Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
File:                     SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json)
Hash identifier:          IpS7tQUw6i87BVRjd9d5G7pSPyyiLEYMkVBT6vtWwH8=
Subject key identifier:   F8:DB:96:26:92:38:EA:AD:89:C8:93:08:2C:6F:3A:36:8E:19:0F:92
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Certificate issuer:       /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
Manifest number:          0237
Signing time:             Fri 27 Mar 2026 02:06:39 +0000
Manifest this update:     Fri 27 Mar 2026 02:06:38 +0000
Manifest next update:     Fri 03 Apr 2026 02:06:38 +0000
Files and hashes:         1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: c3HAsW4UAVcYXWbJ0m7uJD2/Cm4aiBPf7q2UrzVaZZA=)
                          2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: VUhX4V+uuAXCvJJx8gbFvjg2DTFUtnIh9VNRCqvzwQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
                          rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
        Validity
            Not Before: Mar 27 02:06:38 2026 GMT
            Not After : Apr  3 02:06:38 2026 GMT
        Subject: CN=69c5e62f-dd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:6f:89:35:79:80:c3:98:86:ea:01:77:a4:
                    85:ae:a8:13:8f:8a:72:2f:1a:05:f9:69:2c:79:e6:
                    d3:f5:89:e1:fd:c1:6b:6d:d5:87:3f:65:4f:36:d4:
                    9d:9c:34:33:4f:5b:4f:16:f2:38:f3:2f:5e:61:25:
                    b0:89:93:35:57:12:f9:69:61:d6:66:79:e8:6d:54:
                    b9:e4:fc:b9:99:4f:87:6c:b6:60:0e:5f:da:8d:5f:
                    ee:ec:7d:6c:bc:0b:43:15:5d:0f:84:87:b9:b6:2d:
                    6d:a9:27:c6:a6:fd:3e:52:ab:ab:c3:41:01:56:bb:
                    83:f7:00:c3:d0:e2:0a:6d:2e:b9:52:26:be:10:2f:
                    70:b4:1d:ae:43:d9:12:f3:f4:fc:70:2d:6f:da:a2:
                    de:76:75:3a:14:7e:ec:3d:ca:55:90:da:28:e9:95:
                    14:88:cd:99:09:22:12:14:a2:28:f5:54:af:a9:65:
                    a0:03:ac:8a:b3:35:25:6f:ef:ed:9d:a1:e1:e5:f5:
                    1e:c2:52:43:3f:72:c3:f3:fc:e9:04:69:cb:32:53:
                    1e:9c:db:3a:6e:45:0f:09:f0:b5:19:55:01:dc:2a:
                    15:89:e4:68:bd:c4:5f:1e:7d:e8:f3:2e:ab:1d:f5:
                    bf:9c:ac:a8:d5:e1:db:ed:29:f2:be:0e:19:d4:70:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DB:96:26:92:38:EA:AD:89:C8:93:08:2C:6F:3A:36:8E:19:0F:92
            X509v3 Authority Key Identifier:
                keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:62:67:15:33:e9:ef:93:33:6a:cb:90:78:65:18:46:ab:ca:
         c5:6b:2a:fc:1c:64:6c:5b:ef:37:74:50:ba:80:cd:a3:0f:35:
         af:aa:83:48:59:a1:37:13:f3:eb:d0:7d:6e:e6:0b:a3:a5:fe:
         f2:aa:19:2c:de:c8:39:a7:7f:fe:e9:87:95:df:ac:f7:9c:9b:
         da:cd:7d:1d:d8:a5:83:dc:18:01:e9:c6:96:9f:5e:a4:e6:73:
         9e:59:8e:11:a4:54:bc:54:88:1e:8f:9d:13:89:e8:67:9d:7d:
         03:ad:53:30:d9:e8:13:80:99:d6:65:38:6a:e8:9b:ce:89:8b:
         03:42:37:ac:c6:59:06:cc:05:95:20:3e:f0:71:dc:e6:77:81:
         bd:b8:5a:eb:eb:49:dc:90:3d:c9:5f:cc:a3:2f:a9:f2:89:84:
         aa:78:24:71:9b:32:ef:1a:bd:87:1b:55:eb:d2:e3:a8:bc:ea:
         02:bb:7f:40:6c:3f:21:5e:2e:f9:62:a9:37:37:0a:f7:5e:4f:
         6d:00:03:3e:a5:76:8e:41:98:2c:e7:41:40:0d:18:18:6f:6b:
         04:4a:be:f1:ed:6e:c9:9b:9d:03:fe:a8:e7:bc:c8:a8:09:b9:
         6e:ac:2e:de:21:67:d8:1a:4a:9c:56:72:2d:b4:62:fd:27:94:
         cf:aa:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:32 2026 by rpki-client