Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
File:                     f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json)
Hash identifier:          +RoGpCnkVKJd57o4+9USIEM2yMavWrZV7oO0d67XIKw=
Subject key identifier:   33:1E:88:80:22:68:47:6B:F0:97:9D:E7:F7:F0:30:72:B0:2E:1F:80
Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7
Certificate issuer:       /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
Certificate serial:       115F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
Manifest number:          114B
Signing time:             Tue 24 Mar 2026 17:07:31 +0000
Manifest this update:     Tue 24 Mar 2026 17:07:30 +0000
Manifest next update:     Tue 31 Mar 2026 17:07:30 +0000
Files and hashes:         1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: zBSu036fWBIQP+EVCv3L1CiRHDXDMMjLJr0XugVR31E=)
                          2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: 3Xi7wtEGd4JYA4AAv2yv0nPxB/PtZ4h9SU2C5rJNJXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl
                          rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4447 (0x115f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
        Validity
            Not Before: Mar 24 17:07:30 2026 GMT
            Not After : Mar 31 17:07:30 2026 GMT
        Subject: CN=69c2c4d2-9eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:7c:3f:25:dd:0c:39:ee:e7:0e:45:27:77:
                    33:89:75:22:56:c8:3a:5a:fd:c7:e7:21:8f:1d:6a:
                    5a:b6:cd:3f:69:c6:25:fc:db:d7:26:01:16:95:3c:
                    da:e4:3e:bc:9f:08:67:cb:b9:c0:e9:42:04:6c:4f:
                    31:b8:69:1a:33:46:cb:d0:37:6f:f5:cc:31:90:b7:
                    0b:21:04:d6:d9:4c:52:48:a5:10:74:3d:89:b0:ea:
                    56:2b:b3:b7:d3:39:b5:f7:56:07:4e:7b:51:5e:7e:
                    a5:3a:8b:36:20:d3:16:50:2f:aa:92:21:c3:49:ef:
                    f7:d9:e5:f1:ad:9e:ae:7f:25:65:50:fb:cb:16:50:
                    69:5e:3a:3a:99:f4:c2:b0:67:f4:8b:c4:3c:06:6f:
                    78:10:9c:9a:d2:e8:69:ae:e3:49:62:6a:f1:e9:6a:
                    d7:ab:38:70:cb:ad:dd:de:58:30:e1:88:37:41:9b:
                    c1:00:b3:b6:db:1a:e5:df:e3:ea:6d:62:d4:7a:da:
                    bf:1a:cd:55:f4:61:f7:63:64:6a:5e:ce:ec:46:d6:
                    52:22:a6:eb:73:83:c2:29:24:cc:8b:ff:42:56:1c:
                    40:0d:b9:ce:88:59:3e:35:0e:ac:b4:7d:3e:d6:2a:
                    1d:42:ae:24:b6:ba:41:2b:22:cf:89:68:62:f3:5d:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1E:88:80:22:68:47:6B:F0:97:9D:E7:F7:F0:30:72:B0:2E:1F:80
            X509v3 Authority Key Identifier:
                keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:32:3b:1b:7e:81:6c:ec:54:1a:c4:06:26:3f:69:04:d6:
         20:63:93:a4:aa:9e:bc:70:ff:5e:0b:c3:07:4f:92:44:0c:f8:
         c0:0c:5f:f0:c4:3f:66:6b:87:b6:9f:93:4e:37:05:26:a8:0a:
         ac:24:d8:83:4a:0e:b0:80:7e:90:3f:5f:3e:09:f6:d4:62:8d:
         a3:30:bf:e2:1a:6d:db:a7:a7:9e:57:94:28:49:71:63:1b:55:
         1d:b5:5c:03:3c:1e:a1:25:f3:30:68:42:fe:7b:09:62:fa:dd:
         98:fe:72:bb:78:67:bb:1d:d4:4b:53:23:9c:80:59:50:37:ea:
         71:c3:46:12:d6:bb:8b:e7:d5:40:09:82:c8:dd:48:9a:99:3d:
         c4:09:82:d5:31:43:ae:a1:76:39:89:0f:fa:69:ff:04:21:6f:
         c3:1a:0e:25:0e:fd:18:c4:74:25:89:ce:20:97:e3:00:e0:78:
         87:64:ed:4b:0d:2e:25:49:c9:21:5d:78:df:06:20:d2:28:13:
         5f:0b:82:7b:d3:54:e3:1a:ae:9f:f1:ae:15:d9:eb:4a:05:42:
         ce:f7:c7:42:61:fe:1d:ca:d2:49:63:c8:06:37:5b:a5:35:40:
         22:ee:a4:4f:77:df:d0:47:f7:42:51:08:f7:67:ef:7e:dc:9c:
         6f:fc:71:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:44 2026 by rpki-client