Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
File:                     Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json)
Hash identifier:          +seXYdfP09l18b18WQ7drR0SbxpPMyMOkSxqk7NWOn8=
Subject key identifier:   1B:15:23:BB:DF:7F:D5:DD:4B:3F:45:49:E8:A5:10:B8:23:20:3C:EE
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Certificate issuer:       /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial:       022F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
Manifest number:          0228
Signing time:             Fri 27 Mar 2026 02:14:57 +0000
Manifest this update:     Fri 27 Mar 2026 02:14:56 +0000
Manifest next update:     Fri 03 Apr 2026 02:14:56 +0000
Files and hashes:         1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: 1hOljzFs3kqJ+JQg+ByhQZx+9ZbJJROJ/Ut34hV4uXQ=)
                          2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: Oz1YYz2nVnKK3rUGjD/1v81WOTw67n/9ST3sUEa1Jz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
                          rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
        Validity
            Not Before: Mar 27 02:14:56 2026 GMT
            Not After : Apr  3 02:14:56 2026 GMT
        Subject: CN=69c5e821-090b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:2f:a5:cb:0d:de:43:83:fc:04:52:13:07:
                    6d:1a:fe:f8:ae:2d:86:e4:25:13:35:e7:c6:52:25:
                    03:b2:86:1a:78:f0:68:7d:98:15:64:5a:64:85:10:
                    96:d8:54:b3:07:f9:6b:a4:0d:39:cd:f1:4c:37:d3:
                    c3:d5:7b:3c:30:1d:31:e0:a8:e2:97:8b:f5:c4:04:
                    56:4c:30:f2:2b:56:da:50:ca:fd:47:67:6f:48:83:
                    e8:44:e0:a7:0c:6c:91:d6:26:7c:fb:70:18:6c:3f:
                    b7:15:4a:35:bc:4a:d3:c3:63:1d:9a:36:4f:18:cc:
                    46:86:35:d5:ce:14:1c:54:e0:67:2d:5b:38:bb:ef:
                    79:c0:49:28:76:3d:91:8d:46:63:5e:ee:97:53:03:
                    0a:38:d6:f1:66:1d:76:50:ed:b5:4b:95:2e:c0:0f:
                    ff:15:c5:15:d1:06:24:a0:77:0f:68:b1:9d:0a:e9:
                    67:2f:3f:39:c6:bd:a8:f1:c6:6f:6b:4c:10:be:47:
                    8f:9b:c9:90:e7:9e:7a:78:f1:38:8f:eb:23:eb:f9:
                    27:19:3d:b1:8f:91:3b:ba:23:c1:da:30:03:71:16:
                    61:4b:f7:78:04:61:ba:e1:d6:88:e3:a3:3a:28:b1:
                    83:78:53:24:e4:c8:7b:d2:56:35:62:b2:01:65:ff:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:15:23:BB:DF:7F:D5:DD:4B:3F:45:49:E8:A5:10:B8:23:20:3C:EE
            X509v3 Authority Key Identifier:
                keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b7:ad:2f:6e:39:13:44:61:50:15:a5:25:bb:50:f9:cd:9e:
         11:4f:ae:0f:ce:25:c6:99:77:2e:41:db:47:22:48:98:d9:d1:
         47:c9:b4:76:0f:f7:e5:65:df:2c:a6:b0:4c:b9:44:3c:ef:f6:
         cd:0d:8a:16:bf:56:e3:31:f8:8d:af:1b:7d:01:7a:5b:f2:fb:
         bf:8a:6b:da:bc:9f:62:4b:b8:c3:70:10:70:1b:0b:db:f3:72:
         5e:66:41:2b:1a:fc:a9:8d:b8:d6:ad:42:0f:e6:84:7f:11:05:
         03:02:9e:60:ab:14:7d:5f:14:1d:7b:d5:ab:4d:40:11:27:a1:
         c2:b2:86:9c:7e:8b:43:fc:d0:12:47:b8:ed:2b:14:d1:d6:a3:
         3b:da:25:c1:62:5d:72:0e:e0:be:14:67:71:a4:fc:da:37:27:
         7d:4e:d3:ba:d6:e2:d4:3a:e7:bb:99:a3:b0:20:11:ef:4b:26:
         24:60:4d:1d:d3:bd:e7:2e:dd:7b:d6:69:cd:09:39:4f:f0:10:
         49:f6:69:5c:75:ba:75:64:ed:95:7b:71:f9:9f:ce:fe:5a:d9:
         9b:85:77:55:4e:6f:ec:db:de:13:38:eb:7e:fe:1c:ab:cd:32:
         db:9b:45:a6:fe:1b:99:dc:65:d3:81:1e:3d:50:7c:22:01:ed:
         96:30:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:06 2026 by rpki-client