Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
File:                     8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json)
Hash identifier:          oeMFYnApb7mnDFIZtw6m4RrOyzg76xEWtOKo/ZMzGDc=
Subject key identifier:   5A:3C:5C:59:13:B0:68:14:97:C3:1D:FF:B1:92:06:D8:93:EF:C9:69
Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3
Certificate issuer:       /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
Certificate serial:       26C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
Manifest number:          26AC
Signing time:             Thu 26 Mar 2026 15:41:01 +0000
Manifest this update:     Thu 26 Mar 2026 15:41:01 +0000
Manifest next update:     Thu 02 Apr 2026 15:41:01 +0000
Files and hashes:         1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: DLeAQyggxfDi79uBUAOB0RsmBVIwhQJH5l36L9tZTYI=)
                          2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: DpOAKbXIZRU31H9SibMfjtno+IW4EyE2+7nXpFauVCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl
                          rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9926 (0x26c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
        Validity
            Not Before: Mar 26 15:41:01 2026 GMT
            Not After : Apr  2 15:41:01 2026 GMT
        Subject: CN=69c5538d-7698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4f:36:d8:9f:c7:8d:39:e6:ea:6b:e7:31:47:
                    4c:9f:e5:4c:d6:65:f4:e4:73:ba:a0:37:8c:de:3e:
                    aa:65:68:30:f6:45:e1:d0:f8:12:f4:4a:9d:29:62:
                    f9:2f:50:b5:a5:84:cd:b8:89:54:fb:80:24:73:2a:
                    60:02:7a:90:88:90:a2:63:ac:52:cf:40:da:5b:3b:
                    a9:7c:aa:7c:51:f4:2e:66:80:05:d4:6a:ce:0d:5d:
                    46:62:aa:1d:62:76:4a:19:75:3a:62:ae:42:74:6f:
                    d4:f3:f2:16:a6:87:53:5e:a6:c8:35:3a:07:d3:85:
                    b0:6a:89:46:1f:73:92:5b:e4:a4:60:aa:6f:63:9f:
                    89:a9:90:9a:b7:ed:cb:04:eb:e1:52:36:81:26:a7:
                    01:4c:cb:79:e2:97:9f:fa:37:7c:06:49:17:39:d6:
                    ac:3d:b9:8f:5f:f2:b8:82:69:6c:5e:b0:9b:67:85:
                    f7:5f:26:bf:b3:18:33:86:e8:19:99:12:1d:c0:b1:
                    a0:51:78:1d:f4:f3:38:56:ee:25:8d:61:d1:9a:b7:
                    ff:db:c4:69:0f:cb:f5:ac:fc:9f:83:ec:03:6b:a9:
                    15:0e:ed:91:05:56:e8:0d:74:a3:7e:b7:19:09:27:
                    d4:b4:8b:dc:79:11:be:15:44:f5:25:2f:51:7b:e7:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3C:5C:59:13:B0:68:14:97:C3:1D:FF:B1:92:06:D8:93:EF:C9:69
            X509v3 Authority Key Identifier:
                keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:37:60:a8:0e:9c:8d:0b:5f:c0:05:5e:e9:7f:c0:10:fc:
         eb:f9:ce:07:05:5d:bf:36:eb:5f:d8:20:03:55:c3:55:00:1d:
         7a:f1:08:9d:03:8b:a9:53:13:9f:53:11:74:a7:ca:0b:9d:73:
         65:78:0e:e5:a6:f0:a6:ec:db:89:be:ef:e7:d8:f0:a0:53:72:
         09:d2:0b:c1:4d:88:8b:11:ff:b2:8b:c6:6c:f7:18:1d:5e:f9:
         eb:9e:86:e8:3d:cf:ef:a6:9f:71:8a:87:5e:4f:13:e0:a5:39:
         12:88:c3:99:3e:37:b0:45:a8:a5:c1:45:7f:1e:00:47:65:a5:
         c7:76:22:77:f6:71:6b:30:53:ef:de:a5:5b:21:3c:76:66:ce:
         c9:8d:57:de:02:b9:70:e4:77:06:67:68:12:d5:fd:00:06:5d:
         aa:87:ca:fe:f9:a9:e1:a9:8d:fc:13:cb:29:a6:a9:ca:06:79:
         8c:2d:f1:a2:77:1b:89:3e:5c:28:a2:8e:e7:33:24:91:b6:a9:
         fc:9d:70:36:a1:a3:ae:8d:72:7c:ad:14:60:4b:fd:f9:51:a2:
         4b:22:1b:f9:bd:27:7d:db:ba:cc:90:3e:8d:da:61:df:8d:86:
         87:86:86:81:c0:10:77:2a:f9:39:f3:2d:b9:f0:b6:2f:91:f3:
         e0:4d:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:09 2026 by rpki-client