Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
File:                     pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json)
Hash identifier:          xi4dBhhIRBGrcdV6PEdz70g4zrcyFC7cN5k7WyhDoG0=
Subject key identifier:   85:19:61:BD:A2:FB:63:4E:D3:2E:79:D6:B6:7D:7C:0E:F8:DD:C2:B2
Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5
Certificate issuer:       /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
Certificate serial:       153F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
Manifest number:          152B
Signing time:             Tue 24 Mar 2026 16:43:10 +0000
Manifest this update:     Tue 24 Mar 2026 16:43:10 +0000
Manifest next update:     Tue 31 Mar 2026 16:43:10 +0000
Files and hashes:         1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: awbVvejP2VextAJOciAwTPMPo7AVBeS1umPO8nYtYr4=)
                          2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: x1oP8h0RfSMrcg0Fj4JZcAdsB5+0gQ0mEDWBlOTV4do=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl
                          rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5439 (0x153f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918232F, serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
        Validity
            Not Before: Mar 24 16:43:10 2026 GMT
            Not After : Mar 31 16:43:10 2026 GMT
        Subject: CN=69c2bf1e-a74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:db:03:ef:ef:ee:77:38:33:da:c6:62:04:
                    56:39:3d:e9:05:9f:bf:96:6e:bc:1e:fb:51:ad:fe:
                    5b:4a:d6:3a:9c:6d:22:f6:a0:a0:58:7f:ec:9b:ae:
                    49:e4:be:60:81:b2:62:a9:b7:7b:d4:40:3e:c4:79:
                    f7:ef:8c:df:09:a5:24:26:09:f9:3f:20:76:78:d0:
                    e1:79:43:d2:02:29:9c:fc:16:78:18:13:98:bb:cf:
                    ad:7e:5e:5e:45:3e:51:5b:f9:49:20:ad:b8:69:5c:
                    9b:5a:38:31:d1:b4:74:26:7c:b8:f3:0b:a3:a6:35:
                    62:e2:65:6f:9d:17:2e:85:d9:5b:8c:33:05:b1:48:
                    6d:9a:f4:9c:bd:3b:af:a9:3b:0c:33:16:6e:da:60:
                    51:81:14:93:f0:25:21:1e:ab:4b:a0:23:d4:90:11:
                    6a:1d:92:84:19:8a:d8:70:4a:26:5e:f5:de:05:9c:
                    0e:1d:8c:2d:74:56:fe:bf:9a:cf:cc:15:40:23:77:
                    5f:d4:bb:a5:af:79:28:b3:bd:d6:43:3e:dd:a6:b8:
                    8d:fb:b4:d5:68:ec:ad:ab:64:33:e5:69:41:6c:d7:
                    06:a8:cc:42:32:be:1f:f8:69:d7:a9:7b:f2:57:35:
                    33:c7:7e:3a:12:cc:c2:93:fe:3c:2f:33:87:89:dd:
                    da:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:19:61:BD:A2:FB:63:4E:D3:2E:79:D6:B6:7D:7C:0E:F8:DD:C2:B2
            X509v3 Authority Key Identifier:
                keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f2:ff:28:da:ea:45:3f:91:54:a7:63:88:6a:3e:f9:7a:f5:
         78:37:e6:5d:4c:66:19:ce:a5:60:4b:1d:ca:82:61:4d:79:d0:
         0d:1f:66:c7:66:c5:bd:eb:16:d7:21:d0:c1:7e:56:da:5d:79:
         47:ed:9c:f3:f1:41:40:b3:15:65:9b:96:87:b8:16:61:8c:8a:
         10:bd:9c:4b:2c:14:8e:89:24:00:c7:fd:6b:e2:c5:4c:c2:bf:
         16:50:3f:e8:eb:30:e4:2b:f0:ff:da:9e:4a:79:c2:d7:e0:98:
         7e:72:df:21:c5:6d:6d:4d:09:12:99:f5:15:88:6e:7b:7d:6b:
         fc:f0:f5:8b:94:3e:1d:29:70:3f:7b:8d:f2:03:8b:00:c4:54:
         0d:01:ae:83:0d:a8:5a:e6:6d:af:27:d5:ec:fc:1c:2b:07:28:
         5a:f9:5d:b6:20:2c:a9:66:8a:32:3c:bc:a2:60:da:64:cd:fe:
         f0:a9:9c:86:68:cd:35:ae:d9:4a:fd:3e:c8:93:95:f4:04:c0:
         c5:05:02:d1:85:ea:0a:21:72:94:92:49:d5:68:6a:75:32:31:
         70:33:fa:57:cd:38:a2:a2:dd:28:1a:88:10:3a:aa:3d:ee:ac:
         8b:18:0f:15:51:ea:52:c3:5b:fa:78:a0:4f:2a:3e:32:42:16:
         e1:62:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:04 2026 by rpki-client