Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
File:                     0MwJjruW320cXCjum1Xwqbgp_ak.mft (raw, json)
Hash identifier:          yOcJ2BFGeRToTHEiKGtJiCVvmxSJD0ToCEn1IkHaNqE=
Subject key identifier:   70:4E:91:D8:22:4A:E1:1C:64:45:55:27:A2:09:D7:A9:43:3D:BB:7C
Authority key identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
Certificate issuer:       /CN=A9142187/serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
Manifest number:          42
Signing time:             Wed 25 Mar 2026 07:38:45 +0000
Manifest this update:     Wed 25 Mar 2026 07:38:45 +0000
Manifest next update:     Wed 01 Apr 2026 07:38:45 +0000
Files and hashes:         1: 0MwJjruW320cXCjum1Xwqbgp_ak.crl (hash: M9VubQYqHGlJ3hrANHIBx3NVJi4mRNR2jjfThBzCxzM=)
                          2: CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa (hash: pzoy5b4jAK7WNQHs94s/PsJ8rZ83uQ8ezld7Xwjun4g=)
                          3: 26CA159E0BB711F1A64B03C6263D8C67.roa (hash: P5tfx0ynD93bH16mM9zmJmGEUghyGxe1+aGIlNRSAJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
                          rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142187, serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
        Validity
            Not Before: Mar 25 07:38:45 2026 GMT
            Not After : Apr  1 07:38:45 2026 GMT
        Subject: CN=69c39105-35ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:5c:3a:0e:87:16:6b:37:84:e5:ed:64:ee:
                    d7:a6:87:db:4a:cf:0c:15:8f:52:3c:35:47:e7:f6:
                    fd:08:41:f8:2b:40:72:e8:2a:15:bc:b7:f3:18:2f:
                    da:f9:4b:33:2d:66:71:06:d5:21:af:34:58:7c:f1:
                    e1:f5:d7:3a:b3:83:22:65:a7:65:6f:74:df:8d:3f:
                    e8:f0:20:b8:cc:f3:ac:d1:57:0d:2c:c8:0d:2d:e4:
                    8e:8e:7c:96:c0:3d:22:92:a4:f0:06:8e:25:3e:70:
                    1f:87:24:ee:b6:7c:ee:d3:42:ce:9b:ae:a6:22:cd:
                    03:c7:f2:84:5f:01:a1:d5:c0:27:cd:21:5a:3d:b8:
                    d5:f3:25:47:d6:ff:3e:6d:ca:2a:75:67:da:75:e5:
                    51:7a:ac:1c:1d:d1:46:4d:5f:f3:b8:15:e2:e4:55:
                    01:0f:89:63:4b:b9:d0:54:2f:fa:af:86:85:95:2b:
                    ac:00:a3:b8:02:92:e6:30:04:f5:3e:84:08:0c:fa:
                    ef:71:a2:f8:30:41:d4:38:26:76:c9:20:86:59:8a:
                    01:33:dd:6a:00:17:e0:89:43:0a:da:07:96:a8:9e:
                    41:69:66:00:f3:ef:12:f3:9a:9b:7b:aa:ff:fc:d3:
                    e0:71:25:5e:a2:69:f7:4f:97:e6:c4:c8:d5:43:25:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4E:91:D8:22:4A:E1:1C:64:45:55:27:A2:09:D7:A9:43:3D:BB:7C
            X509v3 Authority Key Identifier:
                keyid:D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:2b:64:ef:1b:35:bf:dc:37:40:c6:82:2a:c8:c6:05:99:
         43:58:61:ae:85:9d:ee:98:a2:51:76:d8:06:d9:b4:4b:e6:83:
         d1:b7:18:15:ea:90:ee:3f:1a:1b:e4:38:8a:e3:c0:12:68:b3:
         9d:b2:4e:fc:9c:d1:35:09:f3:e6:9d:0e:73:d0:1e:65:8e:99:
         1f:e3:16:6d:a9:77:97:a8:c4:b4:8f:13:29:b0:68:ff:80:43:
         e1:d0:eb:fc:91:f3:ca:f5:3d:31:7b:42:fa:5b:1b:51:0d:d2:
         14:de:6a:27:a3:66:d8:36:ee:e1:54:75:2c:bf:87:b6:00:cc:
         c3:99:e6:8b:79:f3:41:22:9c:55:bf:68:94:68:34:aa:a8:61:
         1b:10:43:85:d8:11:f9:4c:83:78:48:dc:cf:39:29:c3:7a:e3:
         f5:40:a8:69:6a:15:67:ea:55:a8:2e:98:99:c7:a5:05:15:0b:
         2f:24:7c:b4:ed:82:e8:b1:ca:d1:bc:be:5f:a2:4e:00:23:06:
         93:bc:11:49:75:18:cc:7f:fd:5c:16:0b:c2:85:6a:dd:1a:61:
         6e:e7:0b:e4:e8:64:6d:a8:09:f4:89:df:30:d2:c3:9e:a3:ce:
         e8:e9:40:d1:0e:36:ce:5c:0c:79:23:81:1d:0a:6c:8e:68:f1:
         59:ef:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:04 2026 by rpki-client