Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
File:                     4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json)
Hash identifier:          JtJVbuK5AiPUwIpa9e6wa+DV02/VoYLmNQui/yeQRr0=
Subject key identifier:   A2:92:67:2E:B9:89:F5:55:F6:C9:1D:29:39:B9:A1:48:1D:09:93:4D
Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57
Certificate issuer:       /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57
Certificate serial:       0C3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
Manifest number:          0C36
Signing time:             Tue 24 Mar 2026 18:35:34 +0000
Manifest this update:     Tue 24 Mar 2026 18:35:34 +0000
Manifest next update:     Tue 31 Mar 2026 18:35:34 +0000
Files and hashes:         1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: stLQ3J28H/3Gt51IJf4uLpQXOH0oDx/OpnEvBf1NHwM=)
                          2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: 05Ptx/86GPO/lhad6zk3MbGdkqRjiz5wYtBGze/jKII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3135 (0xc3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57
        Validity
            Not Before: Mar 24 18:35:34 2026 GMT
            Not After : Mar 31 18:35:34 2026 GMT
        Subject: CN=69c2d976-a0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:f6:ea:42:0f:1c:c5:52:07:b5:c9:fa:e7:
                    7c:01:33:28:72:e0:c2:35:e6:5c:a3:a5:af:96:40:
                    39:17:84:0c:d3:ce:25:50:ca:39:30:83:da:dc:cd:
                    65:d9:93:29:20:c0:c0:15:ea:78:4f:d1:38:9f:3a:
                    ac:e8:d4:ce:c7:5e:ec:e3:f6:90:0c:a0:80:86:8c:
                    7a:00:f5:00:88:b5:11:d4:cb:4c:30:d6:cc:f8:93:
                    53:12:74:c6:b3:fc:f3:83:e6:20:00:bc:f2:7b:9c:
                    05:0c:1a:42:54:d9:5d:25:c3:03:e3:bf:a8:75:2a:
                    fc:37:c4:86:09:fa:4f:c4:29:77:d8:79:de:74:ef:
                    be:57:f3:c6:60:6e:ed:2e:6a:72:ea:78:49:8f:cb:
                    23:5e:94:9f:68:9c:3f:ea:6f:cb:b0:b7:19:fc:4c:
                    fc:48:1f:f9:a1:a1:76:0e:08:ca:d8:93:89:61:9b:
                    82:7d:d7:3f:1b:0e:64:c0:48:7f:39:ed:4d:82:25:
                    1c:3c:15:dd:4d:a6:6e:77:e9:b8:22:d3:35:7f:39:
                    13:31:24:99:2d:db:99:70:fa:33:79:cc:4e:63:e0:
                    a7:9c:43:27:81:8e:64:f3:4f:40:2f:ee:0f:67:9f:
                    55:fb:30:9b:9c:76:bb:7d:e1:78:e1:10:3c:d2:f5:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:92:67:2E:B9:89:F5:55:F6:C9:1D:29:39:B9:A1:48:1D:09:93:4D
            X509v3 Authority Key Identifier:
                keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4a:aa:01:d0:e7:cd:e3:39:b1:6c:b4:17:a3:d3:87:c4:30:
         12:19:86:aa:33:f3:e8:e7:fc:10:5c:e1:6f:69:3f:da:52:ff:
         87:e7:cf:ec:cb:26:e5:c5:af:a5:c2:c5:81:0c:22:97:0e:24:
         cd:04:08:eb:80:f1:6a:2e:c7:c5:27:a9:6a:2e:25:ee:f4:08:
         a3:72:ed:34:ef:ed:49:73:34:f3:63:f0:fe:7e:bf:1a:c2:5b:
         31:82:5e:ba:17:d7:a3:53:fa:ca:5f:e0:de:36:cc:26:e7:0a:
         e2:20:86:c2:4d:10:70:b9:40:84:99:5c:7e:ed:18:b1:83:16:
         fd:8a:1c:27:36:49:b6:05:ae:f3:f9:07:13:c3:b1:50:3d:f1:
         04:cc:76:dd:2f:51:93:47:e7:c3:18:2b:3e:a1:fc:1e:72:95:
         70:04:4a:7a:67:dc:59:27:05:40:83:41:8b:eb:2d:49:43:86:
         ab:c7:31:e2:12:8f:60:c8:14:2a:ec:66:7b:68:d8:98:89:62:
         d6:e8:2b:97:c8:79:72:5d:b7:7a:11:f4:17:c4:78:6c:23:94:
         dd:56:bd:1d:7f:a3:79:ef:99:e4:d0:71:26:01:0e:04:9f:00:
         da:94:07:1f:8e:20:e1:19:e7:26:7b:f8:26:d9:ae:a8:34:0a:
         4c:69:4e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:33 2026 by rpki-client