Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
File:                     gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json)
Hash identifier:          uapPqrDwPkZLSByoXUALT+CdFS43vFrbUWvhwSSDfYs=
Subject key identifier:   2D:BA:C5:3F:B0:FE:49:D2:E1:98:DC:4F:18:04:3A:1A:ED:14:C2:4C
Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
Certificate issuer:       /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
Manifest number:          01BD
Signing time:             Wed 25 Mar 2026 03:06:31 +0000
Manifest this update:     Wed 25 Mar 2026 03:06:31 +0000
Manifest next update:     Wed 01 Apr 2026 03:06:31 +0000
Files and hashes:         1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: wJikm3BAHapifr9V9J+WrPcNPE2I78vx6yrDuQ0fwvY=)
                          2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: EEOuLVOFGIUAdOuI2tNMq9b7RGo51bkfuVm6Dgdj9UY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
                          rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE
        Validity
            Not Before: Mar 25 03:06:31 2026 GMT
            Not After : Apr  1 03:06:31 2026 GMT
        Subject: CN=69c35137-a25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:9e:f0:3d:1f:fb:b5:00:da:0e:ba:15:6a:
                    18:85:52:71:53:f0:f6:c0:36:73:2a:50:f4:5f:29:
                    5e:bf:b8:a2:77:7b:f6:45:5a:45:73:b5:fd:70:0a:
                    d6:78:fa:f4:ce:f2:96:1b:e4:b5:ed:c2:36:d0:3f:
                    c7:70:f6:d7:44:7f:a0:55:26:eb:ff:bd:7f:60:dc:
                    76:bf:9d:16:c6:4e:d6:00:16:48:76:8e:87:29:c3:
                    6d:07:ef:27:c9:95:ce:0e:f7:7b:cd:7b:a0:62:6c:
                    14:58:4c:21:4d:82:0a:fb:55:e0:f4:7b:ff:20:19:
                    17:cf:89:83:3b:bc:32:92:e4:0e:0c:0b:8e:91:b2:
                    b9:d5:b2:52:92:63:2b:1b:06:3d:7e:2e:a2:1e:78:
                    7e:1c:64:59:5e:cd:62:ec:43:17:eb:7e:a0:53:d3:
                    c7:95:ba:ab:57:f6:a9:f7:62:e8:9a:bc:98:e8:d9:
                    5a:f7:fa:29:fc:aa:fc:66:4d:af:97:06:a3:ce:27:
                    fa:f7:34:96:e1:17:c3:d6:f1:37:4e:91:3f:05:fd:
                    be:fa:2b:92:44:8b:63:48:6b:63:1f:63:05:93:fd:
                    df:7d:fe:c8:3d:95:00:5e:82:62:79:47:c9:cd:1f:
                    cc:c2:8b:ee:a3:9f:f0:9e:a6:98:76:c8:1b:04:95:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BA:C5:3F:B0:FE:49:D2:E1:98:DC:4F:18:04:3A:1A:ED:14:C2:4C
            X509v3 Authority Key Identifier:
                keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:49:00:43:e8:20:6f:34:66:85:89:22:75:4b:28:e6:fd:2f:
         b9:3e:fb:00:4e:8d:25:a4:04:6f:8d:ee:ce:74:39:64:58:bc:
         a2:d4:57:3f:d5:94:5c:e9:a8:00:d1:38:9b:29:49:12:a9:8f:
         92:8a:d1:1c:eb:5e:b2:36:37:84:d7:62:0d:f1:17:7d:d7:fa:
         96:6e:c7:55:72:d7:f8:ca:1f:63:e9:37:ca:a9:21:c7:19:d4:
         cf:d5:53:fc:4a:17:f1:23:ee:5b:1f:3a:09:55:21:f7:fb:e5:
         a0:a0:e2:0f:3c:71:da:2f:a8:8c:39:23:4e:b7:e0:6e:3a:b7:
         94:8c:ac:65:50:22:a7:0b:e4:c8:a7:ac:95:1d:19:62:59:8f:
         95:0f:b7:83:96:64:dc:85:9f:4f:32:e8:7b:51:c6:da:19:52:
         d6:84:6c:81:de:ff:14:67:d8:21:e0:a7:02:f0:63:f0:44:80:
         07:d2:9f:2d:ad:7b:13:8c:e0:a9:a8:95:98:5c:8a:ca:41:2c:
         2f:23:28:57:f4:9f:dd:eb:dd:30:28:d0:82:eb:3f:95:af:fc:
         88:ee:da:97:6c:49:7a:3f:a9:97:d9:f6:aa:a1:80:e7:4d:c8:
         e8:f0:02:e5:42:18:89:ee:c6:a4:ed:c2:0b:42:2a:0f:6b:a1:
         7f:8a:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:19 2026 by rpki-client