Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
File:                     59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft (raw, json)
Hash identifier:          3PT4W4HlJbCfMzl7CjA5mueVdaiHsqlmgH7OZ619ZJo=
Subject key identifier:   30:0D:D2:3A:9F:2D:DE:46:7A:9B:21:70:FB:4A:C8:25:39:F9:93:D9
Authority key identifier: E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
Certificate issuer:       /CN=A911D951/serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
Manifest number:          2B
Signing time:             Wed 25 Mar 2026 07:56:24 +0000
Manifest this update:     Wed 25 Mar 2026 07:56:23 +0000
Manifest next update:     Wed 01 Apr 2026 07:56:23 +0000
Files and hashes:         1: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl (hash: 9U3keH1jjmf3g38IHRrofGOroltjmvplNqDMOaAsp+c=)
                          2: 8FFC4170EF6C11F0B51A35C1596F56BC.roa (hash: ripzMW6h7Gz3iYRNTEaVSGtOjcI1v54jEJjVqeKsNek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
                          rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D951, serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
        Validity
            Not Before: Mar 25 07:56:23 2026 GMT
            Not After : Apr  1 07:56:23 2026 GMT
        Subject: CN=69c39528-0bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ef:0e:b6:a5:9c:d4:1d:e6:4c:be:d0:7c:b1:
                    ab:c8:c0:80:06:96:65:61:f1:e6:99:50:58:85:96:
                    ac:7b:80:19:91:ce:a8:9d:54:af:2d:1b:8e:8e:2d:
                    21:98:c4:2d:3e:8b:29:8e:03:15:43:75:27:80:05:
                    12:2a:66:ef:a8:28:d8:96:17:86:a3:86:da:92:68:
                    16:73:9d:e5:da:c6:69:0f:5e:64:06:20:e0:03:01:
                    4a:53:f9:95:f3:02:d9:99:57:f2:16:9b:69:ea:7c:
                    68:81:84:9b:a3:17:6f:73:11:e1:32:3f:14:c7:1e:
                    82:e2:7c:da:94:36:8b:1d:63:6c:02:7b:4a:32:24:
                    93:e2:a4:cf:94:40:0e:7c:7a:d2:bb:3f:50:84:41:
                    db:c2:83:7a:71:b4:ce:52:8b:cb:5d:16:0f:e7:27:
                    66:0c:59:cd:45:51:77:83:72:b4:6f:f5:0d:4f:3c:
                    2e:ac:54:af:57:a0:98:c0:f6:7a:e2:b3:08:85:fd:
                    36:17:cc:61:2a:83:ee:07:75:99:07:df:cf:7c:81:
                    3a:84:57:1f:4b:26:63:7f:cc:0d:78:c8:81:23:cd:
                    76:fb:9e:cb:f9:81:0c:b2:0a:b3:23:88:cc:58:f5:
                    ff:ca:d1:56:6c:20:17:3b:81:41:44:63:1f:14:80:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0D:D2:3A:9F:2D:DE:46:7A:9B:21:70:FB:4A:C8:25:39:F9:93:D9
            X509v3 Authority Key Identifier:
                keyid:E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:be:32:48:97:80:93:38:4b:57:5b:c8:18:5b:b2:0a:bc:d7:
         d3:62:83:de:01:bf:e2:57:d2:f7:30:3c:1a:c7:c2:29:63:70:
         3c:d4:d7:21:9a:ca:1f:12:0f:df:55:c4:eb:b6:09:9c:af:9a:
         1f:12:fc:0e:c9:f6:35:78:1d:23:c5:d5:7e:2a:48:8f:5f:57:
         b2:ab:0e:6f:a4:09:16:54:81:3d:6a:cc:0a:01:94:6d:a9:b9:
         67:fe:40:69:40:ef:62:d3:05:42:64:73:1e:d2:3a:a8:5e:b1:
         7a:e7:d9:e6:7f:56:7a:08:07:d4:dd:ea:02:1f:c7:52:ec:96:
         95:0b:45:fe:5f:7d:ff:f4:a8:de:f6:5a:02:26:b4:fa:0b:e5:
         0c:28:22:96:be:78:10:ba:75:1b:89:07:b7:f3:2d:e5:2b:4d:
         9e:a4:08:37:58:c5:b3:40:3a:87:2f:60:a5:b4:5a:ba:f6:8e:
         c4:38:6f:93:dc:87:1b:b9:2f:bb:6c:36:7f:e0:5f:61:1b:81:
         17:a3:80:9c:88:25:d2:66:45:c0:9b:05:16:21:fd:b9:8c:c2:
         63:d1:a3:79:e4:fd:54:1b:70:bd:6d:d9:e3:8d:2a:01:ad:0e:
         bb:b7:7d:be:de:64:60:bd:e9:6c:10:85:79:e6:59:be:63:d4:
         2a:77:70:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:36 2026 by rpki-client