Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File:                     CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier:          bI7XlhG9iN3STaReXj38zgbBe0jQ6hrVnpJs9iIn0t8=
Subject key identifier:   D2:AF:DE:61:CA:D3:A9:70:C9:E0:26:BB:FA:BA:67:A4:15:8F:B5:09
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer:       /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number:          018E
Signing time:             Wed 25 Mar 2026 02:08:30 +0000
Manifest this update:     Wed 25 Mar 2026 02:08:30 +0000
Manifest next update:     Wed 01 Apr 2026 02:08:30 +0000
Files and hashes:         1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: Xrl4XjidYvr/mo+o5HJuZqDUVfeMh71JYV4VYQu6iEA=)
                          2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: hMU+At17l1ZNCxKQ6DnMUhV3CzOxLfbG9qx0kdLMQj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
        Validity
            Not Before: Mar 25 02:08:30 2026 GMT
            Not After : Apr  1 02:08:30 2026 GMT
        Subject: CN=69c3439e-8086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:45:22:23:cb:3d:b6:52:24:a8:73:e2:12:82:
                    27:19:81:a2:0c:42:d9:ad:3d:f5:00:ec:e8:8c:0b:
                    85:61:b4:4f:9d:c2:cd:24:32:0e:f0:ff:d2:e2:f4:
                    d8:4b:cd:61:17:0e:9d:a6:55:9e:17:8e:8e:ac:00:
                    b7:84:b8:3c:27:86:92:20:38:7a:b8:48:ae:b5:47:
                    fd:41:24:14:e0:fb:63:67:5e:39:9c:81:e1:d9:5f:
                    9c:e9:80:7f:9d:5a:7a:4c:8f:05:71:f5:19:3d:6b:
                    a0:ab:8f:03:a8:a0:1f:52:e7:25:9d:e4:7c:be:17:
                    63:c6:66:19:fc:27:64:19:28:df:e1:7c:3a:d1:91:
                    71:e1:44:ae:47:4c:8f:6a:10:5a:d9:02:f5:55:b0:
                    e2:82:48:6a:46:e3:b8:99:18:15:24:da:73:db:eb:
                    0b:fc:85:3d:ab:4c:81:ef:bd:e4:51:f3:37:0b:eb:
                    9a:ca:61:8b:5a:5b:5c:20:4d:c1:ed:f7:65:a6:5c:
                    ac:93:68:c9:29:66:49:89:60:79:6a:0a:db:cb:58:
                    29:2d:2d:1c:57:e1:01:4e:67:16:bf:fe:01:c3:c4:
                    12:04:e8:81:0a:f5:df:8e:d3:35:03:bf:f1:07:bf:
                    4e:74:ab:dd:58:91:04:55:bd:43:18:02:2f:bb:ea:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AF:DE:61:CA:D3:A9:70:C9:E0:26:BB:FA:BA:67:A4:15:8F:B5:09
            X509v3 Authority Key Identifier:
                keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:99:67:89:63:f8:74:60:bb:5d:15:c1:a8:bd:5a:cb:50:
         02:3d:e8:91:ea:ac:33:e8:06:0e:51:09:ca:b7:8a:33:c9:70:
         03:7a:6b:46:a0:5d:0e:23:68:f5:d7:1c:c5:a9:f1:08:00:a8:
         d9:05:4f:0d:2c:8b:b4:b0:aa:00:36:eb:77:8b:64:a0:c2:dc:
         05:aa:89:ab:b1:97:1c:b3:70:16:6b:7b:35:c8:53:98:b9:fe:
         7a:d8:0e:46:7d:a9:92:6a:0e:6a:ba:30:64:d8:af:9d:5a:31:
         80:bc:e6:fa:a7:9f:e9:01:eb:fb:b7:40:18:99:6b:47:f2:cc:
         53:54:a6:73:a9:68:62:4b:ee:8b:14:66:4b:97:d9:25:d8:89:
         de:bb:14:0c:7a:9b:dc:fb:f8:c7:f2:43:06:14:31:33:fa:61:
         7a:52:a5:bb:de:3e:16:94:49:a1:52:79:1e:93:d8:a0:d2:5f:
         18:c5:ff:d7:8a:94:2d:80:de:d2:29:b6:0a:42:37:61:d2:5c:
         6a:f4:05:cc:9d:07:03:2e:6b:b2:69:23:3d:ef:ab:7b:74:dc:
         52:11:dd:34:44:8d:b3:b7:32:24:48:b5:ce:0c:c5:60:9c:1f:
         3d:32:da:3b:90:fb:da:0b:35:fd:78:78:21:e3:87:b0:28:05:
         98:51:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:01 2026 by rpki-client