Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
File:                     i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json)
Hash identifier:          X/7zFdKmjiSCWOA07oFsPrbPOtXtWVAbBNTTTogUlHw=
Subject key identifier:   2E:F9:D8:68:93:5C:97:3E:68:3D:4B:41:E8:5E:35:71:E7:56:F6:66
Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
Certificate issuer:       /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
Manifest number:          018C
Signing time:             Fri 27 Mar 2026 03:56:43 +0000
Manifest this update:     Fri 27 Mar 2026 03:56:43 +0000
Manifest next update:     Fri 03 Apr 2026 03:56:43 +0000
Files and hashes:         1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: nGUABDgw9AFgCH0wIGlX0IlqLrWEjelmyIj5AyB9vJI=)
                          2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: 3wRVfI1zpk+cbpoO3lK5QYCwvSabow1kgGaBDb4LpII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
        Validity
            Not Before: Mar 27 03:56:43 2026 GMT
            Not After : Apr  3 03:56:43 2026 GMT
        Subject: CN=69c5fffb-71a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:05:eb:33:10:f1:d3:72:7a:98:8d:eb:0b:
                    9c:cd:ee:9d:c1:34:bc:01:e3:c7:ce:1c:13:4a:d0:
                    9d:4b:9d:d5:c8:04:86:e5:ea:88:e0:ee:eb:5a:11:
                    95:62:37:43:6d:b7:2b:65:ef:cc:66:e5:f9:d1:01:
                    e7:49:b3:b6:95:a6:e8:13:43:1c:e0:39:30:5f:ef:
                    6d:62:c5:9c:7b:fa:88:36:85:de:9c:ad:b1:a7:d6:
                    57:d0:36:8f:3f:fd:07:0c:ed:f6:39:5c:01:24:50:
                    32:08:b5:a9:a5:1d:19:da:1d:fe:8f:ca:d7:24:d5:
                    3a:05:9b:94:d5:d5:1d:ea:44:51:36:f0:9f:52:e1:
                    01:64:8e:e2:22:59:53:0e:cb:75:e1:97:77:c0:3e:
                    70:bf:10:ae:13:07:77:37:b3:a5:17:97:46:2e:0c:
                    71:77:d4:51:c0:f4:17:11:5d:a5:97:10:1d:57:0c:
                    48:70:12:9b:4b:8c:5f:9d:31:64:ea:24:ae:95:10:
                    a8:a5:74:1d:83:2d:fa:cb:68:5f:b5:6b:6f:ce:be:
                    49:88:27:4b:fb:c0:74:d7:b6:b7:94:c9:e5:bb:3b:
                    e5:4d:18:28:cf:bf:f6:9a:c8:63:df:ef:fc:eb:cb:
                    0d:f9:db:29:e8:74:25:d8:a4:53:e5:df:54:30:fc:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:D8:68:93:5C:97:3E:68:3D:4B:41:E8:5E:35:71:E7:56:F6:66
            X509v3 Authority Key Identifier:
                keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0c:01:7c:67:77:5a:44:4e:24:77:a1:f7:65:a5:70:40:41:
         57:a0:c0:f2:1d:b2:ba:bd:52:98:fe:5a:09:c6:fe:6e:f2:b1:
         57:5b:8c:26:d5:4c:cb:8a:21:78:32:0e:80:d2:6e:e6:27:fc:
         a7:bd:bc:0a:1d:3d:38:bc:62:54:97:97:e2:0b:aa:d9:b4:ec:
         ca:87:27:aa:71:5d:07:54:2b:d1:e7:9e:f8:d4:e9:d6:aa:c0:
         a6:06:c1:db:12:72:87:8f:af:07:94:5e:43:27:a7:7f:60:15:
         41:0f:97:dd:89:b4:57:65:6c:12:15:e2:32:d2:01:cb:0e:fa:
         d1:46:b7:ce:e9:fb:0e:8b:05:51:dc:52:4c:1d:3f:76:de:1a:
         19:a3:bd:be:90:2f:08:ea:71:97:e6:a4:38:20:59:c4:40:3d:
         9e:a4:17:ce:8b:fc:ce:0a:bb:72:88:23:81:44:53:11:db:84:
         1d:06:85:c2:b3:11:b8:1b:2f:c3:97:a6:ef:63:e3:06:71:ef:
         06:b7:e1:89:fc:93:59:79:92:79:30:fc:18:c1:7e:d0:3b:a3:
         90:8b:b5:2e:90:6e:4f:04:86:d3:bd:44:ad:ea:83:c2:05:e2:
         1c:44:e9:cc:44:12:bd:40:44:79:12:8a:44:58:4a:49:97:ba:
         41:1d:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:39 2026 by rpki-client