Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
File:                     lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json)
Hash identifier:          U6NqjaoZE8zDTsLS+x+d++EPrcnURtCTszwVgg9s9F8=
Subject key identifier:   2F:17:40:CD:8C:B1:5D:4B:9E:70:9F:1E:2B:E6:0D:FA:1A:50:AD:1F
Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
Certificate issuer:       /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
Manifest number:          016F
Signing time:             Wed 25 Mar 2026 04:02:28 +0000
Manifest this update:     Wed 25 Mar 2026 04:02:28 +0000
Manifest next update:     Wed 01 Apr 2026 04:02:28 +0000
Files and hashes:         1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: nYKDEFTKPbNCOiwIFctvUsaHlhFPprx6xIO5SnfWd0c=)
                          2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: 1TXYVC9d69ShUmLrTVkHQDpZD/NqvSa+MWs9ze+mF20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
                          rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F
        Validity
            Not Before: Mar 25 04:02:28 2026 GMT
            Not After : Apr  1 04:02:28 2026 GMT
        Subject: CN=69c35e54-82d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:3c:06:c0:b4:04:6b:50:be:03:c4:40:99:
                    f1:f9:07:a7:f6:89:94:f1:35:1f:e5:ac:56:fe:3e:
                    d2:c7:86:4f:b1:f0:8a:f7:d2:e1:c2:79:74:bd:9f:
                    cc:9b:10:f1:c4:49:cd:5e:e7:0e:01:7a:6a:b2:8e:
                    71:65:ce:4d:80:c7:21:35:e0:20:01:23:21:51:9b:
                    be:e2:ef:e7:3e:d0:3c:57:3d:33:fb:83:56:02:74:
                    c1:1e:ed:bb:03:a4:11:4a:52:39:03:4b:eb:d8:ac:
                    06:29:8c:28:e0:68:23:fd:e1:fb:b8:c7:70:ff:76:
                    38:1e:97:c7:ee:1f:ce:dc:40:1b:30:73:ce:91:bf:
                    69:6c:5b:48:6f:79:68:c4:0f:f5:86:cf:dc:1d:a6:
                    41:06:cb:74:0b:ae:f7:43:92:2f:5d:87:96:f6:ec:
                    14:0b:12:dd:ae:9c:b3:83:89:c8:0c:0a:13:c0:03:
                    6f:22:08:b5:3f:ec:eb:35:59:23:f6:e7:be:83:8c:
                    f5:7b:3d:21:0c:6d:ff:95:48:00:76:08:f5:dc:3c:
                    04:9d:da:bc:8b:c0:4a:1a:4e:92:23:a7:ba:9b:61:
                    09:6d:99:e8:96:8e:20:1c:b8:bd:55:a8:75:fb:41:
                    a2:9c:f8:04:e4:ba:ea:c7:08:02:51:f5:b1:e9:1d:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:17:40:CD:8C:B1:5D:4B:9E:70:9F:1E:2B:E6:0D:FA:1A:50:AD:1F
            X509v3 Authority Key Identifier:
                keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:60:04:d1:b6:8e:83:7b:8f:40:0a:6f:be:c0:c9:39:83:bd:
         e4:5c:ab:40:2a:67:1b:a6:16:43:d8:3b:18:4f:92:18:36:e4:
         55:bf:41:d2:62:73:9e:d4:5e:13:0c:45:83:a1:42:7c:1b:9e:
         95:9d:9c:eb:63:9e:3f:9f:dc:b4:90:d7:06:63:41:15:05:e1:
         9b:ee:81:50:8f:77:50:49:d6:ca:37:e3:f1:25:0e:82:03:04:
         59:e8:76:1c:57:8b:c0:bb:f6:85:86:eb:84:f4:f9:16:1e:14:
         f7:dd:63:63:71:ed:bf:9c:f4:bc:85:97:06:41:7e:04:8c:7d:
         ce:4e:68:e6:ed:60:1b:6a:5b:ed:a5:ac:43:74:2b:b5:ba:09:
         ff:5e:42:d5:dd:39:5a:66:c6:e0:cb:f6:b3:8d:33:d5:d8:6c:
         b1:d1:89:75:c7:36:18:84:16:99:6e:a2:82:53:e0:5c:5e:a9:
         b4:74:ad:8c:10:6c:7d:77:ca:51:7f:0a:d6:22:5f:d6:1b:bc:
         c9:75:c0:74:58:51:77:f3:b1:83:f1:7e:26:f0:9b:c4:d0:e9:
         4e:59:6b:c7:fb:5d:f6:0a:aa:b8:c3:9e:1e:dc:f9:57:5f:97:
         b3:ba:90:d3:15:2a:bb:15:c3:c0:2f:f6:ad:b2:cd:54:b3:df:
         e7:4b:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:22 2026 by rpki-client