Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
File:                     0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json)
Hash identifier:          Y6J92J1UArPL9Zy4ZohjhscI2rg3uUA2s7TfS0yDoRc=
Subject key identifier:   9C:23:58:F7:A2:EE:11:51:45:62:7E:B3:86:BE:5F:5E:F3:1C:32:CD
Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
Certificate issuer:       /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
Manifest number:          C4
Signing time:             Wed 25 Mar 2026 06:08:21 +0000
Manifest this update:     Wed 25 Mar 2026 06:08:21 +0000
Manifest next update:     Wed 01 Apr 2026 06:08:21 +0000
Files and hashes:         1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: h2+QVY8qRA4JpyP+NrzpsqaN4FntqLsGJ0ijr5lbCWs=)
                          2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: G7QqbuS3t/iTX6LomgThshVcOQtAVpBN0imWLjN0zDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
                          rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
        Validity
            Not Before: Mar 25 06:08:21 2026 GMT
            Not After : Apr  1 06:08:21 2026 GMT
        Subject: CN=69c37bd5-7267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:50:f7:a2:13:62:18:90:79:3e:59:36:56:2c:
                    ab:63:8d:e0:66:45:4d:59:e5:83:a9:6d:12:3c:62:
                    e2:0a:f2:6b:6a:a4:a0:1d:e4:e2:f5:2f:67:6b:53:
                    fb:70:b0:35:60:43:28:ff:99:88:c4:73:c7:0a:8d:
                    45:aa:5d:f4:d5:5f:20:eb:41:18:99:85:db:e6:d4:
                    a4:57:73:47:a9:92:6e:99:8d:0d:02:5e:49:4a:05:
                    be:05:91:40:5e:33:ff:ba:34:89:35:ac:9e:83:f9:
                    3e:39:63:fe:89:82:58:ad:db:a4:5d:37:a4:ba:88:
                    15:bf:6a:75:58:62:09:5c:33:88:5b:32:a2:ea:66:
                    b4:4e:00:72:44:af:6f:dd:a3:3a:81:fc:b0:e2:e4:
                    11:59:8a:cc:b4:90:f7:5b:b0:61:3a:1a:e3:c8:02:
                    ac:1f:0a:ac:c2:bb:8b:12:7d:bf:55:87:33:c6:28:
                    70:22:36:78:f7:e3:9b:4f:b6:43:09:dd:b2:68:27:
                    a8:a3:f4:2c:6f:4a:89:76:39:64:45:83:42:6d:c3:
                    c2:cc:e4:c3:88:57:5a:12:30:e4:48:59:ff:e4:01:
                    85:00:20:85:b8:19:9f:53:00:0e:cd:00:25:0e:aa:
                    4b:5c:7d:ba:7c:5d:79:9f:98:4b:57:d7:ef:d5:86:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:23:58:F7:A2:EE:11:51:45:62:7E:B3:86:BE:5F:5E:F3:1C:32:CD
            X509v3 Authority Key Identifier:
                keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:92:c9:67:cd:d1:b6:5a:1a:3a:ca:d8:17:86:42:76:a8:66:
         dc:af:8f:7b:b6:28:a5:75:0a:be:fd:18:34:d7:b1:6f:00:57:
         f5:a7:99:22:97:11:e4:39:7b:c7:5e:39:71:ad:cd:54:e0:94:
         46:af:95:24:87:f5:ff:46:1e:9d:38:31:14:d5:35:c4:16:f0:
         10:bd:74:5d:7d:ed:46:00:47:55:34:7b:9c:53:d7:29:94:b7:
         d4:f9:74:c3:bb:d4:e9:b4:72:66:77:28:c0:99:8d:a4:76:ba:
         5c:3b:95:67:e9:c9:70:a0:c2:be:08:4d:b9:44:9a:8e:54:50:
         ee:ba:6d:87:6c:c2:7b:ad:94:dc:30:10:50:21:28:cc:b1:61:
         04:eb:af:96:e9:c4:27:36:6d:dd:2f:fd:33:92:0f:68:34:35:
         45:22:0c:27:0c:da:99:79:1b:99:ec:ac:96:a8:82:d6:66:4f:
         e0:9e:25:86:ca:f9:8b:10:98:50:7a:51:52:6a:ef:6c:52:64:
         69:f2:32:a6:fa:92:c9:ca:80:0e:03:ab:d0:03:c1:39:b4:a2:
         33:d9:4c:ec:64:7e:0e:d1:53:e9:c9:8f:14:dd:86:fb:f3:03:
         31:bf:48:12:07:eb:eb:29:41:06:57:6d:3f:e1:68:01:fb:2c:
         f3:28:1d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:55 2026 by rpki-client