d:8b:f0:1b:
                    ed:8c:9c:c3:5c:02:74:b0:89:d8:92:a6:7f:92:5c:
                    ff:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B5:F4:CF:68:5F:33:2F:C1:7A:41:48:3D:26:22:81:63:74:76:72
            X509v3 Authority Key Identifier:
                keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5f:c3:6c:11:74:33:b7:ac:ad:58:fc:33:74:dc:a7:e5:8a:
         61:b0:64:1b:87:2e:c2:87:0a:a9:48:49:ff:d7:67:51:fa:c3:
         27:e5:bc:d5:da:05:3e:0e:74:cf:64:a2:36:bc:df:dc:e6:bc:
         0b:a1:ae:bd:d2:5a:d7:9a:1f:9c:d0:7c:a8:4d:85:07:02:da:
         f7:85:81:dd:90:5e:22:fc:7f:64:74:c4:a1:13:61:29:8d:78:
         06:3b:04:c2:74:46:e3:30:a2:64:3e:0e:0d:ce:5a:3e:20:05:
         77:cd:82:43:be:d8:92:6f:14:92:cb:20:60:10:d7:4f:1a:e4:
         b9:49:bd:ed:d4:1b:e2:47:73:00:96:85:b0:3d:55:1f:8c:e3:
         82:3e:d5:e4:95:b1:96:52:89:c7:dd:f1:b4:73:fd:23:ad:b5:
         c4:42:79:f5:f0:d8:c1:09:00:67:ad:6f:b4:9a:83:f7:fa:6e:
         2f:9e:10:8a:54:af:de:4e:6f:31:e6:4c:cc:24:92:23:d9:8e:
         44:08:7f:32:13:0c:1a:36:95:05:e3:1f:92:ee:f6:2f:8b:39:
         89:e7:5e:68:38:70:6e:60:22:ef:03:8e:2a:ce:07:e1:32:23:
         cd:33:3f:fd:eb:e1:ea:7c:9a:7a:08:cd:63:43:a0:f6:7f:35:
         a4:c2:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:17 2026 by rpki-client