Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
File:                     r2oY2zoHHvGMylvos1Qz31RPD7I.mft (raw, json)
Hash identifier:          tpRLZ5Cbz5ob7Q23CmRI1XA44RJfbKV7BQuUPh+Hk8w=
Subject key identifier:   7E:71:5F:27:FE:6D:5C:6D:F1:FC:45:7A:F0:FE:96:88:9F:26:2C:37
Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
Certificate issuer:       /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Certificate serial:       0C5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
Manifest number:          0C53
Signing time:             Tue 24 Mar 2026 18:31:19 +0000
Manifest this update:     Tue 24 Mar 2026 18:31:19 +0000
Manifest next update:     Tue 31 Mar 2026 18:31:19 +0000
Files and hashes:         1: r2oY2zoHHvGMylvos1Qz31RPD7I.crl (hash: zlLAJyBhzhI1YNqY8bExrtuhnUpCy/hHp3xh9LJHDmI=)
                          2: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (hash: MhK6fjpCgRPkr/iKRfOswI8Vu+Z6RpVv9J3L3B3Ndho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl
                          rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3164 (0xc5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E20E, serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
        Validity
            Not Before: Mar 24 18:31:19 2026 GMT
            Not After : Mar 31 18:31:19 2026 GMT
        Subject: CN=69c2d877-e8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:66:53:85:3e:ad:99:79:b8:61:42:a2:8d:
                    b2:7c:fc:f5:58:20:d7:d6:88:a6:e6:80:21:64:f9:
                    7c:98:43:a5:a0:85:cd:d1:21:6c:d8:8f:35:9a:43:
                    2c:c7:23:b7:6e:e4:36:cf:b4:17:75:88:16:95:99:
                    38:23:53:4c:17:5f:c5:22:53:49:1c:c0:2e:25:aa:
                    90:b8:3d:5e:66:d8:d6:8d:c3:0f:ef:07:46:16:b8:
                    24:a1:2f:8c:ec:c1:12:b1:9c:54:04:81:87:1b:0b:
                    17:d3:f0:aa:58:63:b5:32:fd:f9:2b:06:1c:e5:e6:
                    12:b8:e5:34:21:f6:92:0f:61:84:a5:0f:2a:5c:82:
                    e2:d0:54:e5:4b:0e:7f:bd:bd:56:43:0d:cf:41:cb:
                    c3:7d:75:eb:e2:f3:07:57:66:89:6e:c0:54:9b:68:
                    0b:bc:bb:3c:19:50:4f:98:5d:04:03:5f:95:26:63:
                    38:f5:d1:97:e0:35:c1:87:4d:17:09:92:51:18:32:
                    0f:06:43:80:27:46:fe:95:cb:07:80:2f:e5:c8:08:
                    df:27:c0:d1:43:c8:e0:1f:5c:20:65:39:0b:a3:d4:
                    70:01:15:98:43:06:d4:24:5d:4d:6c:de:e7:f4:55:
                    f2:39:5e:85:78:1b:01:3b:dd:fb:c5:29:96:a5:57:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:71:5F:27:FE:6D:5C:6D:F1:FC:45:7A:F0:FE:96:88:9F:26:2C:37
            X509v3 Authority Key Identifier:
                keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:50:bf:e7:00:d5:7b:59:91:69:7f:e8:74:e8:14:63:1e:1e:
         93:a5:f6:d9:ca:58:9b:ed:22:a2:a8:ca:d3:93:5d:ed:1f:44:
         5f:2e:c2:e9:fa:02:8b:47:fa:20:b5:5a:fc:c2:b6:20:da:d9:
         b7:67:fc:99:aa:3c:d3:1e:62:ad:88:62:b7:08:91:52:79:16:
         13:53:7d:98:93:76:0e:1e:7e:e7:23:51:f7:b1:08:e9:ab:93:
         b0:56:80:00:3b:d8:e3:5c:c2:06:df:54:32:d0:2e:82:0f:d1:
         92:51:a4:4a:fc:b7:2e:c3:8d:4c:fc:15:2c:21:80:87:b2:42:
         bb:36:59:4a:2b:8b:78:18:f7:8d:23:c0:b8:91:ae:3e:aa:4c:
         5c:e0:2b:03:bc:31:9a:7b:0e:0a:23:78:3e:d6:3f:6f:65:87:
         f2:c8:7f:dd:83:76:e8:f2:0f:87:08:f1:d8:7d:f8:a7:7d:e4:
         5c:43:9a:f1:87:83:fa:38:8d:26:2e:85:e0:5e:d8:70:51:f9:
         58:65:8f:aa:8c:d0:a1:31:15:9f:a9:cf:b8:6d:d4:d4:4a:42:
         d1:cc:fd:b5:30:73:bb:49:dd:83:c7:9a:21:af:a5:9a:46:df:
         75:1c:02:24:bd:8b:a9:a2:2e:e0:e1:d1:c1:e8:24:88:63:a3:
         63:3c:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:47 2026 by rpki-client