Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File:                     3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier:          IRj4vhq0vUjYugzDiVjKZm90lVYBlJOeUKq1idckto8=
Subject key identifier:   46:CE:73:52:80:F9:84:0B:21:D7:42:F8:8A:5B:AE:06:18:C9:1C:8D
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer:       /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial:       0BC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number:          0BB1
Signing time:             Tue 24 Mar 2026 18:49:42 +0000
Manifest this update:     Tue 24 Mar 2026 18:49:42 +0000
Manifest next update:     Tue 31 Mar 2026 18:49:42 +0000
Files and hashes:         1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: muA2bjR45zZiZGuwkAMc3dBEhZ/IYz078z8I7At0Vdc=)
                          2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: ygGwfR0Fy0GYr4xDIiSFtgwRtiLp/q0solcHFJQ7qpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
                          rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3009 (0xbc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
        Validity
            Not Before: Mar 24 18:49:42 2026 GMT
            Not After : Mar 31 18:49:42 2026 GMT
        Subject: CN=69c2dcc6-4d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:a9:8b:c9:72:49:02:81:1b:c7:1b:3e:20:
                    f8:e6:e7:b7:96:71:cb:fc:34:e3:f7:8d:a4:8d:8d:
                    e6:7e:02:7e:67:10:cc:c3:bc:c2:68:30:23:e8:e9:
                    5f:7e:02:ba:f5:9f:69:93:ce:59:1f:fe:d5:e2:79:
                    cb:9a:d9:5a:aa:cf:0f:60:e9:48:8d:e2:82:e1:30:
                    17:4f:6f:f6:9e:00:49:a3:2b:27:bb:77:68:29:fc:
                    d2:f3:e9:49:14:c3:61:5e:f4:c5:89:02:7f:8e:be:
                    6c:2d:bf:4f:4f:48:7e:3c:c3:8c:d7:fe:bf:25:f0:
                    9e:82:4c:84:50:eb:13:8b:61:6a:03:86:92:22:03:
                    e7:16:0a:7c:8d:14:51:4f:8c:f2:e0:fe:a6:78:7b:
                    ce:83:6e:92:ca:eb:9c:5b:22:16:70:cb:74:e7:69:
                    01:fb:2c:71:9e:3f:e8:02:20:62:5e:91:38:b8:b1:
                    13:f6:6a:1e:84:0a:a4:43:d4:e9:c3:fd:c9:cc:cf:
                    3b:d1:e0:13:37:d2:26:ca:ea:e6:03:98:eb:86:30:
                    f8:7c:f7:39:55:52:2a:f5:d8:70:49:61:e5:c8:88:
                    09:80:a6:78:aa:87:11:6e:32:ea:2c:cf:32:3b:4a:
                    86:4b:19:a6:d2:28:ad:45:2e:44:1a:2f:31:cc:9e:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CE:73:52:80:F9:84:0B:21:D7:42:F8:8A:5B:AE:06:18:C9:1C:8D
            X509v3 Authority Key Identifier:
                keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b6:90:34:88:aa:3e:6b:ed:97:f1:90:99:dc:6d:87:17:28:
         eb:42:46:11:e8:fc:6e:3f:98:f0:2e:9e:6e:82:77:5f:19:70:
         6b:9e:46:b2:85:c3:c3:01:85:2b:9e:6b:b9:58:f2:29:fd:48:
         32:05:92:57:47:a1:1e:72:4d:4a:38:30:c1:74:ce:cb:2d:ba:
         d4:40:58:72:42:ef:c7:86:ec:d9:6e:ec:33:3a:88:db:ff:0a:
         88:ca:c0:08:20:f0:46:f6:bb:66:03:c2:e9:b3:84:14:5d:7b:
         1a:45:40:84:3b:fc:66:dc:5d:54:53:89:d4:ce:09:8b:68:f6:
         08:ec:97:ca:19:59:b6:50:3f:0d:db:30:93:43:25:28:b5:39:
         5f:57:ed:35:35:49:e9:9a:de:0f:71:2b:dd:51:9d:37:5f:d6:
         c4:0e:e8:8e:03:8b:cf:3c:ef:e8:8a:0c:96:d5:f7:4c:e8:ed:
         2c:8b:86:f9:a5:40:9e:8a:af:6f:37:2d:ae:aa:93:e2:ed:07:
         1d:f7:72:2d:91:f3:9d:7c:36:d8:22:5c:1f:48:7c:ea:c2:f9:
         7a:4c:e3:c1:32:16:18:91:89:a8:ab:06:fb:98:cf:4a:a5:02:
         77:5d:2b:9c:02:e6:b8:7a:bf:e8:1e:7c:56:66:49:b2:7a:12:
         96:95:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:11 2026 by rpki-client