Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
File:                     Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json)
Hash identifier:          QMd8mT6sklakX+OMJiYg/51kSPka5S8BMj0JY6k2Bvc=
Subject key identifier:   27:BE:95:71:22:90:E6:69:51:CF:F8:2D:46:4E:3A:8B:CF:DC:40:25
Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
Certificate issuer:       /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
Manifest number:          BC
Signing time:             Wed 25 Mar 2026 06:16:10 +0000
Manifest this update:     Wed 25 Mar 2026 06:16:10 +0000
Manifest next update:     Wed 01 Apr 2026 06:16:10 +0000
Files and hashes:         1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: q6VKGBkLLMETUFq4KDvzSYMZkZf1SSGIDwGwyfXQlAg=)
                          2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: JgW7r5pk1FderMLKPrb4Cb/ibJCCVddw7kZ9flhSsCQ=)
                          3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: 9AYfRR1mUHtIyonHrj2E53FFwt+sSRdMykaqwYBUAaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
                          rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
        Validity
            Not Before: Mar 25 06:16:10 2026 GMT
            Not After : Apr  1 06:16:10 2026 GMT
        Subject: CN=69c37daa-5e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:a7:85:ad:f9:a9:fe:c9:14:db:b0:64:69:
                    2d:d5:e0:b5:0e:29:2a:9b:38:8d:69:d7:09:3b:73:
                    ed:cf:88:bd:00:6a:07:ca:00:b6:15:00:bb:8b:5e:
                    8f:5e:ca:16:df:95:b6:1d:b3:f1:d8:1a:ac:b7:6b:
                    ad:46:b6:56:bc:ba:08:b0:91:c5:19:34:9a:f4:ae:
                    5e:16:fb:cd:c2:e8:70:cd:32:d5:8e:6b:e5:45:31:
                    f4:ff:4e:8e:8f:90:e7:41:5b:77:8b:a3:7f:c2:1b:
                    55:c1:04:cf:fb:25:fb:36:04:2e:4e:7c:12:e5:b4:
                    df:9e:a9:59:da:4a:d5:54:50:6a:10:ab:dd:9e:7e:
                    06:ce:83:e8:e6:f7:68:1a:7a:74:2a:25:7b:84:2a:
                    71:4d:f6:12:77:db:ab:b7:3d:71:cd:b1:b0:65:78:
                    f6:db:92:b9:f8:a6:e2:b2:74:7a:22:a6:50:79:92:
                    2f:89:4f:22:4f:4b:a6:ab:04:d0:16:03:e7:33:67:
                    f8:a5:05:cf:ea:1e:48:f7:1d:b7:13:f8:21:25:25:
                    04:d2:e1:d3:d2:44:01:79:f3:97:c8:1b:1f:3d:2d:
                    d3:75:72:d1:36:4b:04:71:3f:4a:ac:f0:de:b3:87:
                    64:d7:cb:ad:74:87:a3:9e:12:37:e4:d6:e4:ba:fe:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BE:95:71:22:90:E6:69:51:CF:F8:2D:46:4E:3A:8B:CF:DC:40:25
            X509v3 Authority Key Identifier:
                keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:58:a3:4c:21:8a:b6:12:51:39:44:19:6c:1c:4f:2c:e8:4e:
         b3:39:2f:55:66:50:81:21:73:b4:e3:f6:31:ec:1e:33:17:d5:
         e6:c8:27:1b:9e:c8:f9:ed:c5:52:e9:13:be:bd:ee:f0:d7:53:
         94:19:88:66:15:36:8d:b0:05:2b:ca:e7:42:22:a2:1a:5c:d7:
         b6:55:34:d3:f3:7b:09:6d:d7:54:b0:27:a0:58:ca:b8:12:57:
         4b:10:ba:62:90:68:b4:e0:a0:e8:b8:5f:0c:99:bc:21:9b:fa:
         06:93:1a:ba:77:13:3d:f6:3f:36:f6:fc:1b:bd:29:78:62:16:
         44:72:40:a1:09:8e:04:34:05:43:b6:9b:62:60:63:42:30:6b:
         e5:04:44:eb:c5:3e:ce:24:7c:ab:49:72:f0:b3:33:f0:08:5a:
         60:e8:41:9f:fe:98:eb:e2:99:f3:54:37:92:0b:ad:0a:61:40:
         d2:e5:be:fe:27:a4:0e:e5:aa:35:43:54:1b:72:ab:77:1d:e0:
         db:d1:65:68:a0:db:ec:d4:c0:00:aa:c3:da:3e:2b:bc:be:c3:
         74:2a:e2:2e:7f:1c:6d:16:0f:36:cf:e3:c2:3b:ca:d9:17:13:
         e7:23:b4:c1:9e:27:bf:7e:c2:12:2a:ae:df:cd:be:1c:53:79:
         85:32:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:17 2026 by rpki-client