Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
File:                     CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json)
Hash identifier:          B9YAaQULAFK7PkJ5NbI1/NVKDvmhWaE8d3Uwu69HVm8=
Subject key identifier:   35:1A:FC:D6:50:7F:13:37:64:B7:F2:C7:22:86:AD:39:F7:F9:BC:E5
Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99
Certificate issuer:       /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
Manifest number:          60
Signing time:             Wed 25 Mar 2026 07:14:33 +0000
Manifest this update:     Wed 25 Mar 2026 07:14:32 +0000
Manifest next update:     Wed 01 Apr 2026 07:14:32 +0000
Files and hashes:         1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: SCN5/XzQIkUTkkeciXdIHVcLcDSNmoGIQCeSWR+cB5o=)
                          2: EC6B1EDAC3F811F0BE50C87AC4F9AE02.roa (hash: o62XZo2Qz1zImJWSvpxTK0mWq5l9UluAleNSitVqKg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
        Validity
            Not Before: Mar 25 07:14:32 2026 GMT
            Not After : Apr  1 07:14:32 2026 GMT
        Subject: CN=69c38b59-6ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:96:ad:1e:8c:00:3d:4a:c7:12:18:13:bc:
                    b4:f3:5b:fa:6e:75:2e:d0:fc:de:6f:ad:47:11:7b:
                    b4:cd:ff:56:94:d6:99:1c:c8:7f:bc:b0:b9:d1:e1:
                    5f:f5:b4:6e:ab:7a:26:10:a3:4a:05:c1:be:07:90:
                    9f:a3:13:78:98:53:d8:e4:ec:ca:83:61:a5:ae:47:
                    51:3a:62:e5:e7:74:0b:a1:d5:1a:e9:9c:a3:30:07:
                    ca:37:c0:d1:fd:fc:88:e7:1f:9e:73:0c:b9:9e:cc:
                    83:15:c3:b1:f9:26:93:86:db:a4:6f:b2:b5:67:57:
                    47:08:ee:63:25:05:86:35:70:ba:a4:7b:df:48:0b:
                    34:38:3b:c1:9f:d3:d8:53:83:d8:4f:ba:28:93:51:
                    05:ca:12:c8:7a:ca:39:49:36:6c:1c:f3:9b:8a:55:
                    a9:77:5f:b0:f7:2e:72:1c:d1:a2:6d:92:7f:e5:fa:
                    74:f5:fb:e0:54:fc:64:14:10:af:b3:f9:45:43:0e:
                    4f:e5:cd:b8:14:c6:8e:e7:0c:30:af:f5:f1:fd:76:
                    a2:d1:f4:f4:f0:f7:47:ba:40:c9:b1:0a:5f:4b:e5:
                    0e:d9:de:a8:74:6d:ca:3a:e9:23:9d:b7:f5:6f:ba:
                    30:75:ea:71:d6:8b:2f:04:82:79:0d:d0:4a:a9:ba:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:FC:D6:50:7F:13:37:64:B7:F2:C7:22:86:AD:39:F7:F9:BC:E5
            X509v3 Authority Key Identifier:
                keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:48:82:eb:f3:b6:87:ac:a1:ec:b3:75:20:ba:7e:3b:ce:5a:
         08:8c:bc:fe:55:88:67:77:fc:1b:ec:3f:96:4c:76:8a:f4:c7:
         56:1b:9c:7c:99:5c:39:e5:22:dc:0d:0d:cc:db:30:e4:41:bb:
         9f:6e:12:f2:45:71:66:30:c8:7e:63:22:9b:b6:34:cf:30:d4:
         8d:a0:16:37:96:26:f3:48:cd:e9:b5:8d:bd:07:12:93:8c:24:
         ae:c9:4e:3c:e8:6b:7b:67:5c:99:c1:8e:9b:34:a7:eb:0e:73:
         18:1a:f1:ec:d3:af:51:a2:83:58:05:52:7b:45:d3:30:9b:80:
         46:1a:61:d6:87:10:c4:63:43:95:40:ae:e4:ef:fe:42:2b:f4:
         ce:a9:a3:01:28:4d:c0:8a:f9:ba:8b:f9:8a:cb:16:db:bc:f7:
         00:d5:c5:c7:15:25:e6:3b:ae:b0:57:a6:34:2a:6b:61:b2:f0:
         7a:f5:d4:02:ce:a9:e3:37:f7:7e:23:0a:62:ad:a6:38:59:b1:
         19:79:45:2a:bb:4d:f4:6c:20:ee:04:03:90:9a:75:67:70:86:
         f2:74:25:e8:0b:5d:d4:74:ec:46:75:31:8b:cf:11:52:14:4a:
         45:1a:7f:62:d4:69:95:13:52:8a:b8:44:64:0d:f7:d4:1a:c6:
         af:00:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:51 2026 by rpki-client