Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File:                     mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier:          4VZGpUXdGV8tbGW0I32KxNsHtQYiqR2ShSwYDchmy/E=
Subject key identifier:   EB:1F:B6:AA:14:CF:CD:5C:3E:B8:F3:8D:2E:E8:E2:E0:18:7C:41:77
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer:       /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial:       0264
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number:          0256
Signing time:             Fri 27 Mar 2026 01:54:01 +0000
Manifest this update:     Fri 27 Mar 2026 01:54:00 +0000
Manifest next update:     Fri 03 Apr 2026 01:54:00 +0000
Files and hashes:         1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: jkktBfJJWbucTvtNUv0GYKX3EDSGH353z0RXvXoLCts=)
                          2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
                          rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
        Validity
            Not Before: Mar 27 01:54:00 2026 GMT
            Not After : Apr  3 01:54:00 2026 GMT
        Subject: CN=69c5e338-2d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0e:18:fc:d4:1a:3c:88:5c:f6:33:fb:f1:ec:
                    84:f8:0e:f3:0e:1e:a4:4c:d0:98:2a:f0:88:72:f0:
                    ab:2b:7c:e9:58:3d:6c:58:e1:51:ba:6b:5a:5c:40:
                    77:7d:ce:b4:78:b7:43:14:c5:ed:f5:32:42:aa:9f:
                    af:43:c0:f6:5a:b6:e3:bf:cf:8c:34:7c:fa:a2:d8:
                    36:64:aa:77:eb:e8:05:0b:38:e6:10:9e:5c:2e:e5:
                    f2:69:cd:50:f8:71:e4:85:db:b1:fc:44:9f:82:04:
                    b9:26:9c:64:f1:41:ea:2b:60:a9:1e:9b:3a:ad:d5:
                    5e:6c:19:1f:14:5b:2a:7a:b0:48:36:4a:c9:e7:ac:
                    d3:50:b1:1c:d0:c4:88:b5:41:f3:62:88:32:f8:d4:
                    ad:d6:0b:df:ee:33:b4:2c:39:3d:20:1e:58:f2:29:
                    0f:18:cc:a0:ac:f3:bc:e6:a3:41:e1:89:e2:26:c3:
                    e3:84:1c:5a:04:13:b7:ec:50:45:5e:6e:5c:88:ae:
                    1c:8e:1e:7c:cc:85:2d:54:da:a7:7d:04:92:30:23:
                    07:47:b1:fa:2c:c5:28:8b:11:e6:6d:80:64:e1:26:
                    de:3b:87:08:8c:bd:e3:95:5f:be:b8:cc:db:e5:f4:
                    89:1b:8b:c6:be:a8:de:31:77:06:ac:77:b9:09:f7:
                    99:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1F:B6:AA:14:CF:CD:5C:3E:B8:F3:8D:2E:E8:E2:E0:18:7C:41:77
            X509v3 Authority Key Identifier:
                keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e9:69:2b:06:da:29:d7:fd:20:8b:2f:00:7b:c3:7e:21:e3:
         34:5e:58:49:9b:71:89:4d:73:79:e9:18:ca:0c:4c:b8:86:9c:
         03:bf:f1:74:6e:4d:8a:a4:14:53:2b:0e:3a:9a:af:5e:34:f2:
         04:cd:9f:65:7b:ae:54:f4:e1:18:a1:cb:a6:72:c6:76:4b:b4:
         0e:02:2e:df:9b:b6:44:74:a7:cf:76:bb:a6:f2:1d:03:b8:0b:
         93:0c:61:c3:2b:4c:82:c5:d9:1c:fd:3a:79:b2:cd:70:7d:c8:
         20:28:e2:ee:e7:ab:46:96:09:f0:68:a8:e7:dd:48:93:7f:4c:
         ca:e1:de:43:c6:9f:9c:60:69:0c:e1:8c:71:fa:2c:45:68:7a:
         15:77:ee:10:5e:e2:31:5c:94:09:d1:6d:bd:c7:b9:e4:54:bb:
         95:19:ef:97:7a:1c:5f:6d:e9:f2:33:87:09:64:70:57:06:06:
         55:95:cc:d0:01:2d:77:44:0b:c2:fd:84:6e:74:0c:a0:d0:75:
         f8:77:f2:b6:11:c5:00:ad:34:f7:81:2b:cd:7d:64:7f:b0:7b:
         72:c7:ba:51:d6:2d:21:ca:0e:77:cb:f0:42:f2:72:40:a4:16:
         7b:27:de:af:53:17:26:7a:b7:85:b8:42:3a:91:58:5d:28:5b:
         a6:af:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:46:32 2026 by rpki-client