Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File:                     D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier:          ieYUbv4/4xC0XXPLqaotzvFAa1foPbIRZ6SASaKKlZI=
Subject key identifier:   15:CE:8C:F4:0F:9E:47:CA:A8:FD:4A:BB:49:60:AB:02:2B:E7:FC:53
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       0223
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number:          0201
Signing time:             Wed 25 Mar 2026 02:47:15 +0000
Manifest this update:     Wed 25 Mar 2026 02:47:15 +0000
Manifest next update:     Wed 01 Apr 2026 02:47:15 +0000
Files and hashes:         1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: B31OxGzmD7YAadqxFvGhaHdT90pC+BhxpmD3CuSe5Ts=)
                          2: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: 4BghnC9zlIFOkenQJ/GFUUF/OmlIg8plx0INfrm7Jrc=)
                          3: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: GGi4WKr5J/co8rUxY6XhZiQWpGv4cgJGL7H5da+yC00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Mar 25 02:47:15 2026 GMT
            Not After : Apr  1 02:47:15 2026 GMT
        Subject: CN=69c34cb3-4d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:10:54:2c:98:bf:ea:91:0f:d4:03:04:46:81:
                    68:97:4c:45:90:52:ac:a2:49:f9:2e:88:b9:0a:15:
                    de:d6:2a:65:42:81:2a:06:45:be:22:dc:4f:a6:4f:
                    8f:bb:80:9e:7b:af:3d:25:4e:b9:ba:9a:68:4b:dc:
                    2a:df:1e:e5:a3:e7:fb:a9:6c:1a:9e:3e:77:42:6e:
                    c7:1a:81:30:b3:e8:10:bb:ed:a3:20:5b:a8:87:c4:
                    be:47:92:9a:66:1d:9f:ef:1e:a3:38:b5:9a:3a:a9:
                    09:93:61:34:d6:c0:24:79:33:d9:7a:22:28:5e:20:
                    84:c6:3a:ed:a0:80:ed:9e:19:ec:04:63:9b:b0:e0:
                    18:6c:59:0c:07:08:60:28:c7:66:c9:ae:93:c2:38:
                    83:e7:1d:69:71:28:2f:c6:f6:cb:87:65:4f:97:6a:
                    78:ff:ca:86:e2:78:2c:57:8a:a2:60:6d:1c:f8:72:
                    ee:11:88:03:e2:2b:31:43:92:67:63:54:86:28:d4:
                    09:07:cc:31:c8:bd:9f:da:4a:17:6e:42:d3:33:fd:
                    13:e9:c0:1c:a4:a9:e2:de:3a:8c:27:79:4a:bd:ce:
                    92:a1:5c:ba:f6:1a:d3:5d:88:1e:b3:59:cc:e8:ef:
                    0e:80:de:7a:a4:6b:24:71:57:b8:84:91:5b:58:d2:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CE:8C:F4:0F:9E:47:CA:A8:FD:4A:BB:49:60:AB:02:2B:E7:FC:53
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:62:22:07:11:e3:5f:95:0a:a9:16:87:6e:16:63:30:f1:44:
         af:70:c4:b8:e8:9c:bb:f8:cd:fe:0c:9b:d5:b5:e8:df:af:c1:
         34:c2:33:b2:3a:00:a4:27:92:31:27:f7:16:13:58:3b:a4:bb:
         d3:51:0b:0d:fb:68:13:95:1e:42:b1:bd:b9:f8:10:0a:7f:d2:
         d3:63:c1:4c:1b:ac:e7:0d:28:ed:68:65:26:73:08:b1:86:9d:
         19:05:0a:61:37:55:2b:70:55:a8:b6:b0:78:90:ab:c1:92:45:
         4d:0d:fc:c4:c1:a7:ee:f6:ac:1f:b2:43:40:10:79:92:a7:9a:
         28:5a:3e:4c:52:20:bf:8e:9d:ff:f7:bd:56:ef:56:b1:dc:76:
         f2:65:c1:85:cf:73:90:06:04:c8:92:b9:dc:97:1e:1f:2d:83:
         60:88:83:61:b7:95:14:7a:b5:7c:08:c4:b8:f4:87:e7:04:ee:
         8e:37:2d:21:5d:6f:ba:4a:eb:e2:d6:2c:41:f5:fb:97:07:36:
         7d:e3:43:71:30:36:9d:bc:a8:f3:9e:77:02:c1:9e:4c:8c:7d:
         b6:c5:db:95:05:82:4b:0a:24:14:6c:18:05:28:4f:50:7f:70:
         6e:ec:f1:3a:93:28:81:93:b5:a4:21:b2:22:05:7f:3e:5d:cc:
         ea:78:25:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:53 2026 by rpki-client