Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
File:                     dQWoa19PqlBUPSSMbwhUxQWu3A8.mft (raw, json)
Hash identifier:          oDpZA7py7fzER7EsyJ30X7ayTZFwe/+DciG7bi5SN9o=
Subject key identifier:   9D:B0:10:F6:E4:24:D6:33:EA:A1:E9:83:22:11:D8:F0:65:05:5D:77
Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F
Certificate issuer:       /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
Certificate serial:       0BE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
Manifest number:          0BCD
Signing time:             Tue 24 Mar 2026 18:47:47 +0000
Manifest this update:     Tue 24 Mar 2026 18:47:46 +0000
Manifest next update:     Tue 31 Mar 2026 18:47:46 +0000
Files and hashes:         1: dQWoa19PqlBUPSSMbwhUxQWu3A8.crl (hash: lgJdbYjGof69K2SABhxxyvRhC1+4+B4wbVqqQ05IIjk=)
                          2: A77121520E7711F1B88700272A3D8C67.roa (hash: 6f2MZabIV9/41LXq6L3lOj/k/ZzxiNqapWZIuUa5bRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl
                          rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3042 (0xbe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D0E6, serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
        Validity
            Not Before: Mar 24 18:47:46 2026 GMT
            Not After : Mar 31 18:47:46 2026 GMT
        Subject: CN=69c2dc53-c328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:6f:4f:86:9f:07:7d:ef:79:05:da:76:96:
                    e0:90:17:05:04:52:b4:95:71:99:82:e4:43:fa:d9:
                    29:b5:3f:7f:f9:3c:92:0a:91:9c:4a:ce:d8:de:bf:
                    3e:d7:0d:5e:27:56:44:19:b4:93:46:44:85:83:bc:
                    c3:f4:a1:a3:db:20:be:95:49:5e:b5:ee:dc:d9:fd:
                    a1:b9:c8:00:48:87:54:e7:42:c9:31:c6:d3:67:30:
                    3e:c0:1e:52:dc:0c:fd:bf:2b:c2:e3:57:0b:49:bb:
                    7e:b0:5e:9e:0f:ff:5f:84:6b:3b:d9:3f:67:3d:4a:
                    d8:05:b8:ef:06:bd:64:f5:8c:fb:d0:0e:0f:8a:a2:
                    ec:f8:95:14:0f:d1:74:c5:4b:54:5d:c1:41:0f:16:
                    99:56:e5:05:99:58:10:e9:73:b2:ac:8d:d7:61:f1:
                    36:d2:0f:8d:92:3f:8e:4b:d9:aa:78:33:e3:ff:84:
                    5c:4d:e3:72:c5:9c:0d:e8:cc:60:f7:b3:dc:22:4d:
                    64:4d:f2:46:a9:77:b5:4a:aa:71:8b:38:96:0d:71:
                    cf:0d:59:16:83:f1:65:eb:be:2c:fa:5f:b2:6e:70:
                    f0:87:23:61:da:d7:31:a6:93:d3:29:f0:a6:17:73:
                    6a:40:be:fb:35:70:3c:6b:77:98:f5:9b:b7:da:2f:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B0:10:F6:E4:24:D6:33:EA:A1:E9:83:22:11:D8:F0:65:05:5D:77
            X509v3 Authority Key Identifier:
                keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9f:83:61:8c:4a:34:20:8d:59:c5:6a:75:e9:54:62:bd:0e:
         e3:8c:fa:d2:94:ea:bf:82:a3:31:7b:b1:e3:44:4d:d6:7a:53:
         36:e2:d4:1c:0a:7f:85:0c:9d:ff:28:5f:90:de:38:92:d5:18:
         c9:22:f2:a3:f5:7d:e5:30:f6:0b:cc:77:db:52:3b:fb:da:ed:
         9a:28:5a:f3:51:c8:c8:a8:b0:3f:6e:c9:b2:65:ec:37:07:23:
         56:28:53:c7:8d:53:2a:ab:b4:44:de:5c:80:fa:9b:03:28:61:
         a2:4d:48:11:44:2c:7f:95:5e:76:59:6e:61:72:c7:2c:c9:d5:
         a9:ea:60:96:3a:4b:56:38:24:9d:b0:54:e2:bf:13:be:70:f8:
         55:1a:8f:c2:af:d4:28:cd:c3:67:2e:69:1c:ba:54:5c:e9:35:
         83:7b:40:2b:c9:c6:6a:61:71:fe:48:18:8f:43:c2:d5:52:69:
         35:db:fb:65:2c:e5:b7:a5:55:e4:6c:da:5d:2c:f5:b9:94:c8:
         0e:3f:b9:bf:4b:e3:f2:f1:8b:c2:d7:0e:ca:cf:4b:42:36:2e:
         fa:c3:fe:5c:3c:5d:33:6c:20:00:08:41:a9:45:de:76:bc:09:
         2a:21:99:a2:56:bb:27:90:12:bd:c0:eb:c9:15:8a:37:0d:3b:
         93:0b:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:06:36 2026 by rpki-client