Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
File:                     poz6MR67HxAyDqIHdTAw5_Oij3I.mft (raw, json)
Hash identifier:          OVK37y5SW0CTsNstJkrtIOjallnmxYtTJMgraYIOiMg=
Subject key identifier:   E7:39:38:80:0D:5D:24:9A:10:37:5E:D6:C5:DF:62:96:43:46:9F:40
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Certificate issuer:       /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial:       0B73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
Manifest number:          0B4F
Signing time:             Tue 24 Mar 2026 19:02:54 +0000
Manifest this update:     Tue 24 Mar 2026 19:02:54 +0000
Manifest next update:     Tue 31 Mar 2026 19:02:54 +0000
Files and hashes:         1: poz6MR67HxAyDqIHdTAw5_Oij3I.crl (hash: D7KZ1cwINlor01FVq2Rf01FHzhcVa7SmmqA4hr79Nmw=)
                          2: D353090841F711ECB1465157C4F9AE02.roa (hash: MAsaeUy6LOekFb7Qw8GLcY4gw0FySqwoqhykZ1c5A1s=)
                          3: 1E95063A21E611EEB4824339C4F9AE02.roa (hash: TbKKFT7S626yEXMmTgARs9uYmFzDn9gl7uX/OQ5UVD0=)
                          4: E3D288CA6BC311EDB9791958C4F9AE02.roa (hash: ZcRLBxk/Q866NeF+jJVHP1VCi2fP9N3TlKCJBZZM0ng=)
                          5: 110731BE329D11EFB45DDA57C4F9AE02.roa (hash: IvBMYAqDKRhuYk3AP9whdJ/rRjZk20rkKkeR6oNPNWY=)
                          6: F4E06C32804911EDABB05C09C4F9AE02.roa (hash: nBPwqsfslnyICltnljnucMXSEkw/os4EQGvB9UxWXu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
                          rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2931 (0xb73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
        Validity
            Not Before: Mar 24 19:02:54 2026 GMT
            Not After : Mar 31 19:02:54 2026 GMT
        Subject: CN=69c2dfde-e59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:40:78:e1:96:7d:2a:f4:5c:9c:b2:22:8a:6e:
                    31:95:77:bb:8f:77:14:a5:77:b0:5b:8d:09:af:9d:
                    63:d5:d9:22:69:e4:de:b9:a4:e6:66:5d:a8:9a:85:
                    c7:1d:ae:52:ab:68:a7:c8:47:9d:9b:9c:6a:e6:81:
                    dc:44:52:ee:13:c0:38:0e:f6:b8:4c:c0:ce:23:e6:
                    f1:0c:5b:92:74:db:b3:2d:04:33:e7:79:fc:2d:99:
                    62:d2:f3:bc:02:6a:66:f8:bc:39:8d:73:6b:90:15:
                    80:3e:c8:3f:c4:a6:5f:ff:e6:86:62:de:55:b8:73:
                    03:26:33:19:72:d1:93:ba:14:2f:94:4d:4a:88:00:
                    86:0e:48:8b:a8:84:ee:6d:ab:37:3b:08:a9:53:4e:
                    41:80:49:5c:80:73:c6:ab:64:e4:51:f8:e1:e2:2d:
                    cc:a5:49:7c:e9:ac:39:8a:ba:75:11:07:3c:e5:6f:
                    25:f3:9e:78:3a:ad:0b:e0:db:21:03:7f:41:92:76:
                    6f:ad:e4:cb:e4:5f:15:8e:53:f2:76:02:ea:9e:b1:
                    08:47:7e:ea:e4:af:a8:68:f2:36:57:79:0d:39:1d:
                    cf:05:60:f3:39:7f:39:80:54:ea:e4:ef:4f:eb:20:
                    7e:70:3b:8e:0a:94:9f:20:2b:6d:e5:9f:f4:4a:c9:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:39:38:80:0D:5D:24:9A:10:37:5E:D6:C5:DF:62:96:43:46:9F:40
            X509v3 Authority Key Identifier:
                keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:90:5f:48:a3:ef:2f:43:79:c2:c5:88:d5:5d:2f:d6:a9:86:
         2d:b0:5d:d7:a5:62:05:a4:d1:27:0a:25:e2:70:7e:aa:f4:d7:
         73:1a:8c:58:b2:af:a8:37:f9:b1:06:6c:77:9c:ec:1e:ae:62:
         73:89:d7:14:f6:69:bb:82:f8:a5:3d:e7:e7:56:28:d2:d0:8b:
         9e:4a:17:7e:41:84:b8:a6:8d:53:c7:c8:a3:cf:1d:c8:39:9e:
         b0:f7:7d:a7:41:c8:eb:98:3d:25:a7:57:dd:d3:1b:bd:10:81:
         59:bc:1a:ba:87:c4:eb:57:2b:4a:22:07:22:69:e8:96:a3:b3:
         3d:cb:f6:da:97:16:5c:1b:13:95:db:38:a7:91:bd:83:1c:fd:
         91:c9:3e:12:2e:60:68:31:20:12:16:8c:fa:3e:e2:8f:08:1a:
         74:8d:e5:ba:5f:f2:84:f4:73:fd:ea:6d:ac:8b:c5:4f:40:11:
         bb:93:96:e0:9c:23:f4:19:f6:6b:2b:23:9b:64:3f:37:9c:dc:
         f3:76:96:56:0a:42:d6:dc:0f:cc:ea:ed:b9:ff:b7:39:b9:71:
         69:b6:57:d6:99:25:64:3a:fc:b7:fb:df:f4:ce:fd:7c:aa:57:
         f6:93:07:93:f4:5e:d5:e1:0b:05:98:c9:13:25:b2:cb:2b:4d:
         10:d2:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:24 2026 by rpki-client