Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
File:                     jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json)
Hash identifier:          HIE6LTbVkfMgQC9Ucxm0H1OA69kJhPmZv/7jXXG8YuA=
Subject key identifier:   B8:73:00:A2:A9:0F:FC:D2:93:04:83:73:00:5D:99:A6:9B:89:24:C8
Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48
Certificate issuer:       /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
Manifest number:          0276
Signing time:             Wed 25 Mar 2026 01:18:55 +0000
Manifest this update:     Wed 25 Mar 2026 01:18:55 +0000
Manifest next update:     Wed 01 Apr 2026 01:18:55 +0000
Files and hashes:         1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: 2NADQU8g9a9KryVazrZCLiz43wclg/ZRuP7/TA+PtoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48
        Validity
            Not Before: Mar 25 01:18:55 2026 GMT
            Not After : Apr  1 01:18:55 2026 GMT
        Subject: CN=69c337ff-c409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fa:c2:0d:88:79:a2:98:97:57:96:ae:18:84:
                    80:23:66:6a:a3:3b:f9:94:37:05:13:11:8d:e8:00:
                    0a:c4:7f:eb:c7:e7:df:66:9a:ed:53:70:be:35:81:
                    f0:eb:67:15:e3:5b:af:a3:56:b4:c8:f1:05:32:a0:
                    cc:81:9f:04:24:65:ee:d1:43:7d:7c:1c:56:46:7f:
                    ae:03:af:63:b8:69:f5:12:7a:e6:d4:eb:ef:57:df:
                    a2:3b:67:a8:05:a8:0e:48:26:29:c3:69:6f:c5:21:
                    6b:b5:a5:e5:c9:98:77:b9:2d:21:7c:a9:5d:83:a6:
                    d0:97:32:a4:2e:f9:3e:0f:c7:6a:c5:fd:18:78:6b:
                    05:0c:0f:52:3e:3c:50:45:eb:63:b6:b6:6f:35:6a:
                    2d:93:0b:9e:73:58:10:38:e8:ce:30:09:bb:0d:be:
                    85:09:70:9a:28:2b:d4:1e:58:3a:6e:b0:7b:f9:27:
                    39:8c:c9:5b:40:2f:b8:bd:5f:5a:17:60:7e:47:37:
                    5d:c8:55:11:99:fe:79:7d:2c:7f:16:72:c0:44:22:
                    44:b9:79:88:a1:74:ce:4b:88:d7:67:30:c7:13:71:
                    70:d2:e6:d7:28:a0:45:8b:89:ff:f3:05:e8:ee:31:
                    70:d4:64:a5:c7:b7:e8:cc:92:18:8c:a3:14:82:7a:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:73:00:A2:A9:0F:FC:D2:93:04:83:73:00:5D:99:A6:9B:89:24:C8
            X509v3 Authority Key Identifier:
                keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7c:12:21:45:9c:e0:bc:9c:50:c8:a6:05:d5:90:f2:a3:95:
         69:76:15:c5:93:53:50:10:29:e5:6a:e3:0b:27:cc:df:6a:22:
         60:8e:02:c1:1d:20:32:96:b0:4f:33:78:23:7c:b9:01:22:2c:
         59:f1:02:6a:9e:6c:84:d9:d8:f8:4f:59:ed:a9:72:6e:02:ba:
         5c:1f:71:a6:11:d6:a0:3f:54:d8:05:36:9f:d4:13:89:05:fb:
         ff:88:91:80:22:4e:7c:6a:7e:c8:9b:e2:3a:36:74:d7:02:b9:
         76:b5:83:82:43:bb:d9:92:a4:8b:41:ce:d7:ea:08:49:e8:c8:
         89:06:27:7e:bf:f5:e6:95:5e:ce:b1:40:42:ca:1f:f7:3f:13:
         8a:e9:93:75:0f:7c:7a:69:ee:2f:8f:56:3f:d9:17:69:d7:21:
         a4:bd:df:b5:96:b3:c5:a1:7e:42:e7:f2:c2:aa:40:54:e3:6f:
         92:d1:09:b7:5e:4a:10:3d:90:e9:4a:f3:8e:1f:81:ec:11:29:
         48:5a:97:8e:9f:8d:1e:4c:c8:29:cf:fc:5a:71:4a:19:6f:b7:
         46:41:a8:40:20:a6:a9:4b:9b:d8:de:3b:be:93:30:80:a4:b9:
         30:03:b3:e2:d1:21:9e:85:87:f9:7a:9b:fd:20:73:88:2b:15:
         bc:88:7b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:11 2026 by rpki-client