Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
File:                     AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json)
Hash identifier:          g3OOyzBxa/WdAL4WGaZUoz6eGy/EGZKJjtCCyY32rnI=
Subject key identifier:   B8:1E:47:FC:40:3A:D4:31:FB:DC:86:32:B2:82:E7:34:CB:C9:67:BD
Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A
Certificate issuer:       /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
Certificate serial:       057F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
Manifest number:          07D3
Signing time:             Tue 24 Mar 2026 22:58:46 +0000
Manifest this update:     Tue 24 Mar 2026 22:58:46 +0000
Manifest next update:     Tue 31 Mar 2026 22:58:46 +0000
Files and hashes:         1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: /h6tfGqdF5vM+NG8yHlUHf7fzjK8XDh8EU/CH8l6MZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8, serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
        Validity
            Not Before: Mar 24 22:58:46 2026 GMT
            Not After : Mar 31 22:58:46 2026 GMT
        Subject: CN=69c31726-d4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:54:05:c7:a5:c7:97:21:d0:15:c9:a8:85:
                    59:59:dd:b7:19:0d:e6:65:a4:88:26:fc:b4:b4:5e:
                    36:1a:5f:4b:09:26:2d:9a:51:a8:df:c2:d9:54:ec:
                    27:ce:a0:79:46:f2:75:ca:97:79:5e:e8:38:c0:80:
                    40:4c:88:a6:c9:ae:6f:84:06:e7:2b:5e:42:7b:d8:
                    3b:84:4b:dd:b7:da:3d:bf:8a:5d:43:dc:e0:bb:6c:
                    c2:3f:6b:cf:d4:79:8c:b4:af:f0:b1:3f:d3:c8:a9:
                    92:2c:ae:e0:42:36:cf:d0:0e:ee:6e:22:39:92:33:
                    c6:e6:f6:e5:32:bf:1e:92:d8:83:54:a0:c0:e4:07:
                    68:5b:44:65:6c:a4:9d:8a:9b:61:50:07:08:55:1e:
                    e7:21:7a:2a:1b:8d:d4:8a:ea:b8:da:56:6f:fb:9b:
                    0c:4a:1e:1a:36:81:7e:cd:9c:8e:08:88:f2:92:17:
                    77:30:4d:d7:93:d8:b2:9e:72:30:a0:37:67:0d:70:
                    ec:e2:79:3e:27:99:9d:a4:fb:21:26:f8:8b:6a:dc:
                    b0:ae:fe:63:c0:ac:51:03:41:ae:11:bf:51:8e:bb:
                    35:34:9f:6a:f6:5a:60:6f:d3:96:2c:d7:9f:f5:f6:
                    da:f7:3a:33:e0:68:66:a4:27:e2:b2:49:e8:79:d4:
                    42:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:47:FC:40:3A:D4:31:FB:DC:86:32:B2:82:E7:34:CB:C9:67:BD
            X509v3 Authority Key Identifier:
                keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3f:69:c0:e2:30:bb:ac:75:11:b1:50:1e:a2:66:1f:12:0c:
         cc:9a:49:f8:e7:40:40:e7:ba:8e:4f:4c:a8:f5:24:9a:99:85:
         c9:09:da:02:13:86:68:27:9b:70:e4:ef:08:f9:6a:7e:1b:71:
         a6:a9:7b:07:f2:ea:dc:03:5f:cd:e0:38:14:2e:0f:da:cf:bf:
         ae:3c:8d:97:19:78:4f:06:1c:7c:97:ba:58:e8:eb:d8:04:09:
         4f:ec:32:9b:b8:90:65:b6:96:eb:05:5a:22:de:74:fb:1a:d0:
         ed:b0:95:e4:51:cd:50:f2:c6:81:07:64:26:eb:27:5a:f6:4f:
         18:79:36:5f:cc:14:59:31:70:b2:94:b7:95:11:4d:1f:57:fe:
         7e:7f:92:ed:4f:73:72:ed:8c:28:57:21:0c:13:f0:db:66:1a:
         50:e5:46:3b:3e:83:ca:86:4b:3c:d9:dc:42:52:1c:e5:b8:22:
         da:37:f6:c0:c4:a8:26:e7:c4:e6:1b:d1:85:7f:00:61:1d:ee:
         62:77:72:d7:c1:04:fb:85:0d:09:8d:be:37:0c:f2:c4:e1:ef:
         6b:a0:d2:79:07:ae:b6:0a:41:8e:25:97:55:45:af:bf:77:d2:
         39:c1:5a:a5:19:bc:fa:36:8a:9e:6a:31:07:61:f4:56:e0:29:
         93:ad:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:28 2026 by rpki-client