Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
File:                     Teu44SIr4OPyOu23UkXg-XuHx00.mft (raw, json)
Hash identifier:          bmaM1JAUbfltupKkgUnUi8oZB5Z5ySCALU/E5phwhKY=
Subject key identifier:   49:C6:15:57:C7:B1:25:0E:45:50:4C:D5:AF:20:7C:DF:05:92:B2:B9
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Certificate issuer:       /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
Manifest number:          352A
Signing time:             Tue 24 Mar 2026 15:13:06 +0000
Manifest this update:     Tue 24 Mar 2026 15:13:05 +0000
Manifest next update:     Tue 31 Mar 2026 15:13:05 +0000
Files and hashes:         1: Teu44SIr4OPyOu23UkXg-XuHx00.crl (hash: f42SMn58oXXUOY7p+m6isvPe3qiVdWiaisIC/NaInq8=)
                          2: 66BD8F9EF73911EE8BEC0A76C4F9AE02.roa (hash: erlR5lb546Ce3e1b4JUl4IJfubaw/Telkh1q1ldMPnU=)
                          3: 67AFCD36F73911EE8BEC0A76C4F9AE02.roa (hash: /vKLt2v8pCNdrhUjrfi5xRSAmeCzYRAG9WHocNuI0T8=)
                          4: A2E40A5C3AA511EFA73B8885C4F9AE02.roa (hash: DaeBEFTJL32vTa699+7D7vaWOxRfCnyy87ugEKL3B7g=)
                          5: 673E7D66F73911EE8BEC0A76C4F9AE02.roa (hash: RrJuPt5WwrRet0G7v3x0XfuldQ/qKQmz+ymiy8hqX5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
                          rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA76, serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
        Validity
            Not Before: Mar 24 15:13:05 2026 GMT
            Not After : Mar 31 15:13:05 2026 GMT
        Subject: CN=69c2aa02-10d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a8:46:30:35:53:56:a3:04:2f:ec:26:f0:7e:
                    5e:6a:10:d9:8c:92:66:07:74:ac:c5:3f:37:1e:16:
                    44:8d:95:86:5d:69:6b:e6:d5:14:4f:10:ac:08:f9:
                    0a:1d:4e:b5:67:2a:7f:c4:05:8f:2a:14:9b:29:2f:
                    4a:04:22:b1:b3:bc:2d:fa:5d:e4:24:9c:1d:30:b8:
                    cc:1d:cb:c9:f3:80:70:99:a1:f4:3d:db:17:25:09:
                    8e:eb:43:74:36:1b:63:5f:d9:43:65:e7:0e:9e:dd:
                    0d:52:f1:32:1c:25:12:cd:8b:6b:bd:51:fb:5c:46:
                    0d:be:e0:07:5a:4e:43:0b:5f:e3:0c:a0:82:b3:4c:
                    42:a8:04:c4:fd:ab:ce:fc:c9:de:38:9f:12:45:f1:
                    ed:48:82:a6:a8:ef:48:18:45:c4:f9:41:75:73:52:
                    be:01:18:0a:0c:62:02:82:48:70:9c:1c:1c:e9:a6:
                    70:8f:1a:4f:f3:9d:ec:48:9c:1c:9c:7a:d6:ba:84:
                    73:55:97:b7:35:0b:68:16:96:1a:1e:50:81:80:52:
                    c3:ef:29:c0:a9:9c:99:85:a1:8f:69:d0:8d:45:e3:
                    9a:11:37:22:46:66:70:ab:66:44:c8:68:38:ae:09:
                    84:e6:d1:7d:a9:dc:1d:ac:12:f3:74:cc:4b:29:65:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C6:15:57:C7:B1:25:0E:45:50:4C:D5:AF:20:7C:DF:05:92:B2:B9
            X509v3 Authority Key Identifier:
                keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b2:ec:a8:9e:15:b4:76:65:75:33:e2:94:98:00:f3:bf:36:
         0d:7a:d1:76:7e:5e:7c:64:17:25:bd:b7:d8:0f:9b:ba:4a:1d:
         49:d7:85:fc:0a:15:60:c5:a9:d0:0b:64:fa:d9:86:dd:ea:95:
         0b:25:1f:2d:e5:63:f0:75:35:37:cb:a1:02:07:b3:92:7a:9a:
         73:ba:7e:a5:8d:0a:a3:9b:df:d5:e1:95:5e:fa:76:e3:f1:6d:
         23:9b:54:bc:37:0d:87:b5:f8:c5:c1:7a:c3:a8:43:24:25:75:
         5b:6e:00:13:b3:69:f8:8e:a6:b6:1a:2c:f5:74:5b:77:d8:6a:
         c1:e3:ad:a5:fe:fd:12:02:ab:c9:fc:63:fe:1d:e5:ae:6c:c2:
         23:18:79:cc:21:a8:f1:6e:3b:6e:06:d8:1c:40:b4:6e:db:d3:
         32:ac:2c:cc:6d:13:99:aa:cd:5f:14:19:fe:8f:c4:1b:81:72:
         b4:cd:d7:3c:37:53:c7:60:ca:37:a3:5a:a9:ad:16:75:51:a1:
         d8:2c:cf:5f:b6:2b:9e:32:07:1f:a5:86:7f:c9:47:96:fe:34:
         48:af:99:ee:6e:62:09:f2:fd:5c:e6:dd:4b:99:e3:63:4a:e8:
         07:0c:10:df:d7:99:45:2a:2a:ec:1f:72:2d:a5:2a:7b:69:16:
         13:03:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:17 2026 by rpki-client