Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
File:                     bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft (raw, json)
Hash identifier:          HX+Wx14BLWSbuq9/meAngPNvig+dXH8mVBECrGIAZ4s=
Subject key identifier:   E4:6B:F2:1B:23:27:0F:EA:44:09:74:DE:D3:0F:8E:BE:32:86:31:CA
Authority key identifier: 6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
Certificate issuer:       /CN=A919243F/serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
Manifest number:          4D
Signing time:             Wed 25 Mar 2026 07:27:10 +0000
Manifest this update:     Wed 25 Mar 2026 07:27:09 +0000
Manifest next update:     Wed 01 Apr 2026 07:27:09 +0000
Files and hashes:         1: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl (hash: tMY6Fvk1B9Hce7CGBYxPXVK1Lh1N2raE8kjM7PgVAc4=)
                          2: 384B24AAB65511F0AE39E37FC4F9AE02.roa (hash: 4gEMioogyqtQCIBsWxjQrNaqNtpOHByAYfSBJ8goR+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl
                          rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919243F, serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
        Validity
            Not Before: Mar 25 07:27:09 2026 GMT
            Not After : Apr  1 07:27:09 2026 GMT
        Subject: CN=69c38e4e-30a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:f0:fb:33:9b:57:34:7d:a6:be:0a:bc:e1:
                    17:3f:70:bb:97:10:a3:e0:5d:42:6f:a7:b8:a0:76:
                    5b:3b:1d:7d:50:47:96:4f:3f:77:12:7e:e5:51:fd:
                    ae:71:31:07:e8:e0:16:70:a9:c4:c9:fd:f6:7f:d8:
                    20:08:54:31:3e:5d:b1:01:87:df:01:90:27:3f:3e:
                    4d:59:e7:8a:6d:41:c4:26:66:cd:31:16:fd:52:4e:
                    84:f1:e3:96:03:0e:32:d7:4d:cd:a2:52:59:58:a3:
                    75:37:53:bd:d2:b9:f0:75:24:d2:47:eb:4c:5f:af:
                    88:b7:06:dd:df:b8:44:a4:03:fc:9f:83:ed:c8:30:
                    f7:24:64:1f:ad:78:e9:73:29:27:de:ad:89:52:f5:
                    79:37:1c:d1:a0:6f:eb:83:b6:cc:72:23:4e:00:69:
                    de:de:50:dc:d4:d1:d6:1c:93:01:97:e3:cd:d0:bc:
                    d3:c6:35:da:3b:f9:63:cf:6a:56:40:a2:e3:41:26:
                    ac:92:69:6a:94:3b:11:ec:f4:ff:e4:84:a0:24:dd:
                    f1:a3:c4:fe:e8:2d:c3:e0:07:65:17:e3:ee:c6:18:
                    11:8d:66:08:33:c2:ea:13:f4:ca:92:41:39:4e:45:
                    00:f5:c4:ba:39:57:6e:2a:a2:cd:e2:79:a0:d7:41:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:F2:1B:23:27:0F:EA:44:09:74:DE:D3:0F:8E:BE:32:86:31:CA
            X509v3 Authority Key Identifier:
                keyid:6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ac:90:9a:5f:c7:e7:96:16:ee:59:e4:36:d5:2c:ac:84:28:
         ac:9f:1f:7b:61:96:a0:84:18:96:25:18:53:d1:ad:88:18:73:
         66:b8:d7:95:f2:19:31:79:e7:4f:ff:c9:91:f9:8e:c9:4e:d2:
         59:a7:b2:b3:63:0c:24:bf:9d:19:68:f6:e1:43:2a:42:8e:45:
         31:81:10:d5:b5:d3:b9:c7:36:22:b9:09:94:24:fd:71:6c:c3:
         de:20:d8:6c:34:a0:80:a6:11:a9:c3:28:3a:fc:76:78:49:e1:
         c4:6c:b1:7d:b5:02:f3:9d:ba:65:ca:db:0c:1f:73:1b:d3:a9:
         a4:12:61:a3:0d:56:07:4b:bd:be:b4:ac:f8:fb:12:60:61:0f:
         65:70:dd:82:ce:08:68:09:13:31:40:9c:62:98:df:c2:28:fa:
         38:bc:66:2c:b1:01:81:96:cc:04:d7:29:b9:a0:00:c3:1f:38:
         f4:89:26:92:1c:5e:c2:de:4a:a2:df:98:97:af:19:5f:21:01:
         a9:35:41:40:e5:28:e9:01:db:75:d8:a4:e7:db:c8:05:df:e3:
         73:54:ee:c2:fb:71:a9:c9:b6:70:ae:bb:da:d9:07:8e:be:1b:
         35:72:19:8b:dc:6e:fd:51:13:13:73:11:fd:e8:43:41:b2:f7:
         f6:92:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:07 2026 by rpki-client