Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft
File:                     rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft (raw, json)
Hash identifier:          93M9R2HHbHhnmysb4boa+0WjPmj+OhHoHpXdnxCspmg=
Subject key identifier:   37:99:18:4D:CE:30:E7:23:E2:D3:FE:DF:DB:28:6E:A9:A1:74:5D:9F
Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD
Certificate issuer:       /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD
Certificate serial:       070F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft
Manifest number:          0703
Signing time:             Tue 24 Mar 2026 21:41:26 +0000
Manifest this update:     Tue 24 Mar 2026 21:41:26 +0000
Manifest next update:     Tue 31 Mar 2026 21:41:26 +0000
Files and hashes:         1: rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl (hash: pTCfSePaVw7E6T4gSD+ceLmuIHy/Pkjm532GwKdEd+4=)
                          2: D18881E6807A11EBB44A0A58C4F9AE02.roa (hash: BEgKZHj5OeTxdld28KMweA3SeOYviOAPb07jNCoewrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl
                          rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164E50, serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD
        Validity
            Not Before: Mar 24 21:41:26 2026 GMT
            Not After : Mar 31 21:41:26 2026 GMT
        Subject: CN=69c30506-9a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:c7:2e:17:66:7d:39:80:7d:c3:9e:cd:45:
                    7a:2e:a0:76:d2:56:65:60:cf:ba:0c:fe:68:b4:08:
                    db:37:ba:f9:20:01:46:b5:b7:a0:55:3a:12:30:7a:
                    18:93:7d:1b:39:00:9c:7e:8d:fa:ef:0d:c4:4d:16:
                    c0:f9:45:80:9e:8f:f6:c9:8c:37:aa:8e:b8:7d:b5:
                    71:96:3d:08:48:b0:8d:45:96:70:8e:41:0e:8f:56:
                    ec:28:2e:5e:2e:60:55:20:86:ef:ca:13:7b:22:6b:
                    7b:2a:82:61:06:c7:a5:01:40:f1:74:be:f0:50:58:
                    73:02:5a:c4:81:fa:a2:f7:56:02:c0:3a:50:68:0c:
                    13:7b:52:4e:40:c6:44:a0:13:ea:fe:c8:42:84:e8:
                    5b:91:5f:9a:c6:93:62:ee:1f:8a:53:04:aa:08:42:
                    f8:84:0d:4f:ec:9f:00:1b:e8:dc:a5:31:92:75:99:
                    56:bd:08:26:32:4b:f5:0f:c0:5c:f6:aa:66:31:62:
                    c0:8e:a3:dc:70:af:4e:af:8a:e7:e4:c6:b0:eb:29:
                    f8:37:23:58:26:51:02:f1:da:8b:26:39:82:6e:58:
                    9e:f5:f2:c0:c5:75:db:a2:0b:48:8b:cf:52:dc:72:
                    7c:55:a8:66:99:f4:7a:5c:fe:42:f8:e4:2f:eb:cf:
                    38:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:99:18:4D:CE:30:E7:23:E2:D3:FE:DF:DB:28:6E:A9:A1:74:5D:9F
            X509v3 Authority Key Identifier:
                keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:29:0f:ad:63:a6:9f:b7:99:c8:86:63:36:bc:3b:03:11:f2:
         8c:fe:70:03:5a:ab:f9:0c:0f:5a:ce:18:84:77:8d:67:ae:c1:
         91:e6:41:78:22:88:ef:4a:b3:72:3e:99:56:2e:30:de:7e:7b:
         37:7e:58:05:9b:7e:ad:b3:d4:e2:66:8b:b8:24:c0:23:76:48:
         f6:44:56:92:77:79:25:7d:a9:4e:f3:a9:b0:f8:54:56:a4:2f:
         d4:ca:1a:fe:88:d3:8a:ec:5e:00:ee:ac:d4:c2:de:b9:4c:19:
         c0:17:93:75:b2:bc:3d:29:3d:df:54:24:94:f2:fb:a5:86:01:
         a6:46:66:79:bd:bf:b8:7e:f5:71:e4:01:1c:9b:21:4b:7c:c5:
         ec:79:ff:07:69:9b:8d:4e:09:6a:e9:ab:09:f6:a3:03:f6:6c:
         04:6c:2a:26:9a:0d:07:58:ba:97:64:00:e9:f2:6f:5f:52:36:
         3a:a0:8d:de:13:bf:28:f5:59:cb:54:96:ca:ec:76:03:8e:23:
         ec:b2:23:13:78:bc:05:b1:82:db:c4:ce:a8:55:94:a4:f0:f6:
         81:98:15:2d:7b:23:bb:e7:e5:6d:04:af:9b:40:88:6d:98:11:
         7a:b6:aa:14:06:aa:e8:7e:dd:72:b6:1a:b6:d5:17:17:08:c3:
         46:f8:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:24:09 2026 by rpki-client