Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File:                     nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier:          rofN1Aqu35y/gpml+0UWiHAC1y3bUkO+T6tp+Oz2EZk=
Subject key identifier:   39:82:4C:6B:71:0B:9A:0A:B0:B6:94:B7:C7:46:B0:ED:27:EB:C9:22
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer:       /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number:          E3
Signing time:             Wed 25 Mar 2026 05:45:23 +0000
Manifest this update:     Wed 25 Mar 2026 05:45:23 +0000
Manifest next update:     Wed 01 Apr 2026 05:45:23 +0000
Files and hashes:         1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: YbisHCDvvLGPj8KSO8V5QtEgHEAtzV+QPGrmNS0zmW0=)
                          2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: t58wU/pXz+iEQ4RAW3H0lzuZf3qpTPHdtZHwx3xgStE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
                          rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
        Validity
            Not Before: Mar 25 05:45:23 2026 GMT
            Not After : Apr  1 05:45:23 2026 GMT
        Subject: CN=69c37673-cada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:f6:3c:c2:1a:5b:22:dd:58:59:30:db:a1:
                    4c:b0:67:4a:3a:32:86:48:59:9f:e8:1a:e8:ae:24:
                    11:4e:70:ae:ad:34:c0:16:98:00:bd:0b:c2:3c:f6:
                    cd:4a:50:ea:47:bf:76:f6:9b:f1:6f:39:c7:c9:fb:
                    6f:52:8b:45:84:ef:e7:5d:0e:61:27:0a:a2:2d:ee:
                    2e:9f:3d:9f:01:a5:d1:70:e7:a2:d6:ae:7f:75:f4:
                    a1:cb:4b:fb:84:44:2b:83:9b:00:11:0d:59:a4:0d:
                    d2:0e:b7:48:34:09:1d:b4:13:e9:3c:9f:e0:39:50:
                    9a:39:c1:ad:e2:bf:1e:ac:77:05:2a:24:b1:46:8a:
                    aa:37:21:3d:71:53:75:f4:e0:80:01:4a:8e:db:37:
                    da:9f:ec:8f:f4:a6:15:0a:f7:35:df:ca:8f:f7:b3:
                    8c:4a:a7:eb:fa:af:d4:8a:18:f4:5b:fa:93:63:03:
                    5f:0a:a5:a8:83:93:15:97:0f:3b:31:c9:32:7c:31:
                    50:83:7f:a4:b2:7e:c0:2f:a8:e9:a3:84:a6:72:e7:
                    a6:c3:ec:3b:06:9b:80:da:3e:81:e4:9b:8b:e3:9a:
                    d6:f9:bd:0c:6a:4c:73:40:28:dc:3d:2f:f0:56:9c:
                    b7:62:ac:e4:3d:8e:f6:8e:37:d3:04:30:fc:8a:48:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:82:4C:6B:71:0B:9A:0A:B0:B6:94:B7:C7:46:B0:ED:27:EB:C9:22
            X509v3 Authority Key Identifier:
                keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:bd:5e:9a:d0:29:dd:3f:5b:84:84:9e:e6:be:93:b7:39:
         94:2f:05:13:d3:b5:2d:72:e6:f6:09:e3:9b:90:31:3e:21:dc:
         15:45:e6:6b:78:3a:2a:06:a1:e6:32:99:f8:7f:ac:12:c3:74:
         a3:19:29:02:47:1c:5b:aa:b8:60:ac:4e:a1:c0:45:45:a9:48:
         7b:5d:2b:a9:0f:bc:6c:16:55:0c:38:33:fc:2c:e4:11:82:c6:
         9f:ec:5c:d2:d8:3f:64:bd:ce:36:61:6e:7d:f6:90:b4:ca:e7:
         4b:38:4e:db:a3:3d:4e:e9:90:55:15:3c:19:dc:51:67:a3:bf:
         64:a6:75:46:a6:3a:63:38:28:bb:72:b1:75:2a:2e:bc:00:a3:
         89:d7:f3:26:49:c0:07:74:6c:ea:e0:30:69:9f:69:ac:1a:cb:
         8b:bc:e8:24:82:b4:21:ed:a0:65:f1:16:99:e8:f3:c1:42:94:
         2b:ab:df:34:72:99:d1:be:29:ea:4b:5c:fe:5c:30:a1:f9:e7:
         1d:38:95:af:7b:4d:fd:d4:e2:51:eb:3d:53:3f:02:8b:d1:6c:
         8f:2f:78:de:88:65:84:00:ef:3a:df:98:b3:70:df:bb:79:8a:
         32:af:2e:5a:a2:51:09:fd:35:c6:c7:7c:99:67:9d:bc:4f:64:
         6b:07:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:44 2026 by rpki-client