Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
File:                     pp7mLFrogRdKQhI3WepCPWH3NCM.mft (raw, json)
Hash identifier:          GV0uKsYcm0FutTmyevDhWwKC+iBatqil+Q5Lym8ZXM8=
Subject key identifier:   8B:09:D1:56:F1:3E:BD:B3:81:1C:8B:CB:05:FA:74:9A:98:2F:BB:BB
Authority key identifier: A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23
Certificate issuer:       /CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
Manifest number:          0128
Signing time:             Wed 25 Mar 2026 04:51:53 +0000
Manifest this update:     Wed 25 Mar 2026 04:51:53 +0000
Manifest next update:     Wed 01 Apr 2026 04:51:53 +0000
Files and hashes:         1: pp7mLFrogRdKQhI3WepCPWH3NCM.crl (hash: kXz8Q3IA23LkMEueVloz9Bems/55KhNHvZXrRLdh8Xc=)
                          2: A1418C5E68C411EF841B7987C4F9AE02.roa (hash: n0CCMGeumZCWwdmJVTlhf90Hp7n5mmj7hMl5rFGb2ZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl
                          rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F12, serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
        Validity
            Not Before: Mar 25 04:51:53 2026 GMT
            Not After : Apr  1 04:51:53 2026 GMT
        Subject: CN=69c369e9-2aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b3:db:3a:df:91:52:f6:af:aa:f4:a6:6a:a3:
                    c1:d9:fa:1f:09:39:72:a0:77:72:e3:7e:f4:e3:68:
                    58:d9:9c:d7:6c:d9:e2:d9:ec:96:11:8e:2d:60:14:
                    12:3e:0a:16:bd:81:c0:ce:5a:78:6a:24:8f:bd:82:
                    02:ea:88:b1:a7:5b:a7:53:0e:c2:18:87:4d:dc:34:
                    09:1a:a3:8e:f4:b7:be:3a:0f:50:5c:b1:d9:67:a4:
                    7f:ce:d2:6d:34:c9:38:23:b2:0e:41:12:ef:46:d7:
                    8b:53:a2:7d:cd:fe:62:be:7a:f2:32:65:9c:65:e2:
                    3c:fc:da:d0:b7:84:9e:c0:ba:28:12:25:43:cc:c0:
                    bd:2a:9d:6d:37:c1:64:72:00:4f:20:82:d3:f3:39:
                    4a:38:55:cf:9e:b3:44:2a:6f:b6:8d:59:e5:5c:05:
                    12:8b:c2:7d:88:61:02:0b:62:19:d3:12:ea:0f:4c:
                    58:8f:5b:a0:60:e0:05:60:dd:20:a0:f2:29:87:15:
                    75:13:7c:e7:14:e5:46:be:e9:a6:78:8c:08:cb:f3:
                    ac:80:6f:4e:3f:58:cc:7c:67:87:a8:57:b3:49:19:
                    e6:f0:74:68:68:20:36:55:48:7c:08:ba:d0:4f:3c:
                    da:70:07:e3:27:8f:6b:c6:c1:f6:ae:64:15:fe:d4:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:D1:56:F1:3E:BD:B3:81:1C:8B:CB:05:FA:74:9A:98:2F:BB:BB
            X509v3 Authority Key Identifier:
                keyid:A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:32:5c:41:0d:cf:9f:44:f3:38:14:00:5d:e7:48:fb:97:cb:
         90:1c:01:90:18:7e:5b:10:5b:e1:3b:d0:7b:9d:d3:91:bb:34:
         ef:a9:a4:10:10:2e:ff:57:fe:92:8e:a8:7f:29:f6:27:98:ed:
         d8:a4:09:69:4f:4c:38:e4:fb:44:32:9c:fb:2b:04:aa:97:92:
         be:72:9d:17:b6:a9:96:a4:ad:b0:e1:79:96:83:86:00:a7:62:
         8f:1b:4d:24:2b:d3:f4:ea:90:e1:dd:f3:c6:23:39:c1:e4:3e:
         aa:f2:c4:3c:e3:e9:d5:bb:f6:ea:d8:ab:8f:38:16:61:79:46:
         cd:81:fd:46:3e:d4:b1:2c:a3:48:69:1c:29:07:3f:99:50:85:
         57:7a:8a:c1:71:64:81:71:cf:f2:64:48:f8:dc:e1:6a:d7:74:
         bd:ce:3f:87:83:38:de:6d:27:62:8c:b7:d9:01:3e:28:e1:61:
         52:bd:ef:87:dd:60:18:4c:48:7a:c8:31:3f:74:0d:bb:a2:1b:
         67:54:5a:2b:4e:8c:9b:af:b5:e1:d5:72:6a:94:b0:32:6e:d6:
         44:3c:bf:3f:6c:a4:41:f6:c3:6e:ce:fd:9d:fa:f5:d4:e6:71:
         dc:53:63:47:e4:0e:51:b9:40:bf:cd:5f:64:90:35:1b:8e:2f:
         fe:f6:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:10 2026 by rpki-client