Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
File:                     emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json)
Hash identifier:          fQzEfby0u0uWe2Z7CwHn76dDn62qIE+mk6JF6wpqN9Y=
Subject key identifier:   FB:4D:7C:B0:91:50:2F:CA:33:85:D4:D2:60:EE:E8:F9:ED:6B:83:2B
Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
Certificate issuer:       /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Certificate serial:       352E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
Manifest number:          3526
Signing time:             Thu 26 Mar 2026 15:01:46 +0000
Manifest this update:     Thu 26 Mar 2026 15:01:46 +0000
Manifest next update:     Thu 02 Apr 2026 15:01:46 +0000
Files and hashes:         1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: E+1xC+Oiez658qsHpQbgmOZ0fVJc0jX7RqhMLCN4U2Q=)
                          2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: rVRbPt1BenVXJcwysqQm7AgwLvDB5H+rVBMsAeEXCxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
                          rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13614 (0x352e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
        Validity
            Not Before: Mar 26 15:01:46 2026 GMT
            Not After : Apr  2 15:01:46 2026 GMT
        Subject: CN=69c54a5a-11f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:1b:80:60:41:5d:f5:04:3b:52:d2:c9:7d:
                    e6:f9:ad:f3:96:8d:29:bd:6c:99:27:03:17:5a:d1:
                    51:da:7e:b6:e9:7c:e2:8e:4b:65:8b:6f:84:dd:c7:
                    d7:59:37:04:63:bd:96:78:a8:b9:51:dc:ec:15:4d:
                    26:a1:e7:d7:08:e6:f9:f3:0f:be:55:3b:16:26:88:
                    26:b7:07:7b:bb:ff:45:e6:c0:0c:26:2b:4b:0b:a5:
                    e3:17:6b:bb:e3:a7:7c:88:f6:be:57:b0:0f:7d:d9:
                    6d:56:4d:5a:0d:bf:06:e2:3a:f5:bd:4a:f9:1f:d7:
                    56:fe:85:0c:de:ee:c5:78:ec:96:a1:63:37:70:96:
                    29:59:c3:78:0e:d6:29:ce:32:4a:4d:c9:00:0c:e3:
                    56:1f:f2:e9:05:50:4e:0f:a0:2d:e4:02:69:bc:3d:
                    6a:10:7c:94:3b:01:f3:e7:84:90:6b:2f:11:32:08:
                    ce:1f:76:97:26:ae:3e:95:95:b9:4f:55:9b:27:ec:
                    c8:a1:d8:5c:cd:fd:4a:1a:8e:8d:02:60:0f:e0:fd:
                    de:39:a9:fa:9f:6b:45:a6:0d:54:94:c6:f1:1d:76:
                    f9:e7:39:ed:b0:3a:6e:53:58:77:b1:f3:15:4f:ea:
                    a4:b1:29:06:30:3f:41:e7:b8:70:4f:63:b3:3a:3f:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4D:7C:B0:91:50:2F:CA:33:85:D4:D2:60:EE:E8:F9:ED:6B:83:2B
            X509v3 Authority Key Identifier:
                keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:a9:e1:cc:b7:81:86:25:ca:f7:0c:77:05:ac:2b:7d:b3:2b:
         5e:73:87:f0:d6:03:ea:70:fc:19:b9:4e:2e:b8:b3:6f:0d:29:
         ef:ea:9b:f2:28:c9:3c:e2:8e:00:8f:ec:31:77:47:01:fe:5f:
         71:8a:a4:28:6b:3d:02:84:a3:7d:6a:35:7c:fa:69:37:dd:0b:
         09:b5:79:62:90:e9:bb:25:1a:98:ba:b3:34:28:84:33:44:4d:
         61:d7:5f:d6:ea:1d:6d:c0:5f:1a:0c:0a:97:6d:11:cb:6e:7e:
         c5:3e:44:eb:54:5a:9d:9b:60:cf:cd:fc:e7:26:1c:1c:25:cc:
         9d:d3:66:49:82:d9:42:6b:82:c5:29:84:99:02:92:c7:ff:d2:
         91:37:88:86:c0:ab:bf:28:7a:c8:d5:a4:16:a0:e5:9c:ed:a4:
         80:3e:13:e6:37:47:0a:bb:fa:8a:f7:5b:08:63:8e:9f:86:74:
         b2:91:06:28:44:52:1e:19:13:60:e2:19:8e:ce:24:f2:a6:d6:
         e3:75:b8:1a:b7:2c:19:d4:9d:6b:5e:07:0e:75:54:c1:cd:ab:
         6a:9b:63:da:da:bb:ca:2f:36:fd:d2:50:1c:f3:5d:9a:02:ec:
         74:c6:bf:4a:79:33:42:77:14:82:70:37:de:14:72:34:3f:27:
         bb:e8:11:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:51 2026 by rpki-client