Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
File:                     aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json)
Hash identifier:          tM8iqauOpS1cahIkd0o+J8GOH7iHjNbI+/wkAxy7TO0=
Subject key identifier:   00:76:41:C5:4D:B7:C8:4D:DB:63:AC:65:7B:7A:8D:89:A7:E8:59:FF
Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51
Certificate issuer:       /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
Manifest number:          068E
Signing time:             Tue 24 Mar 2026 22:10:49 +0000
Manifest this update:     Tue 24 Mar 2026 22:10:49 +0000
Manifest next update:     Tue 31 Mar 2026 22:10:49 +0000
Files and hashes:         1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: ThpduBR0M3N/pJgbqmntoyBOXQVresVs4iG/zWkZZcM=)
                          2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: F1fXz2/fZOT0A+vWKAw94iaOGisACVQx2A9nYViYNaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl
                          rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951
        Validity
            Not Before: Mar 24 22:10:49 2026 GMT
            Not After : Mar 31 22:10:49 2026 GMT
        Subject: CN=69c30be9-0a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:11:93:59:5f:36:cc:2d:92:87:9e:f6:8e:
                    b2:c4:ab:2b:3e:e0:ff:15:9b:c8:71:56:ae:21:0b:
                    63:d9:c8:6d:f3:40:93:6f:ec:18:8f:41:76:5d:f5:
                    04:f0:0e:5d:86:7d:fc:56:4e:b2:10:f9:b4:40:27:
                    e9:62:da:b7:4e:83:2a:33:77:9f:02:92:8e:b1:b7:
                    79:df:2c:ff:24:f5:3f:14:8f:a0:43:6b:1e:4e:bd:
                    f6:4b:0d:66:ba:e7:81:0f:eb:20:c6:a4:92:fe:77:
                    d9:29:6b:14:af:f6:9d:09:d5:a4:4f:1f:bc:c0:61:
                    d1:27:84:1b:99:e3:72:0b:c9:50:8c:ff:10:0a:d7:
                    ba:54:86:1b:42:c1:23:17:f0:7d:21:f2:63:8d:3b:
                    27:2f:57:d4:1f:61:e1:f8:ae:01:bb:fb:55:86:97:
                    b7:79:c3:38:32:d8:bc:31:78:7d:d1:a6:c9:aa:45:
                    6d:45:f5:1e:82:b9:27:b9:46:d5:cb:99:6c:28:57:
                    e9:ef:f8:87:e4:a9:f6:48:b7:38:12:3e:71:0b:57:
                    84:4f:ed:53:b6:3d:12:26:e2:a8:e6:e2:06:2e:f4:
                    13:e2:f7:2d:03:8d:70:d3:40:c5:7f:37:89:c1:60:
                    89:3f:8a:d3:1c:e8:a8:65:ee:72:c8:1d:e0:67:84:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:76:41:C5:4D:B7:C8:4D:DB:63:AC:65:7B:7A:8D:89:A7:E8:59:FF
            X509v3 Authority Key Identifier:
                keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b4:8a:0d:8d:41:fe:19:63:a3:5f:97:7a:a9:5a:b0:7c:43:
         49:e3:e7:89:9d:2c:58:c2:1f:1e:f6:ad:b3:21:d7:f2:06:df:
         1c:c3:25:d6:9b:69:cd:d1:a6:da:c6:9f:a4:0c:b4:58:65:f3:
         4b:ad:ec:4b:fb:76:6e:40:f0:40:86:de:de:f9:ae:09:bd:43:
         92:7f:50:3a:61:c1:82:da:cf:63:52:24:af:c2:9a:7f:d6:9f:
         5a:a9:f9:3b:8e:cf:03:6d:ef:92:d9:f4:c3:2b:6b:f3:90:96:
         f5:2d:9e:2b:11:b7:ad:4e:03:38:55:15:04:61:d0:a1:79:b8:
         19:3c:c2:21:00:f1:75:87:60:a2:8d:67:98:a3:c2:72:24:2e:
         66:cc:27:61:ef:f0:95:16:70:6c:d4:b5:3f:69:35:a0:a7:b8:
         24:a3:42:d3:86:b4:a8:58:c0:db:07:67:b0:97:09:bc:9e:55:
         1d:eb:d8:2a:88:54:c9:c3:9b:72:07:52:47:13:01:51:49:ba:
         91:29:9d:6e:0d:bb:ff:fa:1a:4d:00:ce:61:13:bc:f7:b4:0f:
         29:22:e5:d0:e4:7d:f3:80:3c:a2:f9:1d:c2:95:23:df:a0:cc:
         be:15:70:78:a3:df:ec:0e:81:90:3d:4c:75:15:27:15:2a:12:
         63:22:96:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:38 2026 by rpki-client