Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft
File:                     -V6w5_mnqDfmxExu_hvZAZWJfy0.mft (raw, json)
Hash identifier:          fTYEYxMMQNaFU5W9fX/fFywm1GF2KIXh4sA6zO20mZQ=
Subject key identifier:   08:71:60:D1:93:CA:BF:88:E0:93:DB:7A:D9:D0:79:0C:CD:22:20:97
Authority key identifier: F9:5E:B0:E7:F9:A7:A8:37:E6:C4:4C:6E:FE:1B:D9:01:95:89:7F:2D
Certificate issuer:       /CN=A916D547/serialNumber=F95EB0E7F9A7A837E6C44C6EFE1BD90195897F2D
Certificate serial:       0CDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft
Manifest number:          0CCE
Signing time:             Thu 26 Mar 2026 18:17:19 +0000
Manifest this update:     Thu 26 Mar 2026 18:17:18 +0000
Manifest next update:     Thu 02 Apr 2026 18:17:18 +0000
Files and hashes:         1: -V6w5_mnqDfmxExu_hvZAZWJfy0.crl (hash: HK2F8NP3T0ok06So9Zmv9Fsq7lCSzwVHXjHKzkJJMwk=)
                          2: A9E0680E094611EAADB2B84EC4F9AE02.roa (hash: 5RFeu7GnzGkFWlsqmqCawqYHK6XuvNWXV2BE9edhte4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.crl
                          rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3290 (0xcda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D547, serialNumber=F95EB0E7F9A7A837E6C44C6EFE1BD90195897F2D
        Validity
            Not Before: Mar 26 18:17:18 2026 GMT
            Not After : Apr  2 18:17:18 2026 GMT
        Subject: CN=69c5782f-be40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ff:5f:d4:f7:ef:62:8e:12:a5:4f:8b:fd:4d:
                    c0:49:bc:08:4b:ca:3e:c3:11:0b:66:a3:96:d1:24:
                    ca:11:11:a7:99:54:ff:e1:41:59:27:ee:16:cf:60:
                    8d:62:22:20:17:02:4f:78:30:6f:8c:40:39:cc:55:
                    be:47:1e:06:2f:1a:cc:8e:f2:6f:15:d3:9a:80:2e:
                    71:58:e6:57:f3:d4:a0:3b:fe:a3:f2:e8:0a:64:8a:
                    46:d9:96:2e:5c:0a:38:2b:f0:8b:44:10:df:25:99:
                    f8:9b:a1:ef:e1:6a:e7:56:09:c0:c1:07:4a:23:9e:
                    b1:0b:8d:37:b7:c9:a9:62:9b:f3:e6:c9:27:8d:e6:
                    39:b0:9c:71:de:9c:50:aa:33:29:88:65:7a:59:60:
                    13:94:c2:6f:ce:ab:93:7a:84:82:63:58:0d:a1:36:
                    c3:12:9d:05:cb:47:6c:cf:ba:bc:5a:b4:11:ce:93:
                    06:31:b5:d3:23:db:c1:c6:11:6a:9f:c0:5b:9a:ce:
                    6d:6d:88:b7:48:d7:58:1e:c4:7c:18:d2:5d:9e:f5:
                    00:f3:29:c1:80:60:df:16:7d:64:fb:01:4a:b1:49:
                    d6:c0:7a:fa:11:f1:5a:67:75:8c:2b:fe:53:e1:2e:
                    f1:13:87:e6:c2:ce:45:13:ba:53:d2:49:4e:9b:45:
                    56:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:71:60:D1:93:CA:BF:88:E0:93:DB:7A:D9:D0:79:0C:CD:22:20:97
            X509v3 Authority Key Identifier:
                keyid:F9:5E:B0:E7:F9:A7:A8:37:E6:C4:4C:6E:FE:1B:D9:01:95:89:7F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:36:8a:02:db:b5:b1:1f:d5:91:de:ff:cb:dd:94:f5:36:f6:
         2a:27:a4:17:b9:47:42:a8:0f:94:e9:ea:90:dc:56:4b:b5:d3:
         d6:0c:2a:c3:3e:c6:b4:83:be:25:f1:a1:d5:ab:1a:ad:7b:c1:
         e6:6d:49:6e:ce:3a:a9:14:ea:22:0d:47:15:3a:09:ce:cb:44:
         ce:29:aa:3a:cf:b3:b3:b9:fd:8b:ac:90:5b:dc:1e:06:ce:68:
         d4:2e:bd:89:e6:f9:9c:f3:12:11:e2:5b:0a:47:b0:68:17:3e:
         b2:ef:04:1c:d7:ee:ad:58:7c:92:69:4c:b0:24:02:70:54:27:
         04:de:57:4c:5d:4f:0f:39:23:81:fa:95:29:79:be:f0:59:dd:
         21:71:8b:68:a5:b4:65:e7:f7:24:63:5e:56:fc:92:3b:99:a7:
         e3:79:15:2e:42:3b:cc:53:74:e5:a4:03:b3:69:b7:15:b8:36:
         b7:f9:d5:57:f0:6f:21:3b:0e:6c:f4:33:e2:cc:ff:4b:99:33:
         da:45:78:89:7d:0a:45:eb:3d:c9:e2:d3:ef:26:66:c6:76:f1:
         4e:61:27:30:19:89:63:b4:68:31:0a:30:9c:2d:9f:26:00:6b:
         04:3e:a5:c7:1d:76:03:e5:7c:dc:85:52:d6:f1:bd:e6:ff:25:
         4a:f3:d9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:56:15 2026 by rpki-client