Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
File:                     6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json)
Hash identifier:          zurN10gcRUbKEiyuM5HiPadn09SzaG0NMTJN7S6VtvY=
Subject key identifier:   5C:84:14:22:29:A3:99:DB:95:9B:A5:24:C2:EE:DE:04:A6:85:2E:79
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Certificate issuer:       /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
Manifest number:          0138
Signing time:             Wed 25 Mar 2026 04:46:53 +0000
Manifest this update:     Wed 25 Mar 2026 04:46:53 +0000
Manifest next update:     Wed 01 Apr 2026 04:46:53 +0000
Files and hashes:         1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: wczmLiE7PVzuzeoyGj/ydJbRoTLWsv91Fq5DFOA2v3A=)
                          2: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: 0oj6DB6AcAI80O6cWTUs9uNP0wv1u3q24kvlcmDmd+0=)
                          3: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (hash: cwdVnCmvvqxvWzMgTGL5Jud7cZIF7lHoUd7q8Ic9ySU=)
                          4: 866314EE5FCC11EF8416052EC4F9AE02.roa (hash: GLcX1wFp7o9QRrChsXnCvjX1Ko/I4of/iC0AV3GlULs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
        Validity
            Not Before: Mar 25 04:46:53 2026 GMT
            Not After : Apr  1 04:46:53 2026 GMT
        Subject: CN=69c368bd-50bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:91:26:27:2d:15:6a:23:c5:21:2f:cc:13:
                    50:8c:50:40:10:bb:84:e2:6a:b0:6a:2e:78:64:51:
                    67:46:06:fe:31:7b:a3:56:92:f9:3d:d1:15:4b:8f:
                    4d:64:e9:64:9b:6f:ba:35:99:9c:74:c0:eb:3d:34:
                    66:66:7b:d6:ce:91:70:ad:93:ab:66:fd:7a:8c:74:
                    b5:b0:89:07:99:5f:fc:a8:6f:bb:a6:a2:47:b4:2a:
                    81:59:0a:dd:1a:d9:1a:6f:9e:f1:55:cf:9e:cd:7b:
                    f8:04:f1:ca:39:48:82:4b:ac:36:21:b3:aa:e5:95:
                    50:34:26:37:fa:89:1d:31:63:55:df:65:e0:1a:42:
                    42:9e:3b:f4:dd:e6:3b:78:96:3c:0f:da:27:17:71:
                    fb:a6:67:2e:43:d6:e6:43:9a:de:bb:ac:7c:44:fd:
                    f4:d4:14:e6:fd:3f:22:cd:be:6f:ac:ff:89:88:c3:
                    55:00:45:1c:d5:35:7e:27:b2:b6:86:d4:64:fb:a4:
                    78:38:56:d5:7f:1e:79:10:ee:e5:cb:ca:a4:64:c0:
                    a0:aa:4b:39:9c:a5:2e:88:4b:03:a8:df:45:86:7d:
                    6b:39:43:fb:40:40:14:c3:b3:23:bb:30:17:b6:0a:
                    9d:3d:10:57:93:64:95:ed:32:6c:8e:2f:84:ee:5e:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:14:22:29:A3:99:DB:95:9B:A5:24:C2:EE:DE:04:A6:85:2E:79
            X509v3 Authority Key Identifier:
                keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:04:8d:64:8c:f2:2a:92:8a:8e:83:37:76:f0:21:af:79:1c:
         a9:df:e1:1a:e2:bd:b8:84:c3:f2:81:5d:22:16:8b:89:56:6b:
         44:66:27:be:f5:39:88:88:ee:e5:35:66:5b:91:00:d4:3f:4b:
         57:77:20:4c:bb:b4:76:d8:02:d1:ff:07:e4:32:b0:02:95:1e:
         1d:c2:e5:9b:a6:20:8c:8d:d4:19:9a:56:70:b3:8c:bb:c6:b0:
         2e:10:f7:5e:c4:ec:fd:45:bf:a1:72:14:b6:f2:3d:48:cf:48:
         15:1a:4f:8b:1c:c3:26:df:0d:f9:70:22:f5:5b:c6:ad:41:20:
         c2:c2:35:40:57:20:99:2f:78:27:b1:fd:0c:de:b5:ff:95:3f:
         70:d4:28:82:cf:d5:35:76:26:db:61:be:6d:f8:ec:06:c0:03:
         f2:07:2d:a8:b0:26:93:16:46:76:3f:74:f5:b6:9d:c8:e8:d8:
         37:3f:42:a5:8b:e7:95:2d:1a:33:16:2c:4d:ab:4d:49:fd:9a:
         35:83:ec:c3:1c:c5:76:6f:8e:b7:06:b3:24:0a:ae:68:b8:56:
         f8:2c:23:9b:ca:7b:1d:86:e0:23:e8:ac:b6:aa:85:64:f9:c7:
         1f:50:6c:0b:3b:ab:f2:3e:62:b8:51:4f:b9:d3:c9:9e:ab:17:
         5c:55:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:24 2026 by rpki-client