Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
File:                     pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json)
Hash identifier:          Wrj20RgPJTTjbo7YX3QRLpwB84+fe2JzyyhMTqLNR3k=
Subject key identifier:   4F:F4:30:64:1B:74:BE:DB:DF:99:02:62:84:42:62:20:7A:67:4A:17
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Certificate issuer:       /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
Manifest number:          01ED
Signing time:             Wed 25 Mar 2026 02:42:54 +0000
Manifest this update:     Wed 25 Mar 2026 02:42:54 +0000
Manifest next update:     Wed 01 Apr 2026 02:42:54 +0000
Files and hashes:         1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: y0jeh1Mu61FXaY8+hv0h5zbLKTcamGg/ES5gufFi5r8=)
                          2: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: nh4J30ldV6euRi2gtjyBB84BcovSsS6aKNr/8qxVkj8=)
                          3: 966CB516179B11F080B9434CC4F9AE02.roa (hash: YLQ7yflAgMKuFttC7CpmBZs+3zOwW6N2rvXK4lKqfAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
                          rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
        Validity
            Not Before: Mar 25 02:42:54 2026 GMT
            Not After : Apr  1 02:42:54 2026 GMT
        Subject: CN=69c34bae-c77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:02:e8:f0:6b:08:e4:05:7b:8e:35:2d:2d:
                    cf:65:da:5a:1d:5e:6b:3a:c1:71:88:17:7a:6e:ae:
                    5d:7c:7a:64:89:5f:05:c3:08:98:58:be:1a:ec:d6:
                    c9:5d:48:2b:2f:38:91:1c:22:61:90:41:c7:83:ce:
                    de:df:a5:e3:55:8d:24:42:c4:f2:5e:57:77:ba:b3:
                    f2:4d:a8:72:1c:7b:a8:6b:d1:ad:26:67:f3:1b:1e:
                    09:a5:45:94:ce:f3:e4:0f:19:2f:d9:fb:47:21:9e:
                    f3:d5:ed:a9:04:b9:63:df:55:97:94:3f:00:6c:47:
                    8f:3c:55:80:72:75:61:90:96:b2:d2:0d:9a:6f:e5:
                    60:c6:ba:9b:d9:06:96:49:a6:13:be:a4:4a:82:81:
                    50:3a:6c:e6:50:d4:be:69:3d:1f:52:87:f3:b1:a2:
                    23:77:cc:c0:1c:ac:d1:da:bd:e4:52:98:be:cc:4d:
                    af:de:f8:e2:20:6d:13:3d:48:d9:3a:1c:81:af:61:
                    fa:07:3b:ad:2b:03:fc:64:27:3d:85:12:70:de:ef:
                    63:a4:64:41:28:89:00:3f:49:cb:de:9f:5e:30:f6:
                    9a:79:bb:2a:fd:79:6c:8c:35:85:e5:1b:06:af:76:
                    15:f4:d4:b4:72:17:28:34:6a:3a:a2:3e:b4:14:24:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F4:30:64:1B:74:BE:DB:DF:99:02:62:84:42:62:20:7A:67:4A:17
            X509v3 Authority Key Identifier:
                keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:27:49:bb:a3:81:f4:2d:6f:3d:fe:d7:67:83:01:8a:df:
         df:d0:ed:04:37:99:10:ce:46:d1:5b:70:63:7f:18:a3:36:ea:
         bf:4b:65:3d:ab:de:ff:5d:47:5d:4b:22:98:cc:83:bc:ca:23:
         f1:a5:77:ac:52:b9:c7:3a:ae:1e:62:8d:f6:e4:9e:26:83:ae:
         df:bc:fd:ed:1f:81:0d:01:c6:4d:63:e7:c6:c4:61:44:61:96:
         6f:e0:49:94:30:2c:f6:b4:d1:cb:26:56:9a:7e:12:36:4a:25:
         c8:69:12:92:58:00:e4:88:7d:93:59:4c:47:37:95:50:93:bd:
         c2:4f:c1:b4:2a:50:58:77:90:31:58:28:f6:bb:81:0c:38:e2:
         13:b9:e3:4d:f5:b7:2d:11:b0:b1:10:44:69:4d:ab:2e:12:54:
         fa:0b:9a:3b:7a:75:20:68:4c:c1:e3:2e:e4:ce:2b:b3:cd:f8:
         9d:27:3a:39:81:cd:0a:b6:53:27:08:1f:5a:8b:23:8b:73:88:
         99:06:6f:d1:87:2e:9c:38:63:a1:86:0b:eb:7f:e2:a4:38:04:
         f6:e5:8e:0b:97:24:b5:e3:14:8c:f7:72:54:68:04:fb:47:42:
         a0:76:1b:b8:15:6c:eb:c1:0e:46:2e:64:5f:12:c9:a1:fd:de:
         2d:68:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:32:12 2026 by rpki-client