Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
File:                     BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json)
Hash identifier:          l/IPbEWHPHwPEs36hC3f5HoRPqGwUADSEAO4FtXfs5k=
Subject key identifier:   0A:D4:E8:11:7F:E1:FC:ED:97:C3:FD:49:EC:F0:EE:D7:8B:93:4D:8F
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Certificate issuer:       /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
Manifest number:          0115
Signing time:             Wed 25 Mar 2026 05:04:08 +0000
Manifest this update:     Wed 25 Mar 2026 05:04:08 +0000
Manifest next update:     Wed 01 Apr 2026 05:04:08 +0000
Files and hashes:         1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: DXWN1lUGXyO3gx7QAqp8TTB+Wkcjv8Tl8cQb675JK5w=)
                          2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: B2RbKCpr/Pny6dSwJCiprlikwDlatrxJu+oMb/gtlQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
                          rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
        Validity
            Not Before: Mar 25 05:04:08 2026 GMT
            Not After : Apr  1 05:04:08 2026 GMT
        Subject: CN=69c36cc8-7fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:13:f6:70:b7:d6:0d:c3:b5:96:c6:a5:be:
                    39:2e:42:45:51:4b:e5:a9:64:27:d5:62:c1:cf:3d:
                    6e:54:e6:63:cd:af:90:43:23:7f:f2:de:14:34:be:
                    58:e8:72:f5:cf:13:3c:35:f8:eb:86:03:20:ca:ee:
                    0c:51:2a:7e:a4:01:ae:33:ad:0b:b2:45:60:98:74:
                    c9:20:16:b2:2d:56:61:f6:ea:34:f3:16:e2:97:b1:
                    cb:b0:ea:87:b9:03:f5:e5:24:96:76:9b:c2:65:08:
                    cf:3e:83:ee:c8:58:8a:d4:01:37:86:53:bd:bf:b5:
                    d6:a1:25:8e:86:cb:f0:8b:b1:65:cf:3b:b0:91:01:
                    1e:cc:4a:31:7f:54:0e:9e:03:52:b4:79:00:e0:6d:
                    bd:36:84:4a:61:a2:fa:19:b1:59:3c:7b:b1:bd:fe:
                    98:3a:32:22:fe:de:d4:76:f6:17:41:28:61:4c:5f:
                    07:d4:65:0d:39:e3:d3:0a:8a:52:fb:28:58:7f:8a:
                    a4:33:ae:d9:52:f9:a6:9d:46:2c:bf:e8:68:eb:46:
                    a1:29:36:1d:4e:0e:7b:1d:6a:05:3d:24:e9:a1:25:
                    31:ca:ab:24:4e:22:b9:4d:2f:04:fa:fe:0c:6d:24:
                    e3:f2:93:2f:9d:56:26:fb:40:50:7c:a2:25:0e:5e:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D4:E8:11:7F:E1:FC:ED:97:C3:FD:49:EC:F0:EE:D7:8B:93:4D:8F
            X509v3 Authority Key Identifier:
                keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:89:ca:d1:b5:61:c2:c9:d7:f2:27:56:13:2c:81:cb:e2:
         90:ba:d1:de:85:de:4f:52:5b:72:4a:19:49:38:97:89:e8:24:
         59:ee:b8:af:3d:08:25:e2:66:b2:ea:17:29:11:54:ce:b0:cd:
         2e:1e:c0:8b:49:f1:cb:93:90:0e:32:67:98:3a:f1:fb:6b:4c:
         a6:fa:8b:ff:d8:c9:05:67:e9:a5:60:85:f0:f0:41:0e:44:ff:
         2c:ae:7c:65:a3:72:ac:99:b4:ba:e9:9c:98:80:3e:71:79:8c:
         cd:ac:b4:8a:d5:0e:a9:b3:7b:ce:17:6c:07:5f:68:3f:87:fd:
         7f:6d:bc:bc:29:a7:9b:3f:0f:ca:09:80:c5:56:89:b5:81:31:
         6e:a1:a6:3a:04:23:20:0c:ee:2f:98:de:7d:4a:3b:59:c5:0e:
         af:aa:d2:d4:72:ab:b4:77:d6:62:8e:e1:13:56:e7:79:9b:c8:
         42:55:f7:d6:89:81:c5:19:4c:6d:df:9c:46:6a:a5:0e:ea:8c:
         75:e2:71:47:7d:f1:18:71:fa:f0:f9:97:e2:22:22:3d:b2:47:
         03:1c:59:7d:87:49:a5:45:a0:77:87:13:80:62:10:d2:32:4a:
         66:a5:cf:df:90:73:76:43:a2:0c:f3:24:8c:f8:08:b7:6b:db:
         39:51:7b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:25:50 2026 by rpki-client