Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
File:                     ivWYKUtrI6E57fVPJCi8YZZRqhc.mft (raw, json)
Hash identifier:          xyrDhwJdccyjUI5VKtWAmKdZwF6BtUNhsr2aDtCkEkE=
Subject key identifier:   3D:D2:50:04:5A:62:2E:5D:5B:2B:76:A6:7A:4A:F7:CC:63:B4:F0:2E
Authority key identifier: 8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17
Certificate issuer:       /CN=A917DB77/serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
Manifest number:          89
Signing time:             Wed 25 Mar 2026 06:47:09 +0000
Manifest this update:     Wed 25 Mar 2026 06:47:08 +0000
Manifest next update:     Wed 01 Apr 2026 06:47:08 +0000
Files and hashes:         1: ivWYKUtrI6E57fVPJCi8YZZRqhc.crl (hash: jbzfc/4/eDqy9bTjPf5nOQq/F8oV3Ofqw0bOS2mFYc4=)
                          2: 69F70CA058AC11F09233031BC4F9AE02.roa (hash: 4WREvFd+nUzC5vPmTUxIuZeyw9tiHe7MtLqc+tBnPIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl
                          rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DB77, serialNumber=8AF598294B6B23A139EDF54F2428BC619651AA17
        Validity
            Not Before: Mar 25 06:47:08 2026 GMT
            Not After : Apr  1 06:47:08 2026 GMT
        Subject: CN=69c384ed-16a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:4a:92:cd:43:fe:07:ac:6e:58:83:5d:a8:
                    ea:5e:5d:7a:ab:c9:bf:44:44:cb:9b:a4:24:74:7f:
                    fd:16:49:0b:44:51:dc:7a:a0:b2:1c:cb:79:ca:fd:
                    03:57:d5:18:64:52:36:0e:a5:e5:c3:eb:ac:92:7d:
                    9a:cd:1a:c4:7c:6c:2f:63:93:ba:b9:cc:94:93:f1:
                    43:f5:ed:fc:8b:68:82:12:5e:18:d0:5f:34:2d:c1:
                    53:93:a2:4b:6c:b7:bf:01:14:de:8a:c0:ae:03:b7:
                    eb:10:37:16:20:aa:55:40:13:7d:6e:0e:63:6a:7a:
                    67:7e:be:7a:60:9e:67:02:d9:7c:58:fa:cf:ad:c3:
                    45:a5:8d:f5:e8:ac:d1:6f:81:ab:c4:d9:d0:ab:f3:
                    2e:c7:48:8f:55:89:66:0d:16:1b:9a:b2:a7:b5:78:
                    3c:ad:2b:46:91:47:81:c5:10:cc:25:68:1f:b6:c6:
                    e3:f3:d6:f7:dd:19:05:57:fa:8d:71:72:d4:32:61:
                    20:c4:a6:e5:9e:b5:0e:4a:53:8a:60:12:fb:38:58:
                    5b:50:5e:d5:e6:fe:e8:27:1b:ff:3e:90:8d:04:02:
                    92:69:d2:46:26:d7:2b:c4:67:65:e2:db:52:94:3a:
                    88:15:b7:1e:05:d5:5f:70:be:7b:8e:b5:cd:5a:00:
                    8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D2:50:04:5A:62:2E:5D:5B:2B:76:A6:7A:4A:F7:CC:63:B4:F0:2E
            X509v3 Authority Key Identifier:
                keyid:8A:F5:98:29:4B:6B:23:A1:39:ED:F5:4F:24:28:BC:61:96:51:AA:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivWYKUtrI6E57fVPJCi8YZZRqhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB77/934E356258AA11F0B2EEA114C4F9AE02/ivWYKUtrI6E57fVPJCi8YZZRqhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:82:36:81:33:61:65:c4:5f:69:0a:0d:64:79:0c:ae:89:
         1d:1f:d8:b7:b9:06:db:5c:dc:3b:19:1f:63:f7:3b:31:98:b5:
         4c:94:54:39:eb:e9:fc:37:af:69:c3:44:93:27:40:6c:06:b8:
         c2:5e:f4:3c:62:69:67:7e:4d:cb:c8:0d:f4:4f:14:bd:18:9a:
         7f:c1:4f:78:1d:9e:71:93:15:e3:ee:52:cd:ed:49:01:33:17:
         56:f4:ec:ac:fb:8e:bc:51:72:d5:c1:04:3a:55:f7:36:23:e0:
         02:8b:50:f3:0e:69:0d:5e:17:27:17:29:09:b5:27:a4:f8:ed:
         34:9b:04:82:bd:67:31:a6:36:7b:e6:d1:2d:9f:c4:0c:71:6c:
         43:77:a8:70:ca:5c:7f:95:4d:7a:41:58:df:b6:55:8a:f1:28:
         eb:28:e8:b0:2c:d2:36:7b:9d:96:bd:3f:c3:9e:12:58:bf:9f:
         43:ca:d1:64:75:6d:f1:43:41:9f:9c:a2:85:91:2f:f1:59:31:
         f2:61:bc:2c:98:e0:2d:4e:ec:f5:4d:99:9e:f8:a2:89:e1:d7:
         77:22:76:cb:48:d9:dd:e5:32:d8:c9:65:4a:3d:bf:25:84:0b:
         55:7b:49:2b:8f:42:7d:a7:69:49:45:97:40:6c:22:73:f3:e7:
         c6:2e:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:15 2026 by rpki-client