Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
File:                     xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json)
Hash identifier:          7EtPfKNpQ1PddLC0uqyVSv/wHVdtbqanyBAjMQ8HY8Q=
Subject key identifier:   E5:A0:F8:0F:97:7D:5F:12:7A:25:08:73:EC:87:4F:72:87:AC:AC:B9
Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
Certificate issuer:       /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
Manifest number:          01DF
Signing time:             Wed 25 Mar 2026 02:46:55 +0000
Manifest this update:     Wed 25 Mar 2026 02:46:55 +0000
Manifest next update:     Wed 01 Apr 2026 02:46:55 +0000
Files and hashes:         1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: WYvv50slBTiKP4D5sfDzmAeLh1zkXBNSZoRSD//vO34=)
                          2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: XYht5ZQ/KAnp+RFAT2TWXGSNLAgSyYgAZ+uFeNVyc8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
                          rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
        Validity
            Not Before: Mar 25 02:46:55 2026 GMT
            Not After : Apr  1 02:46:55 2026 GMT
        Subject: CN=69c34c9f-429e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:21:7a:cf:a8:b8:e9:d5:b7:2f:17:57:17:
                    48:83:36:41:90:be:94:aa:50:2e:ca:2c:97:22:e6:
                    bf:da:81:52:fe:8e:cf:52:96:67:1d:2e:f7:2e:ad:
                    6e:0b:09:aa:19:f4:82:9c:95:0e:2b:eb:23:e9:33:
                    65:a2:14:b8:65:10:57:a1:43:de:2d:36:1b:0d:24:
                    7c:3b:63:d8:4b:a2:6e:e1:b7:2f:2d:aa:3d:83:60:
                    87:74:d7:1d:fc:9a:de:68:07:3b:bd:aa:66:46:ef:
                    66:ea:df:5e:6a:f2:5d:2a:cf:8f:12:ca:0d:4b:b3:
                    f6:26:17:c5:ae:3e:19:8c:e3:c3:df:23:b5:eb:e9:
                    7e:69:b1:51:97:db:14:67:56:27:56:4f:19:59:94:
                    f7:14:86:d9:c8:ed:1c:2c:bd:56:47:0c:4c:f4:c6:
                    c6:3e:b1:67:48:e9:c0:93:70:2b:3f:ea:27:f2:c6:
                    a3:b7:2c:a5:29:49:fc:b7:f1:1a:79:67:c2:89:51:
                    90:95:6f:90:e7:b2:0f:17:31:d0:65:61:dd:42:d4:
                    f2:90:ca:1f:f4:97:ec:ec:2c:de:c4:0e:a5:50:67:
                    39:bd:f5:2b:45:17:9c:fe:17:b5:46:89:9f:af:d0:
                    13:ff:a7:e6:a3:d6:23:e5:d7:1f:0a:8e:eb:54:cd:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A0:F8:0F:97:7D:5F:12:7A:25:08:73:EC:87:4F:72:87:AC:AC:B9
            X509v3 Authority Key Identifier:
                keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d8:c4:8a:37:d5:72:b7:b3:5e:29:d4:fc:44:f9:fb:11:a4:
         3a:d7:d5:87:a5:16:9e:42:39:c9:11:a8:9a:76:2e:f6:68:cc:
         38:57:c9:f2:81:00:9a:f8:68:2a:d7:73:58:05:a7:f4:9f:e0:
         4e:51:84:85:4f:44:0d:2b:f3:d9:c9:cf:35:67:44:68:d3:80:
         a1:c8:46:7c:17:9f:32:10:27:4a:34:4e:03:8a:1b:45:50:d2:
         84:04:cb:55:f6:96:cb:fa:6d:5b:ef:90:dc:59:af:35:ab:00:
         11:c7:4a:6f:5c:8c:22:15:60:05:82:42:03:24:e4:da:c1:90:
         fe:7e:a3:d3:d8:46:6d:9a:68:2b:48:22:38:56:9f:c7:63:92:
         9d:6d:5a:4d:ef:6c:75:1e:ab:83:e9:46:90:b5:96:bc:87:9f:
         31:ac:b5:99:5a:06:4d:7d:02:9e:ed:cb:a1:cb:67:96:a9:1a:
         cf:aa:9a:d6:c8:5b:f8:7e:be:b7:b0:86:9b:6a:cf:56:75:e1:
         3f:81:3c:87:89:5e:c7:83:b1:3c:18:c6:a8:1c:26:1c:ac:ad:
         a3:76:ab:f3:e5:da:ff:02:33:32:0a:1a:29:25:80:c6:d0:b8:
         0f:08:11:31:02:23:08:e5:fe:d5:50:fa:f1:5e:38:bf:86:41:
         f6:4f:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:33 2026 by rpki-client