Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
File:                     84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft (raw, json)
Hash identifier:          gD/53SXzSKYBz8CTF+RYs2SDX3VdViVVmNcbiLK/zsg=
Subject key identifier:   7E:D5:C4:73:EE:CE:BE:43:9B:4B:CD:02:31:62:51:F6:A7:1A:13:65
Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A
Certificate issuer:       /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A
Certificate serial:       05A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
Manifest number:          0596
Signing time:             Thu 26 Mar 2026 23:03:09 +0000
Manifest this update:     Thu 26 Mar 2026 23:03:08 +0000
Manifest next update:     Thu 02 Apr 2026 23:03:08 +0000
Files and hashes:         1: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl (hash: bnt0V88JKGlfOkScOdgiH+/JvXCH6j9AqSJCyPneVw0=)
                          2: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (hash: sKIEQFup2pY2IoC6lEOvKO7QQSr/rpcUDVmTH6bK2Zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl
                          rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A
        Validity
            Not Before: Mar 26 23:03:08 2026 GMT
            Not After : Apr  2 23:03:08 2026 GMT
        Subject: CN=69c5bb2c-8bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:7e:a8:1a:b2:0b:53:11:e4:35:26:dd:c2:
                    fe:13:4e:45:9f:67:9a:94:2b:ac:d1:99:0c:0f:31:
                    7a:32:8e:0c:6a:a3:62:43:b8:66:23:27:2f:c2:d1:
                    e9:63:dc:05:83:87:8e:ef:ad:c4:33:dc:43:54:3e:
                    d8:4b:9e:f1:f9:d7:f1:85:23:4a:76:30:9d:21:53:
                    26:f6:58:d4:8d:b9:d3:38:33:75:97:ea:c3:29:ff:
                    9b:ce:a9:86:16:c3:97:1a:0b:ca:4d:6a:73:60:aa:
                    8b:1c:f3:15:e0:46:2d:c3:04:9a:0c:b1:4e:c4:a1:
                    c1:c3:1f:d1:6b:89:99:8a:dd:b5:b7:ac:a3:d2:ca:
                    7e:85:d3:38:7e:5d:05:1e:dd:c3:69:e1:65:0b:b1:
                    ed:cc:37:5f:93:56:95:ec:7b:12:78:6b:bf:39:e2:
                    e4:47:d4:95:fa:92:2c:e0:48:e1:6b:bd:88:80:16:
                    fc:57:ad:a5:c9:ca:8d:8e:68:93:e2:32:23:f6:96:
                    dc:c0:4d:87:e1:12:d4:aa:ea:61:8d:63:ea:2c:55:
                    c3:c9:78:ee:4d:d7:b3:78:b3:6d:94:20:b7:11:46:
                    c6:45:21:70:12:85:51:18:d7:7c:dd:b1:45:64:bd:
                    cb:fb:29:99:5e:93:fc:43:2f:0c:f7:40:4b:03:1f:
                    64:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D5:C4:73:EE:CE:BE:43:9B:4B:CD:02:31:62:51:F6:A7:1A:13:65
            X509v3 Authority Key Identifier:
                keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f9:55:ae:d1:ae:38:18:9d:68:8e:73:3d:6d:6b:e6:36:ce:
         f3:14:f6:73:7b:31:08:c1:76:6c:40:12:4d:6b:2a:bc:88:08:
         87:38:89:ba:b6:9a:80:b7:c2:ec:fc:ec:92:5a:50:4c:4f:7d:
         70:fe:b8:03:dc:02:a5:05:8c:02:12:82:ca:53:27:6b:12:72:
         80:a6:9d:e8:20:1d:90:ca:6b:9a:b2:c3:30:c4:97:23:28:35:
         6c:9a:21:1c:90:8d:91:cf:9a:95:6d:8b:45:ea:59:cb:76:a4:
         a8:19:11:7c:e6:e2:01:3c:aa:d4:50:02:f7:3a:7a:48:87:fe:
         6b:e1:7d:92:91:1b:b7:5f:96:93:57:4a:82:d5:54:0a:3a:cc:
         1b:bf:8b:89:3f:f7:c7:57:ce:ee:ba:79:24:07:4a:88:68:89:
         fb:b7:1e:77:8b:af:06:ac:5f:bd:29:1b:d4:e8:11:df:dd:b0:
         d4:7a:1f:6f:f1:74:3c:76:16:18:fd:bc:ca:46:2d:19:43:d5:
         f9:2d:da:93:42:2c:c7:37:03:b1:75:5a:ce:84:60:0c:c7:7d:
         0c:a5:8a:35:cf:cc:b9:70:35:77:c5:57:2d:56:39:ee:e0:fe:
         f9:1f:40:01:6a:44:ad:d4:77:14:1a:28:da:91:98:a0:82:cf:
         43:8a:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:46:28 2026 by rpki-client