Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
File:                     _3wGiSUYZz7M4Ea2pxfzU85TxQk.mft (raw, json)
Hash identifier:          1xv8ERMKFU23gGpEvwlrjc5UnZOh69p5mwi0EVdCxBM=
Subject key identifier:   0B:13:64:74:07:70:0A:DD:9B:D3:14:28:BC:8D:BC:44:BF:91:79:0D
Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
Certificate issuer:       /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
Manifest number:          C0
Signing time:             Wed 25 Mar 2026 06:11:41 +0000
Manifest this update:     Wed 25 Mar 2026 06:11:40 +0000
Manifest next update:     Wed 01 Apr 2026 06:11:40 +0000
Files and hashes:         1: _3wGiSUYZz7M4Ea2pxfzU85TxQk.crl (hash: LvUFNEIjQPHquhFb41cONMSRA0NE1UckA4roS5WeYFc=)
                          2: CC704C6639B711F09D08292CC4F9AE02.roa (hash: vJisVJZNWaOKXgCYvSO+m0VZ93Gg4QfN63LPtavEQiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
                          rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91476FE, serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
        Validity
            Not Before: Mar 25 06:11:40 2026 GMT
            Not After : Apr  1 06:11:40 2026 GMT
        Subject: CN=69c37c9d-4281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:a7:b2:58:b1:8b:4c:d4:33:4b:d5:ab:ae:
                    2c:cb:f8:13:80:ad:da:83:ad:3d:77:98:1f:79:02:
                    42:f4:df:52:01:c6:01:69:bb:51:c6:49:64:a3:1a:
                    0c:87:96:e3:5b:50:da:60:fc:f6:85:8e:e1:ec:4d:
                    e6:0c:fa:70:47:8a:ea:cc:2c:14:f8:85:a7:69:b2:
                    b5:1e:c9:d7:fb:04:d9:bd:86:39:4e:78:ac:0e:b1:
                    31:bd:06:1c:a7:fa:fc:9d:ea:37:bf:82:d9:57:7a:
                    6c:04:e6:21:50:6a:f5:f4:d9:3c:86:dd:91:28:21:
                    98:8c:fc:bb:09:40:85:0e:a0:b5:0e:1b:24:5c:fe:
                    d8:bd:7b:01:3a:be:26:b0:8b:f3:36:92:ce:9f:56:
                    9f:91:80:4d:43:40:51:93:65:f3:a2:5c:e4:bd:6f:
                    79:59:e5:1a:6c:a0:aa:b7:2c:a6:35:34:7f:99:09:
                    09:d9:71:da:3d:94:77:53:16:90:74:b3:6c:73:11:
                    2b:57:59:74:7b:7a:49:4d:e3:0f:ff:a7:3a:f6:16:
                    38:3a:54:b7:0a:62:6e:fa:b1:44:1b:13:bf:63:e4:
                    ca:32:bf:ae:46:68:cf:50:2e:94:45:e8:72:da:98:
                    ae:91:25:83:03:9c:8f:58:fe:64:15:bf:42:4e:21:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:13:64:74:07:70:0A:DD:9B:D3:14:28:BC:8D:BC:44:BF:91:79:0D
            X509v3 Authority Key Identifier:
                keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:d7:f8:c7:7a:d4:7a:f7:b2:3d:60:f8:2f:8a:07:f7:c5:
         e4:fa:92:16:08:72:cd:22:d2:fb:85:86:86:46:75:b9:80:84:
         c1:c0:15:db:72:97:db:d4:18:8e:07:08:29:ba:54:bc:80:11:
         bb:62:12:f4:a7:21:07:a1:9d:fa:62:24:b5:a4:64:3c:be:b8:
         83:9d:28:01:ef:80:f6:c9:fd:25:21:1b:7e:6f:2c:79:ed:ea:
         9f:f4:b5:9f:4e:56:61:06:52:89:ef:40:d8:ee:ff:93:22:70:
         4d:67:46:a6:a5:26:89:18:76:74:6a:79:1b:1a:09:c1:8c:d7:
         5a:f7:83:ac:b5:40:46:ea:bb:e4:d0:73:e1:0f:34:18:9d:67:
         46:4f:b9:59:03:bb:92:95:08:51:7f:12:33:2e:79:96:29:57:
         d8:ad:6d:27:79:1d:59:d2:0b:dc:0f:f2:3e:d1:a3:4f:b4:a9:
         f3:99:01:cf:2e:55:3a:60:90:96:66:72:4e:73:04:65:51:c6:
         93:7f:40:b7:d6:e3:77:bc:de:3b:cf:82:db:43:ca:07:c9:20:
         46:a9:1f:2c:89:65:0c:ab:22:f1:22:31:c8:b2:54:a8:0d:6c:
         59:52:27:15:7f:78:97:60:5a:1d:7e:51:65:63:6c:4b:aa:56:
         52:5b:e2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:43 2026 by rpki-client