Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File:                     -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier:          keO5pN/Ymn26vhc5fRYPN2KmAGmEMLkX/WSyN6k7Ijg=
Subject key identifier:   FE:18:DA:2E:14:42:6D:BB:00:54:08:56:80:46:FA:7B:7C:84:BA:BB
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer:       /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial:       037E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number:          0345
Signing time:             Fri 27 Mar 2026 00:46:18 +0000
Manifest this update:     Fri 27 Mar 2026 00:46:17 +0000
Manifest next update:     Fri 03 Apr 2026 00:46:17 +0000
Files and hashes:         1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: XaaOV6LRddu8dO/oyh0dwTTRz64uEN77eYWa+Uc/uwY=)
                          2: AA314EC8249811EF971CED52C4F9AE02.roa (hash: ahj5aJjebAtMEDGy0A6wCZmN0hH4iUo4uLH+PifJcEk=)
                          3: C79B240C249811EFABD23253C4F9AE02.roa (hash: BsjDl7+sYPrszHo5VW0F7g1UPG2+LbPhMDI5ZaWICRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
                          rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894 (0x37e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
        Validity
            Not Before: Mar 27 00:46:17 2026 GMT
            Not After : Apr  3 00:46:17 2026 GMT
        Subject: CN=69c5d35a-418d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:81:a8:41:9b:20:cc:21:1f:e1:d3:81:e8:9f:
                    c4:c3:03:5d:14:5a:1c:f8:47:e1:5e:03:30:aa:93:
                    00:9d:c4:8c:db:13:07:0d:ea:78:7e:01:57:0a:3e:
                    5e:c7:7b:38:6d:68:a2:96:da:9a:20:6f:70:74:48:
                    3b:1e:bc:38:e6:20:cf:13:af:aa:cc:7d:81:13:12:
                    aa:da:77:ff:91:5a:2d:77:87:85:38:64:e1:bf:a9:
                    a6:80:27:5b:37:ce:d8:7d:46:f2:29:46:b9:8a:09:
                    3d:26:1c:99:a4:c2:e0:3a:33:51:92:0a:ca:6e:d7:
                    f8:37:8f:d9:ef:48:2c:a4:ee:30:40:f8:07:52:22:
                    de:6a:3e:96:e8:45:31:db:c9:b6:e5:8d:d7:8a:43:
                    f2:18:75:5b:39:fb:4d:d7:6c:aa:85:72:ca:69:a2:
                    fd:d4:cc:9b:0a:2b:e9:d2:a5:ae:11:2f:2d:1d:05:
                    80:99:26:66:9d:e3:b8:57:d2:68:e9:43:1c:9f:77:
                    fe:10:32:64:9c:94:07:fd:1e:c2:46:66:c3:32:82:
                    f0:8b:17:b3:fe:7c:c0:3f:56:04:e6:fd:71:49:8a:
                    f2:fd:05:5f:96:6f:e3:85:5e:ae:d9:80:a0:6c:bb:
                    74:a3:27:af:a2:a1:7a:db:64:bd:df:b7:b4:01:aa:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:18:DA:2E:14:42:6D:BB:00:54:08:56:80:46:FA:7B:7C:84:BA:BB
            X509v3 Authority Key Identifier:
                keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1c:7c:55:22:97:84:45:15:a3:16:21:fe:e9:81:92:1b:89:
         95:4e:8f:9b:5c:6d:10:9e:6f:2b:1c:67:4b:1a:7e:a3:fb:b3:
         35:c5:e8:a2:ec:28:cc:e5:80:32:45:d3:8b:a9:16:e9:8d:b1:
         ee:f3:aa:fd:93:5f:20:d2:fc:d9:94:6b:24:13:4f:1e:78:2a:
         c1:c9:67:2e:de:4c:a5:d4:15:95:e1:93:28:9b:23:cb:d5:95:
         0f:dc:49:28:8b:4c:d4:4d:3b:14:c4:b7:32:0f:b5:6c:ec:4a:
         f1:23:a4:c1:2d:5f:87:f5:93:90:45:a8:23:f1:33:51:8c:47:
         b8:c4:20:4b:3d:fc:70:07:03:3b:df:29:62:14:f0:60:97:e3:
         f4:11:a8:12:44:57:2b:4e:5b:2e:72:cb:8a:9e:95:fb:2b:41:
         19:a0:03:3e:86:05:c9:24:6c:72:b3:da:b5:bd:8b:e0:c3:3d:
         20:45:55:7c:39:d4:1d:82:c9:b0:d9:57:dd:8a:47:4d:e6:ba:
         39:8d:a1:c6:67:b4:da:00:fc:2d:43:a6:a3:e1:13:bb:52:b2:
         05:d5:69:a7:a3:b0:41:7a:07:38:49:0c:b0:ba:50:29:c9:42:
         ba:fd:e4:2c:d1:70:17:4a:fe:20:26:ea:ac:5f:b6:ed:75:53:
         4e:15:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:50 2026 by rpki-client