Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File:                     emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier:          PQLXv5XMfOYJu5HhUPGL0DhM8dzvV8+oRX7SKZvfQrA=
Subject key identifier:   F2:DE:62:4E:81:F6:F7:E4:C8:5A:A4:9D:85:0E:FE:E3:AC:CD:73:9C
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer:       /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial:       03C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number:          03B3
Signing time:             Wed 25 Mar 2026 00:21:14 +0000
Manifest this update:     Wed 25 Mar 2026 00:21:14 +0000
Manifest next update:     Wed 01 Apr 2026 00:21:14 +0000
Files and hashes:         1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: aOv4pKYBbwSv8+yvgZz6Kt/Xb2VAV8NZimiISF1Bq0I=)
                          2: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: pgc094l2IccUiGHfBhpbDLm4Mx/YARY92WWKRNYIHII=)
                          3: 387AE648938B11EEA552D487C4F9AE02.roa (hash: 74deX67hI2qBziGNrnniX4uG01hCP465g7YKK+iDObQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
                          rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
        Validity
            Not Before: Mar 25 00:21:14 2026 GMT
            Not After : Apr  1 00:21:14 2026 GMT
        Subject: CN=69c32a7a-9c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:49:03:0a:01:bb:15:06:fc:ca:70:2d:6b:
                    44:e6:20:ce:3c:88:be:37:b4:fd:cc:d9:ef:b1:f2:
                    81:04:97:54:d5:d4:48:f9:01:cc:e1:70:4b:a8:fe:
                    b6:f4:1e:46:43:57:68:f2:dc:99:c9:9a:ee:c0:48:
                    30:e1:d5:ed:49:e9:d8:84:08:eb:11:2d:37:89:f6:
                    6d:b8:7a:78:e6:34:62:9a:39:73:9c:3c:e8:ca:33:
                    2d:fd:aa:96:df:bd:3b:8e:71:5c:be:93:08:83:f6:
                    eb:5b:69:91:e8:51:29:b8:63:04:4b:6d:a2:67:09:
                    97:4b:3b:87:5e:1c:40:70:94:a2:78:ec:c2:7f:8c:
                    bb:bc:03:76:14:75:46:e7:79:f1:0f:3f:8e:90:45:
                    5c:cc:9e:6f:73:69:89:e2:76:c0:96:37:2e:ea:c6:
                    42:83:b7:54:9d:21:15:00:73:60:08:18:2c:9e:39:
                    bd:7d:cc:dc:70:49:d5:93:56:3b:84:e7:20:cf:93:
                    2b:ee:ce:8a:72:6a:05:5a:c9:b8:a3:a5:23:da:af:
                    1d:b4:62:db:9e:09:cd:71:bf:cd:d2:74:73:e3:96:
                    0e:55:b5:59:f6:ef:41:45:e6:ae:46:fd:33:97:b9:
                    67:05:57:2b:87:78:47:88:ec:99:c6:23:c2:2b:92:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DE:62:4E:81:F6:F7:E4:C8:5A:A4:9D:85:0E:FE:E3:AC:CD:73:9C
            X509v3 Authority Key Identifier:
                keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6c:68:c0:29:4a:85:63:3a:f7:53:d2:d2:2f:0c:a3:a6:e6:
         44:ef:af:fe:c0:bf:19:5d:e0:18:21:4c:be:f4:dc:11:e7:73:
         32:9b:a5:3c:83:7c:f2:4a:06:b1:25:8d:ef:ba:f8:eb:21:d2:
         31:33:4a:f6:5b:5c:0b:27:e6:73:7d:0e:11:df:f1:de:b3:fd:
         1d:7c:80:5b:f1:d7:40:4f:1f:74:f3:58:00:18:d0:73:40:8c:
         71:15:07:10:06:7b:6e:3b:dc:2b:f0:e0:72:ef:68:1e:1d:f9:
         4d:43:fa:61:5e:1e:09:b8:dc:b8:7a:95:f2:c0:62:d7:7a:da:
         85:23:65:bd:16:a0:7b:8d:a8:13:a1:f4:b2:a8:7e:2a:5a:e5:
         37:3c:d3:7e:ab:ca:60:20:52:91:3d:d1:3d:a3:0c:5b:5d:70:
         b0:06:bd:9b:20:3b:93:70:7a:bb:bd:2e:31:62:6c:78:5d:61:
         21:27:4f:b4:09:be:26:77:0c:34:f6:9b:ff:e3:d2:e8:9a:6b:
         3a:51:61:d0:8d:e4:dc:c2:96:21:58:10:37:aa:01:bd:d6:80:
         4a:d7:d7:1f:2d:b8:d0:3c:88:c7:a0:aa:52:0e:99:c9:c2:2f:
         9e:23:a9:08:e7:9f:f9:93:d2:79:41:a8:94:1c:d2:92:69:3a:
         7b:52:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:05 2026 by rpki-client