Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
File:                     w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft (raw, json)
Hash identifier:          6cymUb2JHhd2xkooOTKNhU3tog+CX3m5ZANUzfh9N8g=
Subject key identifier:   C0:38:08:15:3C:66:0C:CC:01:C9:9A:41:66:62:16:D8:A4:E7:06:4D
Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Certificate issuer:       /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Certificate serial:       07A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
Manifest number:          0798
Signing time:             Thu 26 Mar 2026 21:22:53 +0000
Manifest this update:     Thu 26 Mar 2026 21:22:53 +0000
Manifest next update:     Thu 02 Apr 2026 21:22:53 +0000
Files and hashes:         1: w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl (hash: 6gGUs8TY2ftXdFiv8MkJB96Ps2eOLaoIGL4URBW+Rbc=)
                          2: 43854B4044D411EB85615640C4F9AE02.roa (hash: 2Xjt4SdBZGaW7oZCb7vo9tweuahkp/3fJMEVxJAgK7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
                          rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168197, serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
        Validity
            Not Before: Mar 26 21:22:53 2026 GMT
            Not After : Apr  2 21:22:53 2026 GMT
        Subject: CN=69c5a3ad-23cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:2f:f2:fe:61:9e:e7:ff:1b:30:0c:29:f7:
                    4f:b1:43:1e:eb:ee:6d:98:25:5d:ab:24:a8:40:f2:
                    01:bd:e2:ec:19:4d:0c:9a:f8:6b:25:f9:fc:de:de:
                    e8:1d:05:ff:6e:6c:72:0e:f0:30:96:57:b0:9b:35:
                    a5:c6:83:78:31:ce:10:75:30:66:b4:dc:4e:b4:17:
                    62:db:7f:0b:7c:11:e1:6a:1e:84:77:eb:a9:f1:a5:
                    be:e1:f7:68:4b:63:33:67:36:a2:f2:a5:1a:cd:df:
                    5c:1d:5f:94:60:de:ca:56:7e:4b:29:70:48:a9:99:
                    36:67:40:cd:46:1b:8e:16:8d:04:a3:33:a6:38:e9:
                    d0:21:18:f2:6a:c9:47:e3:0e:84:68:eb:23:88:36:
                    cd:80:0c:ad:5d:b7:9b:00:2e:45:f3:04:05:2f:ac:
                    92:18:54:48:65:ba:42:5c:41:e1:25:fe:04:56:e3:
                    52:88:8c:3e:01:ba:03:fd:e1:56:ed:c2:ee:45:5f:
                    24:9d:6c:bb:dc:bb:57:2a:7d:05:95:9c:15:83:e4:
                    71:b2:d0:0f:7f:83:e5:2a:ab:16:9f:64:3b:bc:e6:
                    aa:c3:5e:41:3b:fd:b4:a5:45:45:5d:7f:69:03:cd:
                    03:70:07:54:a1:b6:96:27:a2:61:ab:d7:07:4b:84:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:38:08:15:3C:66:0C:CC:01:C9:9A:41:66:62:16:D8:A4:E7:06:4D
            X509v3 Authority Key Identifier:
                keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:19:e4:b5:22:38:a4:6c:d4:e4:41:5b:17:97:5b:f8:15:
         ec:5a:95:58:09:9b:64:4b:f5:8f:a1:8d:c6:af:db:8d:e4:cc:
         01:93:eb:60:d1:05:57:28:97:44:24:cf:5a:81:af:41:31:68:
         dc:13:c4:da:b4:35:a3:85:32:44:7d:c3:f5:05:44:dd:01:ec:
         f2:5e:7e:79:0e:93:cc:2f:04:ec:8e:e3:e7:4e:7e:05:f6:fb:
         b8:16:0f:42:c0:ff:af:01:77:fa:7e:37:31:33:93:cc:4e:1e:
         2d:3c:e5:e5:65:ba:79:47:41:f2:22:b3:73:13:8b:54:d9:f5:
         3c:97:b7:21:da:cc:98:e3:be:df:7a:20:49:6d:a9:46:2f:66:
         4e:38:38:1e:aa:4c:38:bd:3f:cf:4d:20:c2:4f:41:9b:4a:7d:
         c9:ae:63:8d:20:11:50:c7:62:67:8a:1c:dc:be:c1:2f:ee:9a:
         0e:bf:60:72:7e:36:b7:c1:af:f1:02:17:81:47:15:f6:55:e4:
         18:aa:eb:8e:e8:73:a0:2c:c8:ae:ae:59:53:94:ff:8f:e8:ba:
         17:44:71:39:0e:13:b9:ee:9a:78:ce:32:37:61:11:c4:c2:7b:
         b2:65:80:47:2a:a4:49:fe:f4:06:16:7a:d2:ae:fc:be:ef:a1:
         f5:77:f1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:45:28 2026 by rpki-client