Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
File:                     0Iw24m8k-51RTztAqON6mgS1gCU.mft (raw, json)
Hash identifier:          iqhToBIGFBEn57GU1uD+VvwK4XmoTMyokVNl2JxTWB0=
Subject key identifier:   4B:04:55:C3:38:FD:2C:A9:60:62:C1:51:DB:8F:04:4E:29:CE:C0:E7
Authority key identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25
Certificate issuer:       /CN=A913E03C/serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025
Certificate serial:       3524
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
Manifest number:          3520
Signing time:             Tue 24 Mar 2026 14:54:43 +0000
Manifest this update:     Tue 24 Mar 2026 14:54:42 +0000
Manifest next update:     Tue 31 Mar 2026 14:54:42 +0000
Files and hashes:         1: 0Iw24m8k-51RTztAqON6mgS1gCU.crl (hash: vrptmnSivoPFtLBCOdd7HvIfCi6HGPkTRBve2LY/dhA=)
                          2: 1D790596F25D11EF8C5D7036C4F9AE02.roa (hash: Gh4dWKNdndeicyj44PS+6jAlqe5RF8zt7lygUMqJnnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl
                          rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13604 (0x3524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E03C, serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025
        Validity
            Not Before: Mar 24 14:54:42 2026 GMT
            Not After : Mar 31 14:54:42 2026 GMT
        Subject: CN=69c2a5b3-b4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:7d:63:c8:a6:a3:4b:1d:4e:18:46:41:d4:
                    6d:67:e6:14:87:f8:72:33:0b:37:fb:3e:b6:ac:b1:
                    51:87:0a:b6:a3:d4:d3:5f:fa:58:59:6e:8f:42:bd:
                    42:9f:28:7e:43:60:68:39:12:81:23:23:25:45:a6:
                    ad:f4:7f:29:c9:9a:c1:fe:24:43:64:5a:52:05:1d:
                    fb:a8:9d:6f:a8:86:aa:53:8d:79:f0:61:d7:19:ca:
                    d3:4d:86:04:8b:1c:fb:f5:31:28:f7:6f:31:82:fe:
                    d9:38:83:db:58:ec:67:8e:b0:64:03:55:d0:65:06:
                    83:fd:72:64:8e:76:41:6b:0a:20:f2:b8:ea:df:46:
                    db:7e:fb:7f:1f:b4:47:64:d8:64:03:59:f4:2f:bc:
                    49:82:bf:d8:5c:41:7d:63:af:4a:36:a8:31:13:85:
                    d1:99:ca:2c:2a:b9:53:c3:4d:dd:29:03:36:32:92:
                    e2:e7:c7:75:24:f2:a0:9c:71:59:56:bb:d6:3c:4c:
                    81:1a:fb:d2:7c:8e:f8:df:5f:4b:6b:2d:99:6f:e5:
                    67:6a:ce:16:fc:84:82:22:c6:9a:c1:ea:af:36:97:
                    36:81:b5:d3:5f:f0:6c:fc:a6:07:3a:4a:c9:0e:dd:
                    91:14:9c:ea:cf:b7:4c:b2:85:e3:3c:d5:53:96:27:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:04:55:C3:38:FD:2C:A9:60:62:C1:51:DB:8F:04:4E:29:CE:C0:E7
            X509v3 Authority Key Identifier:
                keyid:D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:92:90:65:b1:5b:c4:d5:72:04:f1:9a:62:61:4b:65:d1:
         70:fb:48:52:24:28:2f:c9:46:8f:ac:27:de:00:27:14:14:97:
         e7:48:04:43:2a:ea:8a:84:93:0d:41:c7:05:ab:d7:34:cc:16:
         49:9b:4e:ba:39:dd:b7:16:7d:4a:ab:80:00:49:ce:1d:14:d4:
         00:29:57:33:85:be:e6:49:54:27:59:4c:43:0c:39:44:38:03:
         32:c9:78:34:8d:18:95:55:bc:29:a7:db:52:03:32:d2:9f:9e:
         46:b0:b3:b3:00:6d:2a:13:ba:16:d1:be:b6:d7:7d:8b:3d:48:
         f5:db:16:02:48:a0:48:7e:b9:51:19:6a:f1:66:45:0d:10:9d:
         8b:d1:f1:5c:4f:0c:c6:64:b7:37:84:07:96:1b:6d:fb:b6:dc:
         59:12:27:12:29:59:e7:f0:92:89:c3:cc:8b:75:3e:d7:cf:c4:
         a3:42:e0:4f:1a:fb:03:3c:cf:f1:a3:75:16:4b:22:4c:1b:92:
         5f:14:de:df:b3:59:2e:af:d2:02:13:4b:c7:50:86:26:ed:d1:
         f6:7b:3f:70:b6:cd:ed:b4:06:2d:45:bd:5e:e3:e1:20:5c:04:
         71:69:78:9d:9a:17:51:a2:83:49:ed:89:3d:0f:73:6b:54:b3:
         31:81:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:17 2026 by rpki-client