Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
File:                     4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json)
Hash identifier:          bOgr25rQzgTaLQSuM+Qkwww25+/aO1DY0LohIQzmj+o=
Subject key identifier:   A1:18:90:B9:40:97:9C:B8:71:FA:8C:2E:1D:89:D8:73:60:13:1D:55
Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
Certificate issuer:       /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Certificate serial:       06F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
Manifest number:          06F0
Signing time:             Thu 26 Mar 2026 14:50:00 +0000
Manifest this update:     Thu 26 Mar 2026 14:49:59 +0000
Manifest next update:     Thu 02 Apr 2026 14:49:59 +0000
Files and hashes:         1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: XAAan0xWLkw3g2acBoND2jJ4WnR4AwuM69G/KNCuho8=)
                          2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: ogPWdmaPIB4wyLKZTqUhVViwgDf8c1wk4GPlPRwnU7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
                          rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
        Validity
            Not Before: Mar 26 14:49:59 2026 GMT
            Not After : Apr  2 14:49:59 2026 GMT
        Subject: CN=69c54798-03b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:07:20:db:b0:c9:34:71:90:12:52:09:18:
                    63:cc:e3:ab:09:0f:57:a3:ba:d1:a1:4c:90:c5:05:
                    c9:d8:c2:77:b7:8c:9e:b5:b9:29:68:8c:f1:f8:80:
                    ec:af:d9:2b:9f:6c:6e:a7:cf:e5:92:35:bb:c4:57:
                    0e:3e:03:59:53:2e:70:24:a5:c1:7b:82:80:9c:2c:
                    94:fc:b2:9f:14:3b:29:35:ad:08:ad:69:c6:7d:14:
                    71:0f:5f:ed:7c:20:88:09:43:58:42:84:bb:ee:c5:
                    ac:c7:9f:99:86:a3:f7:0a:7f:6e:de:79:0d:5f:74:
                    9c:f8:31:59:61:b3:dd:d5:7b:b3:03:86:d9:54:fc:
                    54:55:64:54:19:bd:a6:1e:7f:cd:c9:e4:f2:b9:78:
                    9e:c9:45:5a:61:03:c1:ff:fc:c4:04:4c:32:ed:76:
                    5b:da:78:f3:1a:1a:da:e0:78:29:8c:ca:ef:9d:f6:
                    ee:fa:ab:a0:77:65:78:2e:33:19:5e:b9:2f:f0:22:
                    6c:b9:9e:a1:e9:50:f4:f9:0b:cb:04:47:bd:53:d5:
                    4d:25:00:32:9c:51:75:5e:69:09:f3:5e:67:3e:7b:
                    7b:ba:f2:43:c8:26:9e:f5:b1:69:fa:c4:e1:96:9c:
                    ba:06:60:a3:23:af:13:88:76:81:09:55:1c:5e:7b:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:18:90:B9:40:97:9C:B8:71:FA:8C:2E:1D:89:D8:73:60:13:1D:55
            X509v3 Authority Key Identifier:
                keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a6:b8:21:53:2b:72:97:55:c7:64:54:57:84:a2:9d:bc:41:
         35:34:5b:4d:75:6d:3c:ed:22:cb:75:11:e6:f5:9e:c5:70:50:
         0a:56:e6:ac:7f:3d:4a:41:ad:d8:cb:5e:6c:e5:71:7e:32:3c:
         e3:fd:ed:0f:8e:54:a2:91:10:07:0b:54:7f:bb:3d:2c:f2:8c:
         5e:bc:ea:95:76:db:df:b3:39:ee:47:21:8c:43:73:3d:8f:32:
         85:50:0f:90:47:7c:46:31:4c:a5:8f:e0:38:59:2e:60:dc:f6:
         ed:2e:4b:31:2b:84:14:80:fd:83:5a:87:11:95:46:4c:45:42:
         3f:fb:dc:e7:4c:1f:ea:40:fc:f4:d1:57:d7:a4:c5:f9:b1:3d:
         cc:00:c1:9a:6c:8e:b0:85:b7:01:80:3e:4a:19:23:43:35:e3:
         e5:aa:70:4d:05:b7:5e:56:ba:81:33:4d:a8:7c:83:67:af:83:
         f2:fa:c3:d1:0e:5e:e6:8e:d2:62:bc:7c:67:1f:a0:0c:22:11:
         8f:0b:28:7b:c7:37:57:51:91:09:79:93:2c:35:86:b0:22:8a:
         bd:ca:89:e6:55:e8:99:bf:f0:7b:4c:d1:f0:6b:76:2e:b1:c8:
         d2:40:fa:97:d3:33:b5:3b:5b:46:ca:86:fc:1c:84:47:f2:52:
         3c:41:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:12 2026 by rpki-client