Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
File:                     a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json)
Hash identifier:          6qsmlaJLREMNyrcq+oON1nmv8PnKt/rEmnRk9f1npQE=
Subject key identifier:   75:8A:C9:94:2F:1A:D9:46:56:04:AF:56:EC:66:B4:F6:60:33:0C:7C
Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
Certificate issuer:       /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
Manifest number:          0211
Signing time:             Wed 25 Mar 2026 02:17:03 +0000
Manifest this update:     Wed 25 Mar 2026 02:17:03 +0000
Manifest next update:     Wed 01 Apr 2026 02:17:03 +0000
Files and hashes:         1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: OzL2PLLJaAzmMRR9nHqGwJU1LTx82tQlGp4kO8fj15I=)
                          2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: yqtXxu6K8/SJ810590/3CfsacSmByFqUd6TVJx9QLFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
                          rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
        Validity
            Not Before: Mar 25 02:17:03 2026 GMT
            Not After : Apr  1 02:17:03 2026 GMT
        Subject: CN=69c3459f-f124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:8c:2b:e6:ac:60:50:41:12:d1:dc:0e:28:
                    04:78:de:a2:64:30:55:86:53:fe:14:76:25:de:50:
                    69:27:63:14:97:b2:52:18:67:94:1f:e5:1a:ef:0c:
                    ab:d5:30:cb:de:70:44:70:22:4e:ef:1d:9f:3a:9e:
                    d6:c2:1b:76:28:0c:e5:e4:bb:e8:8f:40:53:d2:b6:
                    7d:93:09:8e:e4:12:bc:44:08:e5:68:36:ef:eb:b8:
                    4e:4e:09:5f:96:a2:a9:27:ab:bd:a5:ee:4c:3f:a7:
                    8b:a4:e0:4f:0e:88:c7:98:8c:67:b6:15:06:18:77:
                    ee:f7:0e:ff:5d:c8:e8:4b:bd:9f:76:26:26:3a:91:
                    91:2d:c3:6a:8b:d2:34:01:ef:55:6f:86:65:db:16:
                    ee:7e:4d:2b:5c:52:4b:61:fc:de:32:6a:49:bf:52:
                    14:10:9c:55:25:e4:6e:c5:a7:d3:09:b9:d3:ec:a0:
                    44:91:3f:47:d3:21:c9:73:16:1c:ed:fd:0b:5f:58:
                    06:80:8b:b4:99:a7:56:f1:0e:7d:38:f5:17:5a:7d:
                    04:ad:34:ab:c2:1c:3f:63:4b:63:ed:ac:24:4e:3f:
                    ae:14:63:8a:20:d5:12:77:e4:85:d8:0a:71:d0:41:
                    49:b3:aa:cc:16:72:6b:9b:ce:a8:11:71:0a:70:11:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8A:C9:94:2F:1A:D9:46:56:04:AF:56:EC:66:B4:F6:60:33:0C:7C
            X509v3 Authority Key Identifier:
                keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:45:a5:83:08:af:22:2a:80:0e:78:e5:f9:1f:89:d6:65:ba:
         ee:64:32:7d:46:3b:83:f5:84:59:5d:19:07:17:51:86:96:e4:
         9c:09:ca:4d:25:49:c4:81:a0:c4:7c:e6:7e:5a:f0:8c:40:76:
         ea:86:76:7a:73:a9:d0:7f:c5:54:2b:13:3a:a1:27:f9:1e:ed:
         96:42:13:30:15:17:a7:3f:c2:fb:01:18:44:8c:3d:1e:21:5a:
         70:cb:2b:b0:4d:6e:fe:5d:7e:29:be:f8:07:0f:ef:b7:19:58:
         26:d3:6f:35:b9:cc:6e:ad:38:54:67:12:e7:b4:2d:5d:da:b1:
         2c:5f:c7:72:29:23:86:ed:26:61:c0:3c:8c:21:aa:b1:4c:bc:
         c8:71:80:7e:a8:fa:83:1f:fd:c5:4c:d8:c8:ee:72:24:15:b8:
         c9:61:f1:e1:80:f9:26:ed:09:e3:91:47:b0:ea:51:56:d3:e9:
         9d:f5:dc:39:c6:7a:06:3b:6e:b2:8d:cd:16:45:a7:4d:48:c7:
         88:9f:e2:e6:d1:31:c9:13:eb:4e:1b:5f:37:4e:4f:bc:eb:cf:
         b2:d6:4e:07:8e:72:e9:21:2e:f9:c4:a1:b4:a2:dc:6c:9c:4a:
         9f:1d:5f:54:47:79:1d:1a:78:04:2c:5a:6e:9b:fc:f4:f1:e8:
         10:86:7a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:06 2026 by rpki-client