Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
File:                     iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft (raw, json)
Hash identifier:          5iO7qQO2sjxg0X9KcriWkQOeNEVzQfh8q2llquUzGoE=
Subject key identifier:   D9:BE:8F:56:69:AA:B4:97:F7:BD:5C:CB:83:C7:9B:53:4D:6B:D7:21
Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
Certificate issuer:       /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
Manifest number:          0168
Signing time:             Wed 25 Mar 2026 04:10:21 +0000
Manifest this update:     Wed 25 Mar 2026 04:10:21 +0000
Manifest next update:     Wed 01 Apr 2026 04:10:21 +0000
Files and hashes:         1: iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl (hash: u5uFsxvGr78Fpc/47ZgZYjB988gwk11AKDQJzrn2um4=)
                          2: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (hash: 6zOScysGwTG4B1eD0KO19S4ckqbekNQk8MFvUJMW9/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl
                          rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AD90, serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
        Validity
            Not Before: Mar 25 04:10:21 2026 GMT
            Not After : Apr  1 04:10:21 2026 GMT
        Subject: CN=69c3602d-e4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:40:d1:66:31:fa:7a:06:29:a9:5c:5d:2e:80:
                    0b:f4:33:c4:f0:df:9e:0a:28:b2:eb:03:26:14:39:
                    d9:d6:18:16:08:35:a8:33:1d:26:bf:1a:4d:bc:06:
                    3f:27:1b:c7:0b:8a:3d:ac:4b:bb:d9:e0:a2:9d:a7:
                    a2:69:64:e8:fc:89:2f:0e:6a:d1:a4:26:59:d3:10:
                    99:71:dd:ef:61:a4:f7:c1:7b:52:a7:11:0b:6e:6d:
                    cc:6d:c4:65:96:91:64:c2:19:cb:02:e9:4d:dc:74:
                    5f:0a:3b:17:6c:19:53:2f:76:57:ff:9d:c4:86:fe:
                    18:68:39:18:f1:43:75:05:e1:34:05:b3:63:19:fc:
                    7f:d2:16:e0:dc:65:d8:c4:77:ef:a6:85:e0:9c:9c:
                    0f:fa:69:27:d7:e1:fe:09:31:57:36:59:f7:5c:e4:
                    92:a9:73:04:0b:82:b2:46:8d:93:13:0d:be:3e:dd:
                    04:41:fa:db:87:b0:c4:ff:41:fa:23:ca:71:3f:cb:
                    aa:30:6f:ab:c7:fe:fe:16:95:6c:72:6a:8a:28:15:
                    3f:34:f8:ae:3d:b1:28:fa:f3:f8:4e:dc:70:ab:73:
                    56:f8:2d:8f:21:32:27:44:9a:d8:bf:4e:48:8f:00:
                    95:d2:b6:50:f2:ab:f7:e4:61:7f:fc:84:35:80:6a:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BE:8F:56:69:AA:B4:97:F7:BD:5C:CB:83:C7:9B:53:4D:6B:D7:21
            X509v3 Authority Key Identifier:
                keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:9b:c5:17:37:0f:8d:7e:36:e1:53:2b:31:92:4e:09:87:
         37:07:ed:a4:0b:dd:ed:e3:06:b5:1f:10:50:e3:df:9e:85:19:
         ff:e3:a3:3c:ce:d9:0d:30:a1:d0:d2:34:f8:b1:3e:ef:da:b4:
         fb:f0:e6:fb:f3:5d:d7:32:68:d4:e3:59:a2:4e:cd:6b:84:a1:
         ee:5e:66:cd:92:37:37:b5:00:90:f0:e7:dd:62:33:5d:28:a4:
         e1:9c:a3:60:62:f0:62:6f:77:be:ce:76:1e:20:12:54:96:c8:
         38:3e:66:07:c6:12:c2:a4:a3:c0:95:3a:df:c5:9d:f3:2d:97:
         7e:31:29:e2:9b:d6:b0:9e:27:4a:03:eb:4f:5f:e8:20:57:8a:
         30:b8:85:5b:b3:ff:ff:2d:80:8a:92:d2:ca:88:1b:85:5e:93:
         d5:8a:f7:0c:39:29:51:97:13:47:58:13:91:4a:59:04:4f:56:
         e3:5d:5c:36:6c:92:83:cd:10:30:ac:bb:b2:95:b6:29:0a:08:
         88:cd:fd:5c:40:bd:4a:c6:f8:d3:c8:32:05:0c:e2:5e:2a:59:
         1c:16:22:43:53:1e:75:30:d2:68:f8:af:f3:2c:ec:50:b1:6b:
         80:cd:ae:1e:c4:e9:5e:55:c1:26:41:f8:61:b4:5f:38:ca:2e:
         4e:f2:4d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:18 2026 by rpki-client