Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File:                     P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier:          yHigemxaT2E3r6nyygpZSl+w/U0zwtZ09qyU7J+kI+g=
Subject key identifier:   9F:69:E6:79:E7:96:F9:C5:13:B7:A9:F7:1C:03:E2:4B:0B:58:2D:EE
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer:       /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial:       02FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number:          02C5
Signing time:             Wed 25 Mar 2026 01:16:38 +0000
Manifest this update:     Wed 25 Mar 2026 01:16:37 +0000
Manifest next update:     Wed 01 Apr 2026 01:16:37 +0000
Files and hashes:         1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: l+7YGEKYltsemb80qcfEwwh0Kio8O8KlEMBs5MDaEhE=)
                          2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: E6jRmVhR8Wb8IiIIspZxX6LgF3mhurpDSKUcMeN6BpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
                          rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
        Validity
            Not Before: Mar 25 01:16:37 2026 GMT
            Not After : Apr  1 01:16:37 2026 GMT
        Subject: CN=69c33776-3103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dd:0f:46:d5:a5:4b:dc:de:a7:21:77:d4:b9:
                    b1:0e:45:58:e1:48:24:7c:f9:f5:cb:32:53:b0:0a:
                    2e:e7:b3:d3:eb:5a:53:30:e6:86:eb:1f:ec:6f:9a:
                    dc:b0:81:3b:a0:b0:92:48:6f:ed:2d:4d:5f:e1:82:
                    2a:cd:cf:66:53:29:36:a8:7a:40:7d:1d:89:13:f1:
                    4a:fd:0c:6e:4d:dc:0e:d2:74:31:f4:85:74:e6:37:
                    85:38:bf:fb:a5:ce:b0:65:5d:f0:39:75:43:98:db:
                    ad:bd:44:e7:54:49:16:f8:a1:d7:17:76:92:17:a7:
                    91:a7:b1:aa:a3:71:fa:de:b5:a6:c3:ce:c4:2f:ac:
                    d1:98:55:f5:bc:a7:aa:99:33:c9:5c:3a:d6:dc:6e:
                    d8:1d:2f:65:b5:e0:bf:19:88:f9:b1:19:79:4b:fe:
                    c7:12:94:aa:b1:3b:88:f8:c7:b8:ca:15:0c:10:ca:
                    92:ad:37:9b:79:04:1e:0c:2f:e7:f0:32:3b:53:62:
                    54:16:ae:55:c1:bb:80:1b:a3:9c:bc:1f:6b:9d:8d:
                    ec:0d:cf:e5:22:e0:21:d9:76:8f:07:49:7b:af:d7:
                    80:0f:b8:1b:30:dd:86:30:44:94:7c:4f:1f:19:f9:
                    6d:b9:ba:90:10:5e:9c:3e:e7:a0:ed:2e:34:8d:f1:
                    b8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:69:E6:79:E7:96:F9:C5:13:B7:A9:F7:1C:03:E2:4B:0B:58:2D:EE
            X509v3 Authority Key Identifier:
                keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:66:3f:ef:ad:33:88:bd:0c:67:65:04:36:9c:c1:80:09:24:
         cf:54:20:96:eb:3e:d0:bb:52:28:45:f0:b1:ce:b9:b1:21:dd:
         f0:29:76:e7:ba:78:b0:43:1f:74:39:29:67:e4:25:0f:f4:f5:
         79:11:4c:1a:71:63:cb:ab:df:7d:64:71:db:a6:e7:dd:36:55:
         f7:f9:f5:ed:4d:e9:06:6a:d4:f0:57:91:4a:bd:47:cc:1d:f2:
         cb:2a:77:03:ab:5b:7f:61:5f:bf:14:43:ba:5a:41:2b:cd:fa:
         92:8b:b1:5a:68:43:41:a6:50:32:3c:c5:d5:c5:a8:05:1b:ad:
         fb:4d:c5:f0:f4:5e:95:7d:57:0e:4a:de:21:c6:77:61:98:53:
         41:45:4b:8b:d5:0a:78:3f:27:5e:9d:24:72:ae:33:10:a6:d7:
         39:8b:ca:04:a3:24:9e:8f:44:2d:ba:7c:19:d6:6c:8a:5a:e1:
         8f:a8:5c:46:40:31:96:2c:e3:f2:33:e1:97:c0:68:cf:29:54:
         4c:8d:81:89:95:ce:dd:e0:67:44:02:2f:22:00:9e:cb:a1:be:
         cb:1e:20:30:d2:fd:11:ee:a4:29:57:44:61:a3:b2:60:7a:b3:
         e1:b9:f3:4b:a8:d2:bb:4f:a7:d8:48:1a:5a:66:0b:94:1a:83:
         c5:d4:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:52 2026 by rpki-client