Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File:                     c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier:          z+HAbdngbOPf4GxsjSGrmz1TwHlS63zfXGIJ/cFI1yw=
Subject key identifier:   31:09:CD:18:AC:D1:94:14:68:82:DB:DB:68:54:97:86:D9:DE:A6:F5
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1EC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number:          1E9C
Signing time:             Tue 24 Mar 2026 15:59:06 +0000
Manifest this update:     Tue 24 Mar 2026 15:59:06 +0000
Manifest next update:     Tue 31 Mar 2026 15:59:06 +0000
Files and hashes:         1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: ROTb+8hxSOFAgRUCcaTV5LjnaU9ctuputc6rVXduEQU=)
                          2: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: liMT6OAzfvJnsspgI1FzQ6ZwFHNyDq37HvK43oMb2f8=)
                          3: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: UYMwVYPaK7nzCwDIb/TjC1GQVHBFdraAzq6uV6QZN+c=)
                          4: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: /qsVaB9Ik2QgEaAelOskN07kdqvopeyP2GfAlI1Wn9w=)
                          5: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: Q8meJh+l3QvnqqqYOUJJQlzzASdq6o1tO+VcZsCelFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7874 (0x1ec2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Mar 24 15:59:06 2026 GMT
            Not After : Mar 31 15:59:06 2026 GMT
        Subject: CN=69c2b4ca-01f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:dc:54:d9:03:00:97:43:13:7d:1e:37:84:
                    bf:a7:c5:e9:99:41:12:98:b9:f4:6d:02:c4:92:d8:
                    2c:a6:90:d3:c1:0d:c9:1a:da:e9:47:d9:12:ca:7f:
                    38:67:38:6f:d5:5f:ff:8e:31:e3:8c:9c:28:14:3e:
                    cf:c3:cc:dd:70:8f:7c:40:62:a4:94:5f:52:39:c2:
                    a8:83:e6:0c:47:3f:14:cf:29:b3:6e:74:c5:54:43:
                    dc:46:eb:f0:ab:c3:a7:84:78:9a:93:76:95:63:b6:
                    c4:78:76:76:54:3c:ae:25:8d:01:95:e6:12:ff:b8:
                    68:9d:e5:6b:0e:75:20:8b:d7:08:02:ec:cd:cd:5e:
                    6d:3b:37:33:db:aa:7c:d9:43:fa:65:17:97:8b:a4:
                    3e:d0:f4:fd:fa:cc:64:76:d7:fb:0f:bf:36:4b:3b:
                    70:94:4d:2e:e8:b0:ea:e3:1c:36:93:6c:c2:6f:6d:
                    a1:18:7e:05:e6:7d:b6:e0:50:29:92:e4:b3:df:4e:
                    59:2c:85:03:8a:bf:95:8a:87:32:2e:d3:ab:c8:e9:
                    19:94:84:ec:02:eb:f1:7b:f4:06:b9:47:b0:5e:4a:
                    bc:ce:35:93:eb:ae:d1:dc:1f:0d:f3:01:6d:ff:fa:
                    b8:01:8f:70:79:99:85:32:ef:15:d3:20:ba:66:cb:
                    09:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:CD:18:AC:D1:94:14:68:82:DB:DB:68:54:97:86:D9:DE:A6:F5
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ae:92:90:20:68:ea:50:be:38:5c:c1:b9:57:34:7b:14:05:
         7b:92:2f:15:4f:d7:ca:a4:2d:34:3f:c6:5e:01:6a:86:af:17:
         ba:0b:f6:3e:c7:6d:66:f4:60:39:dc:ed:22:21:fc:26:67:e0:
         e7:32:b4:02:e8:27:96:bc:bd:2b:38:68:ea:c2:24:99:95:66:
         65:6b:05:b8:21:e4:0a:72:0c:2c:7f:a3:a1:91:46:43:f8:b1:
         1e:43:b4:ee:c5:82:77:4a:e0:7a:59:4a:30:cf:4d:fa:43:7f:
         de:12:15:56:86:ab:be:3b:65:5c:01:b0:bc:20:65:57:b9:92:
         09:eb:99:87:4a:7a:fe:37:8e:0f:11:81:3d:06:73:13:80:e9:
         a2:78:ec:45:e4:73:17:6f:24:aa:45:67:c8:49:a8:ec:71:57:
         9d:21:06:9e:b0:19:cd:b0:f6:d9:9c:bf:5e:f5:d5:ff:46:01:
         76:89:72:52:d1:16:b8:5c:64:f3:11:8d:9d:0d:11:67:84:82:
         31:64:d1:14:b3:3a:de:17:f8:17:a4:b2:93:f3:e4:46:c4:ef:
         ad:4c:5a:58:15:8b:b7:e2:13:cd:66:1d:4d:05:72:90:78:a3:
         eb:bd:a7:18:07:31:aa:67:9a:4c:13:8a:3e:7a:5b:af:b9:7f:
         c8:49:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:23 2026 by rpki-client