Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
File:                     f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json)
Hash identifier:          0r9qcgVm6DTEofba3Nb+FFXPD1UlwGKPobp2Uyme8jo=
Subject key identifier:   55:F6:C8:95:80:4E:EA:C4:29:6D:6E:F0:FB:D9:40:3C:85:FE:9A:B2
Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9
Certificate issuer:       /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
Certificate serial:       0C80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
Manifest number:          0C6A
Signing time:             Tue 24 Mar 2026 18:27:40 +0000
Manifest this update:     Tue 24 Mar 2026 18:27:39 +0000
Manifest next update:     Tue 31 Mar 2026 18:27:39 +0000
Files and hashes:         1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: V40jh4vlqYSpYt4WHUTJQu+4QGARsqtkP5C2SPu2fH8=)
                          2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: ca3rCU+xITln6FgR3wUziPrzx8A5i4ANvYXJUthQ0/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl
                          rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3200 (0xc80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
        Validity
            Not Before: Mar 24 18:27:39 2026 GMT
            Not After : Mar 31 18:27:39 2026 GMT
        Subject: CN=69c2d79c-4e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:70:74:70:e4:50:9c:df:ca:08:ef:8f:4f:
                    44:83:fd:4e:6e:fc:ac:23:9b:fe:93:13:74:cc:02:
                    ed:38:26:06:93:32:d0:0c:7c:df:f7:24:e2:f9:87:
                    df:e6:0c:be:15:e5:4f:63:87:ef:dc:a7:fc:42:f9:
                    10:f4:d2:3c:1a:bc:64:46:4e:ac:a8:19:44:25:15:
                    7e:3d:80:1e:56:62:d2:3d:d5:c0:82:bb:44:98:20:
                    d7:c8:a6:f0:c3:ed:a9:1a:d5:4a:68:07:fb:cd:b7:
                    6b:92:09:7d:2c:55:0b:c8:9f:7f:b2:8c:19:76:96:
                    6c:c1:4c:5c:fb:cf:62:f2:8d:15:19:af:7d:34:f0:
                    75:76:d2:19:cb:75:89:37:99:82:e4:67:7c:0d:4b:
                    79:4f:cf:45:4b:73:3e:10:e4:7a:49:ea:76:6d:bc:
                    d7:31:05:64:78:93:d1:64:7e:5a:c6:9f:4f:98:7d:
                    fc:52:41:ab:cb:f0:fc:e2:a3:95:65:e1:8e:c3:db:
                    09:53:b3:fe:41:14:4e:6c:ab:09:06:fb:ba:8f:ec:
                    35:bb:ed:d2:a8:a3:b1:36:f4:81:48:97:c5:c2:6e:
                    ae:fc:fa:cf:2d:00:16:e9:13:6e:ba:7e:23:1b:96:
                    dc:74:e7:3b:fa:5d:7f:a7:ad:d8:cf:e0:41:e0:6b:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F6:C8:95:80:4E:EA:C4:29:6D:6E:F0:FB:D9:40:3C:85:FE:9A:B2
            X509v3 Authority Key Identifier:
                keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6b:2c:7b:27:e5:91:2b:94:b0:ad:0e:11:58:11:31:89:b2:
         53:6b:e5:f7:fe:c5:f4:19:ec:17:eb:9e:d6:16:b9:78:6c:dc:
         ed:ea:c0:7f:8f:f8:22:1b:18:fc:1c:f7:71:94:f7:f5:5b:78:
         6b:58:26:ae:14:13:97:d9:98:4c:b1:26:ec:fd:07:7d:ee:f6:
         b8:eb:08:7b:02:63:41:31:b3:2e:1f:ae:7e:6f:36:31:3d:a6:
         ac:f1:a0:66:03:7d:1a:37:e9:11:eb:ee:db:8f:22:7a:04:02:
         cc:fc:73:cb:e4:2b:fa:24:b8:47:f5:75:f7:6b:22:53:a5:7b:
         6a:32:88:da:a7:13:5f:b2:cf:33:08:3a:a8:59:13:ba:24:79:
         7b:ae:b6:6f:35:36:b9:dc:d4:79:2c:3c:fb:c6:07:4b:0d:9a:
         82:fe:dd:d9:b3:4e:e9:46:48:b0:67:ba:dd:07:65:e3:59:da:
         46:dd:ce:16:05:40:f6:a5:5b:1a:5f:75:21:de:c4:ec:16:1d:
         6e:e8:50:7f:73:90:70:67:28:df:94:3a:15:e9:5d:96:d0:83:
         64:16:ef:07:ef:e1:67:ea:6a:5b:60:bd:b4:e8:70:7d:34:0c:
         44:87:04:07:35:89:7a:f3:12:47:2a:d0:a7:4b:e8:11:24:2e:
         85:3e:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:12 2026 by rpki-client