Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
File:                     xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json)
Hash identifier:          lv/TbbvvQsr/K76xlpiA/+Bq473QjiYe7ZebNbfmk+8=
Subject key identifier:   D0:C8:2E:79:99:33:A6:D5:04:D0:B5:D1:BA:B9:C4:E5:57:B8:49:76
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7E30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
Manifest number:          48CD
Signing time:             Thu 26 Mar 2026 16:55:09 +0000
Manifest this update:     Thu 26 Mar 2026 16:55:09 +0000
Manifest next update:     Thu 02 Apr 2026 16:55:09 +0000
Files and hashes:         1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: lsKDjhZftmOQuamX2TbNXhsnD4sWy3Qwy4jF715pHDs=)
                          2: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: Eb6UizvbKiSswSpr6ZBFwyh776VEliLHzpERT3ICSBc=)
                          3: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: Yx4RUg6/Ps1F9WLGKmkBr2vKf8cXWNrcddyAVaGBT3o=)
                          4: 638483FACB0911F0AF79E43DC4F9AE02.roa (hash: 7S6GqTogESgTpBUNMZpPgMS9/jS5HSy2eI/QoMqfxH8=)
                          5: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: VkVnfC34JR/811jGxsrew1RM+A9tRAb0W7MV3qismys=)
                          6: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: lG8i+f47XPMSDaBCmERX0JHOMdgM5oAy1rXkRgeNonA=)
                          7: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: zWNp9ZaOgBHA/svnObyrHOTGUNlUERNOeU1v6+YaWVk=)
                          8: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: xl2kGNtF5y2G5owSCgIil5S6mDXwvwxCSh7vN6+5yO0=)
                          9: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: huYEy1OShMTnG6Dv6GIF3b8s4DVf7PGptyUFZSE3GKg=)
                          10: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: q55DPuVw7xXsN2vhIQXjs1ntUwBZ/QUMetD5PESujBQ=)
                          11: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: 7dKmy2mjbAxCYpKx0eIzsPAsDYtYgWcb4xJo9UcXggE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32304 (0x7e30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Mar 26 16:55:09 2026 GMT
            Not After : Apr  2 16:55:09 2026 GMT
        Subject: CN=69c564ed-3eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:d2:89:30:72:a4:3a:db:ed:b0:45:8f:88:
                    aa:b2:34:47:f7:52:08:c0:82:de:b6:52:06:70:3f:
                    4a:24:81:1c:a8:c3:50:1e:b3:ef:0a:e1:44:13:46:
                    db:39:4b:07:9c:f8:cf:58:26:7f:e6:37:5e:0c:85:
                    67:fd:e0:ba:3d:20:78:48:cc:67:fa:dd:1e:63:88:
                    ce:0b:c5:d0:1e:11:c8:65:11:fa:64:e1:ff:c5:20:
                    ae:ab:a7:18:4d:22:31:83:88:b0:a4:c0:3a:8a:bd:
                    c6:3d:e0:87:f6:9b:e3:18:65:3b:d2:1a:2c:2f:72:
                    88:c7:0b:b0:57:d5:0d:60:d2:ad:1a:44:15:fa:fd:
                    0a:20:3b:c1:4f:b1:b9:30:6f:81:01:69:c0:74:cf:
                    85:e7:02:71:b8:4a:62:2a:68:5e:c4:79:0d:9a:39:
                    cc:b5:b9:54:e1:86:77:2e:9f:69:7f:ee:51:03:c7:
                    1f:ec:12:11:ca:be:79:88:8d:43:a2:2d:86:5b:91:
                    3c:58:fd:23:2e:c6:fd:ee:ea:ea:b7:05:44:b4:ea:
                    47:63:e2:f9:7b:0a:9d:6e:03:fa:23:4a:9e:92:9c:
                    71:e9:a4:12:a6:49:f4:14:08:b7:b5:59:ce:3a:24:
                    5f:ad:3b:31:0f:63:e3:23:8f:7f:ca:36:4a:ff:e0:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C8:2E:79:99:33:A6:D5:04:D0:B5:D1:BA:B9:C4:E5:57:B8:49:76
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ee:d2:f9:48:83:67:9d:f3:9f:dd:17:28:93:e8:eb:75:f8:
         dd:8a:49:ab:0b:33:a7:04:8a:8c:66:a4:a7:81:64:95:67:20:
         58:53:f2:e0:28:e9:1c:73:47:ff:7f:7f:29:0f:43:df:ea:df:
         bb:77:79:ae:02:dc:e7:f3:ce:dc:da:e8:66:77:46:2d:b2:27:
         77:21:fe:2b:d9:5a:cb:f1:7c:b2:7f:3e:5a:f6:9d:5d:2a:30:
         2b:47:f2:c2:0f:2e:65:88:a5:37:1b:9e:cd:2c:76:29:05:9f:
         30:ef:b0:cf:4c:23:c5:f8:36:9e:0a:52:45:3c:cb:78:f2:aa:
         c6:5a:b5:f8:0b:f5:50:fe:17:9f:28:8a:77:0f:0b:ae:3c:05:
         c4:69:16:32:d3:ec:86:09:ec:40:96:58:91:d0:40:fd:9c:d3:
         81:8b:17:63:dd:66:c8:e9:bc:fb:29:ea:51:62:ac:86:9d:73:
         10:c4:19:25:be:7a:16:cd:27:11:0e:1d:f8:e9:32:4e:e3:d3:
         61:05:52:db:d0:2e:07:ac:fe:7f:d0:9d:f5:ec:45:06:2f:d0:
         08:65:46:3a:0d:b6:89:70:97:f3:c2:eb:26:92:06:c3:1d:d5:
         0c:94:5c:5b:77:49:7b:fd:74:83:99:16:a2:2e:44:cf:94:5c:
         68:3b:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:00:42 2026 by rpki-client