Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
File:                     z64jGpiXN_YdrZV8wk0hNYWBjtw.mft (raw, json)
Hash identifier:          oL3Df4kViumv7YuYigfIu6OmOqm09171ziABbMTgRWA=
Subject key identifier:   17:80:42:F1:8C:C9:0B:87:41:43:3C:0A:7E:51:6E:D0:71:2C:81:C8
Authority key identifier: CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC
Certificate issuer:       /CN=A914B45F/serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
Manifest number:          01F2
Signing time:             Wed 25 Mar 2026 02:35:14 +0000
Manifest this update:     Wed 25 Mar 2026 02:35:14 +0000
Manifest next update:     Wed 01 Apr 2026 02:35:14 +0000
Files and hashes:         1: z64jGpiXN_YdrZV8wk0hNYWBjtw.crl (hash: zzkGSsVv/KO0wjhhQtAe7iUwhDD+OcxX8uxT3luYyZ8=)
                          2: 578C92D62F6611EE9CAFAA58C4F9AE02.roa (hash: z9CfvJM12QlNZXNF44p70rHwRjByPI+ZqLnmCsquLHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl
                          rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B45F, serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC
        Validity
            Not Before: Mar 25 02:35:14 2026 GMT
            Not After : Apr  1 02:35:14 2026 GMT
        Subject: CN=69c349e2-185e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2c:12:50:62:7d:ce:6d:6a:1d:f4:13:8c:0b:
                    a2:ba:aa:0a:97:21:fb:7d:d2:6f:5b:74:90:98:f7:
                    67:cd:2a:d9:68:19:4a:04:07:1c:5e:c4:d5:97:21:
                    77:13:3c:e6:b1:a0:98:f3:86:71:4c:b3:e1:c2:3c:
                    91:b9:ab:15:0a:6d:99:2b:31:64:52:42:cd:03:34:
                    be:95:35:32:ac:72:c8:d6:8f:39:44:b6:e5:b3:e1:
                    88:ea:93:5e:c6:da:6b:fe:01:da:15:6c:f9:e1:a0:
                    b1:c1:2d:90:95:dc:69:1c:95:2e:8b:b9:d8:31:e7:
                    1e:83:62:e5:ad:4c:e6:c5:60:9a:e5:65:5d:f0:ce:
                    14:5b:a9:d2:a4:a6:94:ce:a4:7d:ba:b8:a3:d6:3c:
                    cb:50:2c:21:55:21:73:20:74:b0:9d:fd:f5:5e:83:
                    d6:7a:b8:51:b1:b7:71:aa:ef:34:18:81:da:e4:42:
                    8b:d6:e7:85:97:ef:1c:e5:59:7c:b7:0a:e1:29:00:
                    56:00:53:35:72:69:13:48:94:55:2b:fa:76:a5:57:
                    3f:4d:c2:f4:89:fa:27:51:f6:64:cb:12:4b:5f:c0:
                    12:cd:6f:0f:c1:4e:ba:ad:a6:42:62:05:18:47:e0:
                    4e:d1:76:52:5f:e6:bc:7c:69:15:21:d8:22:f7:59:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:80:42:F1:8C:C9:0B:87:41:43:3C:0A:7E:51:6E:D0:71:2C:81:C8
            X509v3 Authority Key Identifier:
                keyid:CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:45:8e:40:98:20:06:e3:3b:8d:dc:a0:90:69:5a:fe:98:db:
         27:a1:3a:e9:67:f3:2a:76:af:f5:e7:d8:a2:c6:85:1d:24:f4:
         3a:39:f5:47:c6:7b:b4:6d:1f:53:60:17:6c:2b:24:23:85:9f:
         46:ca:bb:bc:a5:6e:95:2b:de:52:20:ae:3a:e8:2e:25:63:d7:
         be:36:55:8e:fd:6e:1a:2a:74:fd:bb:8c:f3:06:62:62:bb:83:
         6e:22:44:c8:74:2b:0c:7d:82:a8:ed:7d:6c:31:39:68:74:43:
         b0:12:ff:15:1d:10:44:00:7d:41:40:2b:95:44:83:61:45:30:
         ce:eb:2f:ec:79:01:05:ff:98:60:e0:1e:d2:b3:e3:f1:aa:e5:
         5d:45:0a:22:57:91:5c:ad:28:c5:3d:cd:12:00:14:2e:b0:08:
         1c:f0:7f:c6:31:a5:5f:1a:cf:27:9d:8b:c1:a5:0b:c4:1e:78:
         b5:5f:32:4d:35:14:db:8c:92:b9:ea:13:da:32:23:72:29:41:
         30:1b:6f:97:9e:6b:38:68:4b:9e:a7:89:db:a7:15:77:10:10:
         28:81:f5:43:be:60:d5:c2:6e:be:81:ae:54:4e:db:b4:76:14:
         2b:35:df:c4:46:1d:05:32:a3:0c:46:a3:18:57:c3:7c:5b:6b:
         63:c2:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:49 2026 by rpki-client