Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
File:                     6Ind1VQsbSydx0DhJGqedI51E1I.mft (raw, json)
Hash identifier:          drn9kD58kdm/7c+TXLfqBXJkWRafeBCPatg0Y5vr1pI=
Subject key identifier:   7B:8A:19:20:2C:8D:21:2F:4C:28:EC:26:C4:E7:97:49:69:90:30:16
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Certificate issuer:       /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial:       07DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
Manifest number:          07C3
Signing time:             Tue 24 Mar 2026 21:09:50 +0000
Manifest this update:     Tue 24 Mar 2026 21:09:50 +0000
Manifest next update:     Tue 31 Mar 2026 21:09:50 +0000
Files and hashes:         1: 6Ind1VQsbSydx0DhJGqedI51E1I.crl (hash: vR1HoWHsptW6lEGPygDVlzYBRlhvHu7C1ijn9WD6aOM=)
                          2: 9E82296E5FA611EF9A75477FC4F9AE02.roa (hash: kOf83aQjaaKqko4elWofBx+7KSgYudc2m1r/KiOBcQg=)
                          3: 243B94A23E7A11EBBFFAC96BC4F9AE02.roa (hash: tLDRGiCU+utA/X5xQvDZh46rYLAKb95Q/7U8Ll+hkxs=)
                          4: BB684734816B11EFA4D23930C4F9AE02.roa (hash: ZFPkmcqDjoKsQQuKRApVSD7ZZsh8Yv27krJA8gBgBE8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
                          rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A138, serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
        Validity
            Not Before: Mar 24 21:09:50 2026 GMT
            Not After : Mar 31 21:09:50 2026 GMT
        Subject: CN=69c2fd9e-7fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4d:20:47:18:0d:1a:38:c9:f6:40:e1:72:2d:
                    f0:87:cb:7f:34:d9:d4:d9:0a:c2:20:29:60:6f:67:
                    de:71:92:28:bf:9b:20:11:02:6e:12:74:64:e3:df:
                    45:61:ec:36:5e:1e:27:72:5e:14:c2:28:06:90:de:
                    8a:f4:b1:4b:fe:78:65:c2:5f:9e:68:51:6d:86:3f:
                    b6:50:91:7f:aa:0a:c2:cb:f6:0b:b5:f5:8e:6f:c0:
                    46:eb:a1:34:ea:3b:5a:b6:8c:c0:98:4c:dc:bd:b7:
                    0f:bd:7e:df:32:76:c4:b4:c1:f2:9e:6d:85:05:0a:
                    80:d2:07:dd:76:11:10:69:9c:5d:da:d9:30:e5:20:
                    50:45:7a:6a:0d:98:a6:bf:f0:b9:a3:c3:df:24:d0:
                    1c:b0:e3:2f:93:bc:4c:3c:ac:70:c3:91:9f:42:a5:
                    76:6a:e1:58:74:ad:31:9f:45:8e:90:1f:37:2e:34:
                    6a:a5:6d:bd:84:b3:d3:dd:8c:51:1e:2d:8e:63:ab:
                    61:31:4e:a0:cd:5c:9f:23:42:e1:3f:a5:0a:bd:f8:
                    6c:ad:0e:07:15:b7:b7:a6:12:98:b2:0b:e2:b0:6d:
                    87:00:78:82:07:1d:09:d2:84:ec:d9:ea:ef:4b:cb:
                    b6:21:65:0c:5f:ac:e3:67:5f:9a:9c:de:b3:3c:2a:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8A:19:20:2C:8D:21:2F:4C:28:EC:26:C4:E7:97:49:69:90:30:16
            X509v3 Authority Key Identifier:
                keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:15:46:89:7f:b3:69:65:1a:e5:08:73:d4:05:bc:cb:04:e8:
         14:a6:51:61:71:6e:9a:34:ef:6d:47:6a:ad:c3:d3:43:89:38:
         26:ab:bd:11:4c:0d:ae:d2:10:46:d4:11:9f:ee:46:38:e0:f5:
         47:5f:5a:e3:7c:db:db:3e:92:d6:46:b4:0a:02:9a:9e:39:1f:
         b4:0e:01:ff:44:8f:8e:2a:83:ca:21:cb:f4:52:a2:0f:3a:9d:
         d3:d4:04:03:3f:3e:12:2c:0b:e6:82:1f:9f:78:a2:2b:e3:1a:
         8a:00:88:08:a7:7e:36:47:a8:30:77:9f:d5:a2:33:68:c1:ee:
         5d:69:a4:52:36:6f:94:16:f2:7c:a0:4c:83:02:4a:22:b3:7a:
         21:7a:77:82:ac:d6:9d:c2:a3:d0:06:d1:48:e0:8a:9c:75:4b:
         ef:5f:2d:54:79:68:87:8c:ab:61:2e:8e:29:4a:db:ab:49:54:
         2b:e9:3d:06:fa:6f:be:0b:e8:76:34:63:bf:1e:58:8d:ab:71:
         39:2c:b9:22:e6:54:55:2c:a5:b1:f6:43:90:6b:d3:a3:70:08:
         38:89:1b:71:f2:ea:2f:bb:2c:f1:99:a5:43:87:d0:bb:9c:2c:
         ab:c7:01:d0:a6:7f:f9:53:5c:08:82:ed:93:cd:5b:a7:5a:92:
         6e:90:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:20 2026 by rpki-client