Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
File:                     tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json)
Hash identifier:          ZvtozDhexI6AUeBtbbDmqbw44lLdvdpqL9OeQtVwCBA=
Subject key identifier:   80:98:0A:67:D9:4B:F9:58:06:51:B4:B1:2A:EF:C2:C2:D5:99:C2:53
Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
Certificate issuer:       /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
Manifest number:          0142
Signing time:             Wed 25 Mar 2026 04:32:48 +0000
Manifest this update:     Wed 25 Mar 2026 04:32:47 +0000
Manifest next update:     Wed 01 Apr 2026 04:32:47 +0000
Files and hashes:         1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: 2UCaA8QbYlt8LakCLVnPwYT7uxicEq15XH2zFHSf2U0=)
                          2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: Luwtev83Zs6KUCyFMF7rPFNFdO+XLcijtYlkHDR9isU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
                          rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
        Validity
            Not Before: Mar 25 04:32:47 2026 GMT
            Not After : Apr  1 04:32:47 2026 GMT
        Subject: CN=69c3656f-0a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:51:c7:d9:3f:5a:40:9c:73:28:c9:4b:54:
                    02:3e:86:f5:81:ab:a4:74:9d:ef:75:86:65:2d:99:
                    ae:32:64:33:00:ed:fe:8e:a3:4f:b4:93:57:3c:1e:
                    0a:f9:7f:57:42:c2:a3:b0:cf:c6:06:59:cb:87:5f:
                    80:92:e1:96:85:64:a6:c3:4d:15:90:b9:61:96:18:
                    a1:1b:22:2d:68:ac:98:cc:49:db:23:46:fa:67:fb:
                    99:f5:3e:81:3d:e6:15:3b:e0:95:39:90:b9:32:c2:
                    ef:dd:87:3f:0b:df:92:2b:6d:97:25:33:4e:22:40:
                    5b:d5:48:df:5a:f2:19:08:66:b5:42:f5:4d:cf:ba:
                    b3:c1:07:a9:b0:72:f7:86:89:ac:92:7b:f9:df:ab:
                    11:34:6d:29:5f:5f:c1:47:23:8b:1b:b7:30:cf:7a:
                    aa:da:9d:1e:9b:d0:c4:e6:67:57:27:7a:3f:66:4b:
                    dc:bb:f7:a4:cf:6c:e3:d6:96:08:fc:a2:e7:ad:ac:
                    59:45:c5:11:74:45:8c:3b:f2:fc:0d:70:0e:cf:c6:
                    84:ce:3b:0e:02:c0:88:57:1a:4e:59:f0:66:ef:11:
                    4c:f1:94:8a:58:dc:99:07:d1:37:b2:78:ff:83:35:
                    f9:e6:4b:21:f3:8e:7e:ab:28:05:27:d0:14:52:55:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:98:0A:67:D9:4B:F9:58:06:51:B4:B1:2A:EF:C2:C2:D5:99:C2:53
            X509v3 Authority Key Identifier:
                keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:58:f4:3d:98:10:e9:27:59:6a:f1:a3:a9:7c:66:e4:29:7e:
         d3:e2:53:fa:5b:b8:39:37:19:97:4d:0c:e5:eb:86:2d:5d:99:
         8b:ff:4a:9f:5a:84:a5:1f:68:b9:35:bc:c2:48:c7:4c:59:85:
         0b:26:90:2a:17:fc:71:99:25:6c:ab:20:8d:f5:53:80:bd:e3:
         95:0c:e1:7c:a8:03:95:0e:98:00:bb:da:59:af:13:ba:9f:1c:
         ef:f8:54:d5:bc:83:b2:94:9e:77:06:32:cc:f6:b5:4b:4a:23:
         90:fb:c5:a5:2a:ff:e8:9c:7e:2b:74:74:5c:ca:5d:cd:53:bf:
         b3:85:ca:96:1c:4b:05:69:c2:f7:5b:f3:2a:9b:aa:96:e8:54:
         c9:43:b1:8d:83:30:e9:43:51:04:5a:ae:6f:fe:84:d2:33:a8:
         ee:a2:45:6b:74:f4:8d:08:5a:e0:14:08:ec:c3:cd:0f:ce:a3:
         d5:93:1f:48:c4:e7:91:64:b2:70:4e:b7:5f:fb:84:9f:7b:47:
         0c:c1:04:2c:6a:28:3f:e2:65:5c:74:7b:af:c7:d3:ae:50:ae:
         64:2f:82:0d:95:83:98:9f:50:18:75:2c:8b:ce:b4:39:82:e5:
         79:53:29:7d:55:a9:ef:ed:a4:b3:ae:38:1d:5e:b2:e9:00:d3:
         4d:fc:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:37 2026 by rpki-client