Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
File:                     8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json)
Hash identifier:          wtF7/NUexC2AiM+mhoKBPw8c+WOZZL3BaQNMehZLjaA=
Subject key identifier:   23:A3:FA:78:83:68:FA:EE:00:63:AD:D0:4D:08:00:8C:5F:FA:E7:3C
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Certificate issuer:       /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
Manifest number:          0262
Signing time:             Wed 25 Mar 2026 01:35:07 +0000
Manifest this update:     Wed 25 Mar 2026 01:35:06 +0000
Manifest next update:     Wed 01 Apr 2026 01:35:06 +0000
Files and hashes:         1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: /Cq8iq7iIL85t0Yf8+cdN7BqVfp3027XSOSCQboVXlA=)
                          2: 2F43497CA16711EFBB0B733EC4F9AE02.roa (hash: ja+dV8F8droBnCPc3sPIfN0Ul1XNgCG3f5fT9ZFS1Y0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
                          rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
        Validity
            Not Before: Mar 25 01:35:06 2026 GMT
            Not After : Apr  1 01:35:06 2026 GMT
        Subject: CN=69c33bca-ee7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:0d:cb:05:da:34:58:ee:7a:65:02:27:29:
                    c5:72:a5:9e:59:cb:2e:b6:d9:7a:3f:86:7a:e7:db:
                    1a:8e:46:08:77:aa:c7:ef:5d:56:56:1a:af:b0:19:
                    1b:bb:d5:5d:49:19:04:f7:ba:18:cd:63:f0:36:12:
                    ea:2e:32:11:3c:31:c7:2a:0b:90:a2:52:a1:44:5c:
                    67:28:c0:cd:15:4b:e4:76:c9:fd:e9:49:0b:7e:85:
                    47:d5:8d:c9:fc:5f:b6:ea:ae:bd:9f:67:bf:4a:80:
                    c6:91:09:8d:55:c0:54:26:47:52:1c:1f:ad:e3:d2:
                    9a:82:54:40:b7:0e:0b:76:fc:e2:8e:25:ec:59:03:
                    04:ab:72:45:36:26:cd:8e:7b:ff:71:78:55:39:22:
                    85:41:ef:2f:fd:57:e5:bb:c0:b9:a8:b3:63:8d:61:
                    d1:44:5b:71:d2:fb:9e:49:5b:7d:5f:6a:2b:d5:cb:
                    bd:a6:d0:6d:08:f2:8c:fe:3b:a1:2c:15:a3:af:88:
                    30:16:3a:c0:d9:e9:b1:13:a3:3b:89:68:81:84:a9:
                    c6:f7:6e:74:68:60:27:ab:49:4a:ff:60:d4:44:ab:
                    27:66:9f:e5:10:e6:4e:8a:bf:ca:4d:5a:8b:73:59:
                    70:dc:b8:f0:3d:99:3e:3f:17:7e:6e:09:b3:49:3d:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A3:FA:78:83:68:FA:EE:00:63:AD:D0:4D:08:00:8C:5F:FA:E7:3C
            X509v3 Authority Key Identifier:
                keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9c:44:44:30:15:eb:4a:9d:93:5f:7b:b4:b2:aa:3d:8e:a9:
         7a:2e:38:b5:c7:96:10:b1:e0:3c:c9:5b:f3:dc:0f:74:f9:f4:
         ad:ed:6b:b5:52:a0:c0:db:c0:2c:43:5a:66:7a:b7:a3:a1:0e:
         f9:36:bd:fe:39:5c:59:48:2a:d7:b9:08:42:f6:23:81:d1:a7:
         42:c1:fb:5a:f2:fd:99:ca:83:b6:52:6d:df:4d:c5:34:1b:27:
         ed:e8:00:ac:31:46:a5:7a:d6:03:59:81:a9:77:4a:7e:5a:77:
         c8:0f:60:5a:72:07:21:40:be:fb:1d:6e:4d:df:e8:ba:43:14:
         41:0d:95:ba:93:c8:f4:d0:05:55:48:f2:6e:be:96:40:d6:1a:
         96:08:cf:72:4e:71:60:37:e8:90:d3:8f:cf:0a:28:a4:d9:44:
         d5:b3:97:6d:b5:45:8a:64:dd:df:64:37:24:93:3c:c0:bf:92:
         8a:be:d5:3e:ad:8c:10:ec:a4:44:1d:61:f7:67:ac:8f:9c:2a:
         ec:19:e6:4a:12:b7:38:07:d7:d8:e8:50:0c:8a:93:7c:f4:d1:
         b9:95:0f:7a:59:f2:37:16:68:37:ef:c6:73:84:f0:07:0f:26:
         c4:a6:21:d2:4a:91:0f:b8:a8:0b:80:7c:1a:d7:23:d2:12:16:
         4d:c8:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:29 2026 by rpki-client