Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
File:                     Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json)
Hash identifier:          qM7gsxdXwokY1hSykwkOLrWNSKKmGNq2L+KMXo8E5Vs=
Subject key identifier:   32:D7:98:AF:DB:E1:3F:FD:1F:0F:F1:DE:49:D8:6E:9B:78:15:2F:9C
Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Certificate issuer:       /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
Manifest number:          013A
Signing time:             Wed 25 Mar 2026 04:37:44 +0000
Manifest this update:     Wed 25 Mar 2026 04:37:44 +0000
Manifest next update:     Wed 01 Apr 2026 04:37:44 +0000
Files and hashes:         1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: Rw0+Vne2+DhYpZPo00qTmj1f49h9m20mnQkS8wDSmcc=)
                          2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: oqvWd4uZO6chUuSX/QzRBk1eYkn+Hq0Y5MjKEFCE6SM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
        Validity
            Not Before: Mar 25 04:37:44 2026 GMT
            Not After : Apr  1 04:37:44 2026 GMT
        Subject: CN=69c36698-f86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:b9:79:f2:38:5d:14:35:b7:88:03:bf:9a:
                    c5:21:56:a3:3e:ad:83:29:c1:09:9e:2f:c6:54:55:
                    f9:b6:ad:9b:0a:02:e1:d8:6a:5b:e1:b8:4f:75:1e:
                    51:49:3d:0d:4e:69:92:67:47:52:9b:63:8a:dc:2b:
                    ad:de:9d:89:1e:25:6c:2c:78:b3:a7:34:b8:ec:04:
                    92:f7:6a:22:35:4f:71:5c:3c:02:b5:ff:f9:b8:f7:
                    d5:1c:08:ad:b3:cb:c0:0d:45:90:79:78:8a:09:19:
                    fe:87:65:83:4b:d4:b2:d7:1e:6c:e8:c6:bf:08:41:
                    39:ce:1a:85:ed:b6:db:2a:7f:35:eb:2d:68:a6:57:
                    ba:d0:4b:89:f8:e8:f8:d7:d6:9a:6b:e0:6e:27:42:
                    93:87:8b:c0:46:6b:d7:23:8b:56:7f:53:21:6e:59:
                    5e:df:28:3e:ad:00:00:ec:2f:c3:6e:7d:4b:e7:84:
                    a3:08:02:69:b3:13:3a:c4:c7:dc:e4:ad:22:8f:df:
                    73:7e:10:1a:f6:34:6d:ff:de:7a:c6:9b:4e:e2:51:
                    05:ff:88:d9:b0:15:cf:e4:df:91:4c:ea:02:cb:9d:
                    f9:a0:91:44:64:63:75:f4:fd:22:f6:66:4c:78:46:
                    6c:9f:61:dd:e7:00:ac:98:b2:de:15:04:03:6a:7d:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D7:98:AF:DB:E1:3F:FD:1F:0F:F1:DE:49:D8:6E:9B:78:15:2F:9C
            X509v3 Authority Key Identifier:
                keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a3:91:48:12:95:47:49:18:f9:a5:1a:61:28:57:91:92:3b:
         de:3c:28:ee:a6:3c:c4:80:fb:de:76:65:81:c4:17:bb:b8:15:
         29:c4:52:fe:2d:d1:f2:63:b3:79:c8:be:4f:53:0f:b2:20:1d:
         f0:ed:8b:ce:c8:19:39:9b:1a:4f:2e:f7:f6:e5:8b:b6:0d:d1:
         68:d3:dd:33:53:cd:45:b2:74:24:df:49:02:70:5d:4a:79:41:
         8f:cd:b3:48:b9:6c:42:9f:50:c8:6b:8b:f5:ef:b9:7d:6b:95:
         73:5b:7c:67:2b:a2:9a:ae:bc:f7:80:aa:d7:e1:c1:9e:95:18:
         98:c7:09:69:b0:3b:ea:19:1a:4c:13:8f:09:e8:9d:6b:25:4f:
         96:25:82:e4:ec:4e:2c:a3:18:d5:99:68:c6:3b:25:86:7b:e6:
         c7:d8:f5:08:94:cf:7b:ce:f7:c5:b1:01:a4:05:3f:af:46:7b:
         f3:eb:45:cc:ba:c9:6e:7e:ba:54:79:22:15:9d:02:41:64:38:
         00:14:4d:82:a8:d4:02:7d:40:20:cd:2f:0b:00:1c:67:58:d9:
         58:db:46:58:32:e2:3b:64:ba:b4:f4:52:d6:cd:5b:57:79:f0:
         60:69:37:53:cc:b3:b7:01:6a:13:59:d4:c6:5e:ff:00:f7:0b:
         77:37:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:42 2026 by rpki-client