Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
File:                     ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json)
Hash identifier:          Af+bcu5T5oPzm6YXI/3z8+K34AyLC9TNp9lyCdcti5c=
Subject key identifier:   00:88:72:5B:14:17:FB:5F:C0:2F:57:4D:51:C4:CC:6C:A5:14:F4:38
Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Certificate issuer:       /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Certificate serial:       0660
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
Manifest number:          065F
Signing time:             Tue 24 Mar 2026 22:19:33 +0000
Manifest this update:     Tue 24 Mar 2026 22:19:33 +0000
Manifest next update:     Tue 31 Mar 2026 22:19:33 +0000
Files and hashes:         1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: xGJJssmOh6Wwfy89onKdbuKVD5a8AG92+Ry971HDgOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
                          rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
        Validity
            Not Before: Mar 24 22:19:33 2026 GMT
            Not After : Mar 31 22:19:33 2026 GMT
        Subject: CN=69c30df5-1f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:15:77:1b:b5:3e:c9:fc:5c:52:ed:27:2c:
                    fa:09:07:83:95:3c:56:17:27:94:d7:10:77:12:50:
                    ad:7c:0f:df:43:d3:c7:14:ce:fc:2b:4a:46:89:c9:
                    8b:2e:5f:4e:07:1e:a4:e7:e0:61:d4:b1:c1:a6:dc:
                    b8:e8:f6:7c:d1:a8:2a:13:5a:b9:bf:f1:70:d4:1b:
                    c4:c8:8c:95:39:90:43:b6:b5:c9:3a:2b:45:be:7a:
                    0c:78:e4:81:c7:c1:67:18:7a:e0:6a:6b:19:89:e0:
                    0a:94:0c:4e:cf:27:82:2d:29:9a:ee:f9:75:ad:8e:
                    eb:c9:54:f0:c3:09:6c:a7:7a:bc:65:a8:7b:43:11:
                    07:7e:00:44:67:18:83:c8:99:97:ca:8e:2e:ab:28:
                    b3:8e:e3:d0:25:a5:f4:6f:85:d6:3b:8e:ab:a0:6b:
                    ee:8c:f4:f0:dc:85:61:b3:f2:32:11:ac:35:1d:02:
                    8f:1d:35:9c:dc:d2:40:62:de:9b:08:8a:3c:89:b1:
                    ad:50:ca:5b:5b:fc:4e:ec:4b:a1:8a:55:4f:51:59:
                    c4:01:52:d3:54:97:4a:40:52:3e:fa:30:a5:4d:13:
                    f4:cf:34:2d:79:d1:6a:99:68:f4:c0:fb:06:b5:09:
                    d0:db:fe:d1:5b:3f:66:32:b2:29:d5:85:b2:0d:6c:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:88:72:5B:14:17:FB:5F:C0:2F:57:4D:51:C4:CC:6C:A5:14:F4:38
            X509v3 Authority Key Identifier:
                keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:a3:7c:74:3d:a8:80:73:69:3d:3e:69:61:d6:71:59:b4:
         fa:1a:c5:c3:08:14:40:2b:5f:2e:4b:df:8a:df:fa:fb:db:01:
         18:31:9b:d8:94:a7:74:a5:0f:7d:8a:08:57:55:e3:fe:8c:12:
         8e:40:31:4e:e1:d9:d8:5a:9d:a0:77:b9:ef:30:a7:7a:99:c4:
         6b:5a:ba:25:84:5b:2b:49:03:25:5f:7e:ee:ec:41:e5:da:70:
         e1:b8:62:9d:5a:98:41:07:03:59:cf:4e:da:08:85:36:0c:a0:
         9e:55:c4:58:ab:1d:f7:30:1a:8b:90:06:ea:47:d9:98:a8:89:
         b1:71:82:ff:70:46:1e:c2:1b:6c:38:38:e0:9c:fb:9f:39:9b:
         5f:07:d5:e0:86:67:1c:36:a8:5f:28:68:3d:a0:76:3c:7b:74:
         d8:ea:c6:cc:60:56:7f:46:b3:85:04:82:bd:2d:07:0b:4f:70:
         9c:c7:19:de:63:61:88:0b:67:cf:44:59:73:b1:54:13:1d:a8:
         a2:b6:66:96:d4:13:9d:fe:c7:f5:b6:6d:79:6b:07:52:75:22:
         ee:47:aa:10:5d:6a:88:33:ce:88:85:8d:b8:ad:41:96:99:de:
         8f:26:b6:78:1a:1a:ca:9d:9b:6b:2d:ac:df:f3:07:6a:91:db:
         69:66:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:16 2026 by rpki-client