Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
File:                     AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json)
Hash identifier:          GJmlkQ/UMX7gh9mSWQ/Qk24hqh01952nfFynSXI3eNo=
Subject key identifier:   06:69:3D:F3:73:FD:D5:1B:05:CC:99:11:45:EA:33:3E:D6:AA:B9:A4
Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Certificate issuer:       /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
Manifest number:          017C
Signing time:             Wed 25 Mar 2026 03:54:44 +0000
Manifest this update:     Wed 25 Mar 2026 03:54:44 +0000
Manifest next update:     Wed 01 Apr 2026 03:54:44 +0000
Files and hashes:         1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: RGGWnDT+LggR70dWzO4IUAe2SbQ8Zh31Z+SHob42eqw=)
                          2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: MyCVqIOapLAqkPEbtp0lVmBHxbYqY2/3hoqeYDo7nAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl
                          rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
        Validity
            Not Before: Mar 25 03:54:44 2026 GMT
            Not After : Apr  1 03:54:44 2026 GMT
        Subject: CN=69c35c84-4564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3a:7f:93:39:f1:02:28:9b:a6:e9:98:97:e9:
                    25:32:5f:f2:69:db:e3:8c:44:f1:ef:a0:93:eb:5a:
                    16:e8:aa:38:ec:36:0d:04:74:5a:eb:bc:33:83:01:
                    de:76:f5:6c:4f:52:e8:e0:ae:8f:18:bf:d0:b1:30:
                    88:18:88:15:ec:c6:30:e3:fb:ad:ee:10:7c:31:5c:
                    78:78:39:44:7e:f4:77:25:20:c1:1a:0b:3d:96:8a:
                    3c:7b:e6:98:27:de:ee:18:8d:00:6d:d5:de:c6:00:
                    9f:2b:e1:72:c6:85:f5:b4:39:bb:f9:71:54:58:ce:
                    ee:62:ec:86:8c:4c:76:13:e4:12:3f:61:9b:8a:47:
                    f2:0b:28:f3:d5:2a:9c:5b:2b:ca:dd:77:34:c1:02:
                    46:9f:d9:6a:be:26:35:d9:9e:be:1b:db:22:8f:84:
                    97:4e:34:14:57:fe:c5:83:ba:5a:0d:bf:70:eb:be:
                    8c:b3:78:7e:79:fc:22:ae:8a:24:06:47:2d:7e:41:
                    28:30:5e:e0:33:a1:83:42:0d:c8:a4:3e:ab:07:1d:
                    33:84:ae:fa:5a:6a:70:f5:2f:0b:41:24:c8:13:12:
                    41:b1:c5:dd:ab:8d:d5:c0:27:5a:f8:d5:77:29:f4:
                    76:ea:23:b9:ba:ce:a6:5e:b9:f2:df:cc:f0:bf:41:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:3D:F3:73:FD:D5:1B:05:CC:99:11:45:EA:33:3E:D6:AA:B9:A4
            X509v3 Authority Key Identifier:
                keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:c2:2f:36:04:0e:7b:5d:27:c8:7a:b2:63:41:46:14:95:1e:
         7d:b0:45:cd:dd:94:97:57:6f:4f:57:aa:d4:2f:0e:df:bc:95:
         77:ad:c9:21:e3:60:8d:ed:91:e2:79:13:22:9a:b9:58:05:33:
         2a:fc:2b:f3:be:ef:9a:2a:1f:19:c6:c7:de:52:e2:07:8f:b7:
         51:96:aa:5a:e1:0c:2c:2f:4f:39:d7:1c:bd:79:a5:04:a8:99:
         c1:5a:68:97:61:c5:08:fb:46:f6:91:d1:5c:f2:f9:0c:e5:8d:
         33:1a:ee:ef:d5:a0:f5:d9:06:c5:c7:b4:de:dc:dc:4c:1c:26:
         cc:82:d7:d5:59:44:3b:71:35:d0:e2:7f:11:7a:f3:e1:9d:27:
         e8:32:41:8d:39:6c:59:06:f3:a6:db:5f:0f:6d:d2:36:df:77:
         cf:32:6e:0b:92:c5:2d:d4:e3:c1:f1:c6:a4:f2:94:40:0a:48:
         06:4d:ca:34:96:65:2f:dc:32:cc:c6:22:5b:f4:70:7e:c7:53:
         c7:66:0b:b9:49:2b:68:e8:b6:b3:02:de:29:52:1d:27:fe:db:
         0c:02:ee:9f:4f:bc:b2:9d:d8:03:19:0c:cc:2b:a0:05:5e:2d:
         3f:39:46:80:5f:c4:fb:c3:63:6f:07:7c:f1:81:ef:50:fb:26:
         5f:94:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:48 2026 by rpki-client