Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
File:                     6DpZuIHOHlc10a3c2LrgXlO4U9A.mft (raw, json)
Hash identifier:          Tg55c6dKEumX7SLHmNqcVIVfmVPPt8CCoS8pt86XlX8=
Subject key identifier:   02:BE:CC:E1:74:E1:E2:F3:D8:FD:6C:08:A2:08:05:F2:8A:15:4B:EB
Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0
Certificate issuer:       /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
Certificate serial:       3568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
Manifest number:          353F
Signing time:             Tue 24 Mar 2026 14:50:03 +0000
Manifest this update:     Tue 24 Mar 2026 14:50:03 +0000
Manifest next update:     Tue 31 Mar 2026 14:50:03 +0000
Files and hashes:         1: 6DpZuIHOHlc10a3c2LrgXlO4U9A.crl (hash: aEDUpb3x/dnihnX5ruMqu0C9PoHivOF7gbAd6NLkci8=)
                          2: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (hash: O3BxGtjSoAOdF49b+yAM0jtpp0WQxG4EaYJi9ABC0kc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl
                          rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13672 (0x3568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3BB1, serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
        Validity
            Not Before: Mar 24 14:50:03 2026 GMT
            Not After : Mar 31 14:50:03 2026 GMT
        Subject: CN=69c2a49b-df19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:ba:3a:bb:99:f4:64:55:86:0c:a0:9b:90:
                    90:aa:14:65:6b:0a:2c:c3:1f:0a:cd:27:37:82:7b:
                    d1:72:e2:36:fe:46:20:2d:ef:28:a3:95:d3:08:0b:
                    13:9c:bc:63:30:f1:91:99:86:57:7a:23:32:90:c2:
                    61:23:c0:8e:48:60:70:c6:6b:6a:37:8b:85:49:ac:
                    9e:38:e5:cc:98:90:29:4d:fd:96:6d:4d:9f:56:99:
                    cf:f3:c4:56:9a:bd:2b:af:73:f4:c8:ee:2b:34:36:
                    d0:6d:db:fb:11:5f:92:88:0a:97:1a:49:89:3e:9e:
                    21:39:69:87:8d:96:9b:12:77:29:98:22:ea:00:e8:
                    e1:65:3f:a3:19:b8:f2:92:db:33:c7:08:fe:d9:4c:
                    6f:4e:06:05:d9:16:6e:9c:93:55:dc:8c:03:72:0a:
                    c7:96:f5:c2:0c:29:ca:1f:1d:10:96:ff:10:40:c6:
                    99:7c:0f:9d:07:96:aa:96:eb:e7:2d:f1:56:d9:e5:
                    6c:60:e7:8d:54:08:70:21:3b:08:1d:f2:88:84:89:
                    d9:f5:e3:78:4e:3c:dc:81:55:08:7f:c0:f2:f4:67:
                    a2:d4:6d:cd:83:c1:32:1d:71:1d:bd:cf:83:ef:30:
                    53:97:fa:59:ec:25:44:cd:38:9c:bf:43:60:1c:3b:
                    1d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BE:CC:E1:74:E1:E2:F3:D8:FD:6C:08:A2:08:05:F2:8A:15:4B:EB
            X509v3 Authority Key Identifier:
                keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:19:e2:3e:f0:9b:35:96:14:48:fe:b8:a9:06:62:11:84:f7:
         dd:fe:f1:83:b5:1b:f6:1e:39:3e:9a:fd:b7:4d:a4:e1:3d:b1:
         46:d7:aa:4f:bf:3f:6d:1a:3e:77:99:3b:5d:b9:d9:d2:77:a8:
         94:33:b8:bd:9d:0b:3f:e8:54:b9:2a:86:46:2e:e0:12:f7:8d:
         a0:36:71:03:93:27:c5:2b:27:88:39:76:cb:b5:cc:59:84:b0:
         a8:38:d3:20:79:7b:b7:62:72:2f:8d:41:31:1e:c2:b8:da:9e:
         e9:44:d3:48:bf:72:90:fd:b5:b8:2f:35:cf:92:ac:00:5d:e1:
         8d:72:18:fc:e4:1f:06:0e:b1:b9:33:6a:20:1d:95:a0:47:f2:
         9e:a4:15:a9:c6:04:10:47:d6:ce:f9:2a:96:ea:36:4c:38:83:
         32:b7:da:98:39:a0:19:4b:7c:73:83:20:b3:db:67:0b:ff:e5:
         8e:8a:f4:67:18:19:10:6c:b7:a9:94:0d:a4:9e:cb:ff:22:9a:
         00:e5:d3:e1:e0:76:51:8d:64:14:ad:89:1c:e2:27:e8:b8:a9:
         46:5d:ae:45:c3:56:71:97:9a:42:07:f3:2b:0b:e1:b9:51:21:
         15:ec:29:77:e2:9a:6b:47:0f:90:ab:04:1a:f5:b1:a5:99:5f:
         81:fb:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:18 2026 by rpki-client