Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File:                     ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier:          BvgYGLUP60icDoYJR0iVS8C6EgWcOq/Yykm8I82uUTo=
Subject key identifier:   A0:24:12:BA:94:D2:CC:CF:44:76:AA:CA:E4:13:CD:0D:EF:23:1C:59
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer:       /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial:       0A2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number:          0A21
Signing time:             Tue 24 Mar 2026 19:34:56 +0000
Manifest this update:     Tue 24 Mar 2026 19:34:55 +0000
Manifest next update:     Tue 31 Mar 2026 19:34:55 +0000
Files and hashes:         1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: nmin1n2qRRlQbAh175XNeRVVb9nwipWBUhCnFfnhiKE=)
                          2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
                          rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2605 (0xa2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
        Validity
            Not Before: Mar 24 19:34:55 2026 GMT
            Not After : Mar 31 19:34:55 2026 GMT
        Subject: CN=69c2e760-4779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:3b:71:bd:5a:a9:52:9d:68:1b:43:21:27:
                    f1:6a:cb:a9:5b:28:6d:72:f4:c3:1c:37:5f:39:35:
                    47:a5:86:1d:fe:0e:ad:7c:78:28:b5:46:51:82:f3:
                    52:11:fc:6d:06:75:71:8e:62:99:1c:72:6a:bd:c0:
                    1e:f3:ed:59:d2:7b:cf:bc:83:f6:9f:0a:5e:51:67:
                    16:59:09:93:f5:49:7a:55:8f:38:8b:41:1f:68:f1:
                    04:ad:6b:0b:7b:aa:45:54:8e:b3:c7:b3:2c:16:a3:
                    86:26:bf:e7:d5:88:2b:65:35:5b:2a:4c:5b:fe:6f:
                    9f:20:ba:e0:51:78:60:2b:05:91:4f:2d:60:17:74:
                    f7:dd:fd:81:84:38:8e:e2:59:01:25:ad:3d:82:c8:
                    0a:93:57:f6:f3:f4:f5:e9:ed:29:de:df:15:a5:76:
                    16:4f:b1:a5:5b:65:e6:09:98:1b:08:8f:ce:7c:f7:
                    a2:5e:b3:93:7c:8c:7c:c0:4b:46:a6:bf:58:73:16:
                    b8:7c:dd:79:72:c2:f6:bf:eb:10:9a:c0:2d:36:ef:
                    77:92:33:3d:db:fc:5e:cb:32:e7:b5:de:c3:cb:49:
                    16:a7:19:ee:75:91:91:71:86:7d:10:77:db:1a:9d:
                    e5:a9:f3:93:70:b9:85:17:5f:a3:48:f5:dc:a8:04:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:24:12:BA:94:D2:CC:CF:44:76:AA:CA:E4:13:CD:0D:EF:23:1C:59
            X509v3 Authority Key Identifier:
                keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4f:7a:d5:e8:03:25:a0:33:13:60:e7:7c:91:86:ff:e1:05:
         94:fc:3c:96:ab:51:fd:5a:2a:75:a8:f9:1a:17:21:fb:40:80:
         98:a6:88:22:3c:65:ba:9d:d9:2f:88:3e:b9:fe:40:c8:c0:c4:
         2d:77:3a:b2:f4:e2:56:fc:1a:5b:13:21:31:55:d0:a3:31:a0:
         19:08:c6:64:b1:6d:e8:71:cb:88:08:84:60:72:47:fd:9b:fc:
         c0:9a:14:d8:71:f8:e6:15:10:f7:c4:ab:28:ee:4f:63:95:8d:
         96:3b:00:36:b5:72:4e:a2:46:ba:01:bc:d0:f1:11:02:9c:1c:
         8c:8f:a7:73:be:81:ea:4d:4c:f8:98:84:21:fb:3f:b1:16:bf:
         32:da:aa:3f:c8:5b:3a:20:d4:da:f2:70:37:d5:e8:6d:ff:ea:
         7b:83:75:74:9c:37:6c:fd:fa:55:77:d3:62:4c:f9:f2:4b:38:
         df:83:34:7e:3b:ec:4f:78:e8:66:26:31:26:11:30:7f:e2:18:
         2e:34:aa:ea:6c:fb:f6:67:92:d7:b5:79:22:96:c8:6c:dc:cf:
         71:93:7a:4f:19:d7:b8:08:3c:5f:a3:c5:3d:45:71:1d:a9:94:
         27:1f:10:d9:7a:e4:75:37:c9:05:6d:7b:af:36:90:2b:38:90:
         1a:29:b6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:34 2026 by rpki-client