Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
File:                     whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json)
Hash identifier:          bktHwQxZjOc8+ZWElDGzwQLMOy/dUhejoCwqTtv6TcM=
Subject key identifier:   00:05:68:F8:17:48:60:DF:63:1A:80:DC:98:78:49:90:90:7E:DE:7E
Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Certificate issuer:       /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
Manifest number:          0194
Signing time:             Wed 25 Mar 2026 03:39:27 +0000
Manifest this update:     Wed 25 Mar 2026 03:39:27 +0000
Manifest next update:     Wed 01 Apr 2026 03:39:27 +0000
Files and hashes:         1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: tqySyX9jfH9khiuosA2mxlOOEn/d6nZsYwVS7cTGXRE=)
                          2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: wCp+IlbpvYciIPFriRIjYQ57dN5tnAhIJFx/hlE1UvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
        Validity
            Not Before: Mar 25 03:39:27 2026 GMT
            Not After : Apr  1 03:39:27 2026 GMT
        Subject: CN=69c358ef-dff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:92:1f:d1:3c:3f:4a:e8:b4:4a:97:a3:f4:
                    6c:32:9c:70:4f:bf:13:5f:b5:db:90:cd:b0:ec:7a:
                    dd:93:52:2d:1c:e3:f1:f7:cb:17:80:d0:3b:b6:ae:
                    ef:a2:e5:bb:80:ab:56:36:b7:83:9d:92:db:26:a0:
                    74:41:b3:a2:04:92:0a:18:99:c8:96:81:db:3a:fe:
                    4e:67:90:de:71:31:eb:51:52:41:3c:e3:34:43:b1:
                    10:5e:d3:05:4e:4c:6b:53:7f:95:42:58:da:fb:7c:
                    ce:99:50:c9:50:8d:7b:86:31:b2:91:ba:9d:b6:07:
                    10:2f:e6:1c:87:36:51:d9:7e:a6:62:70:47:d3:02:
                    60:aa:13:73:82:33:4d:60:87:e6:15:a7:82:2f:fc:
                    3d:bc:d5:32:f0:04:98:91:31:e6:e5:84:01:fa:8d:
                    7e:51:c4:80:01:2f:cc:4d:cf:ba:6f:1b:4d:60:7f:
                    0f:71:ed:54:52:ab:04:9b:9e:09:18:97:00:02:3a:
                    33:24:d8:ee:e3:fd:c4:cb:50:b3:7a:b9:3b:86:bd:
                    8b:e6:87:15:2f:85:f0:e2:b0:34:9f:cb:86:41:0c:
                    ce:f8:8b:a5:dc:7d:64:50:f7:17:05:08:87:a2:e8:
                    a6:0e:75:f3:ac:00:99:39:ea:cc:03:00:7e:95:9a:
                    fd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:05:68:F8:17:48:60:DF:63:1A:80:DC:98:78:49:90:90:7E:DE:7E
            X509v3 Authority Key Identifier:
                keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:c0:af:d6:be:fd:fe:6b:c5:b3:07:93:93:21:66:e3:43:
         1b:36:dd:0d:a4:f2:47:ad:bc:23:16:67:9c:db:53:74:58:23:
         bd:c5:a2:a5:4f:f7:68:1b:d3:bf:a0:2c:0a:c2:fc:81:d6:22:
         55:57:3d:ac:b1:51:83:53:c3:17:84:59:1e:e1:5f:44:10:79:
         84:5d:36:d9:ab:e3:d1:bc:5f:f3:ec:a7:a0:a7:bc:fc:ed:b7:
         0e:b0:d3:05:2c:44:2c:e3:e7:1e:62:34:df:0b:1c:7f:ba:ba:
         28:03:68:4a:13:02:f2:74:cf:ad:47:db:02:36:c4:56:c1:65:
         e1:5a:61:c5:45:cc:92:44:4f:0f:54:f5:df:2f:2d:14:f1:67:
         8b:0d:32:c6:45:05:0f:97:90:5b:d9:7f:05:f8:25:ab:e9:ac:
         54:5b:24:44:ad:2e:d1:01:4f:a6:ee:56:e0:dd:7d:00:eb:66:
         ee:73:1e:82:7c:44:a4:23:ce:0f:d6:13:90:82:5b:e8:f3:7c:
         a0:e3:1b:86:c9:a4:e7:af:3d:53:86:13:30:c0:f1:8b:58:e0:
         e5:88:64:aa:f6:ec:57:3d:59:cb:4c:34:4a:cd:eb:83:6d:ad:
         58:bd:a0:80:20:97:8c:15:82:94:06:20:5b:91:9a:d9:e5:27:
         87:d0:6a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:25 2026 by rpki-client