Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
File:                     Syj186m-bJVf8b4Pe1CAOrF-tGA.mft (raw, json)
Hash identifier:          7+Jg6NYrLWlrfzSzhkZtpkEMK/mk2KmE3541Z58bprc=
Subject key identifier:   3F:13:94:3C:9E:E4:B8:B6:C6:83:9D:1A:E2:EB:5B:3F:01:94:D8:42
Authority key identifier: 4B:28:F5:F3:A9:BE:6C:95:5F:F1:BE:0F:7B:50:80:3A:B1:7E:B4:60
Certificate issuer:       /CN=A91DC324/serialNumber=4B28F5F3A9BE6C955FF1BE0F7B50803AB17EB460
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
Manifest number:          014D
Signing time:             Wed 25 Mar 2026 04:24:16 +0000
Manifest this update:     Wed 25 Mar 2026 04:24:16 +0000
Manifest next update:     Wed 01 Apr 2026 04:24:16 +0000
Files and hashes:         1: Syj186m-bJVf8b4Pe1CAOrF-tGA.crl (hash: VNaD/ZyE1L8FToTpn67nbHT4ZhendK+VnZXe5dWNBFs=)
                          2: 8E20940E32AE11EFAE6AE719C4F9AE02.roa (hash: +Z9Gp5ek99wZ8UJ7rfRgE2CK3T6NZIN91FLtJX4m4zg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC324, serialNumber=4B28F5F3A9BE6C955FF1BE0F7B50803AB17EB460
        Validity
            Not Before: Mar 25 04:24:16 2026 GMT
            Not After : Apr  1 04:24:16 2026 GMT
        Subject: CN=69c36370-993a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:47:9e:c2:9e:82:e9:d1:74:69:e9:d0:f6:
                    a6:e1:d2:e5:61:d4:e0:24:61:b6:34:8e:52:a0:23:
                    3e:04:c5:87:73:9e:a8:c9:90:3f:9c:c8:1f:5e:24:
                    6b:80:d8:80:b2:1d:bf:da:88:87:2d:83:76:19:03:
                    14:85:76:cd:c9:01:54:21:d7:72:8c:27:25:bc:db:
                    63:57:8e:cf:38:c2:42:c3:a0:98:8c:0a:ed:18:ee:
                    61:99:58:76:37:ba:22:fb:53:df:e9:47:5e:49:e8:
                    aa:9b:db:25:3f:43:3a:fc:e2:9f:72:57:94:a6:44:
                    67:1c:5e:c4:a5:60:54:a1:d8:a7:73:d8:c7:13:22:
                    c4:11:75:1d:82:f6:11:20:d5:a3:ae:0b:97:17:97:
                    7b:d5:be:15:0a:2a:ff:5e:fc:86:c9:41:dd:af:f2:
                    53:66:ac:c7:92:bd:89:fc:a1:ca:c9:c2:36:44:8f:
                    8a:3a:d3:98:26:0b:02:ac:00:f0:59:48:2e:89:d6:
                    b5:4a:e0:2f:8c:5d:64:72:1d:6b:a2:da:04:31:da:
                    44:75:1c:91:71:cb:e4:1a:7d:6d:46:c7:69:13:49:
                    85:ef:f6:85:3e:9e:41:83:d4:c4:be:da:06:45:d1:
                    06:ed:c7:2a:ce:30:18:6d:af:98:c0:94:9e:77:0a:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:13:94:3C:9E:E4:B8:B6:C6:83:9D:1A:E2:EB:5B:3F:01:94:D8:42
            X509v3 Authority Key Identifier:
                keyid:4B:28:F5:F3:A9:BE:6C:95:5F:F1:BE:0F:7B:50:80:3A:B1:7E:B4:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:49:66:c1:7b:68:de:0b:95:a3:f6:01:eb:76:34:6b:23:66:
         74:70:8d:f9:61:34:4b:c6:9e:2f:52:98:6d:b5:a3:03:f2:d7:
         b2:c0:9f:99:53:63:28:d6:ba:4c:df:7e:1c:a6:bd:7e:18:0b:
         1c:6b:60:50:46:40:3b:87:aa:28:d3:c5:8b:0f:db:d4:13:71:
         d0:58:46:86:14:bd:f8:2a:93:c5:bb:7f:ec:e6:a7:ff:84:d9:
         09:25:21:bb:ad:58:3a:ed:ca:d2:2d:64:6c:62:74:21:f9:1e:
         6c:76:e0:4d:f0:69:5b:dc:aa:d4:73:9a:e1:44:b2:00:47:2b:
         a7:c7:ff:6b:76:93:60:1a:d1:99:b9:91:f3:fb:92:a1:36:3e:
         91:85:01:75:00:bc:25:20:77:77:1b:c4:fb:7c:7b:7d:a3:67:
         98:57:0d:2b:b7:88:32:b8:66:0d:cf:6b:2e:9f:48:ee:e1:fb:
         df:44:b9:33:07:df:e4:a3:75:ad:3a:ad:b8:e2:4a:cc:02:3b:
         be:94:6d:46:4d:ec:de:ae:13:df:4d:42:6d:af:ac:15:7e:ed:
         2d:bc:89:b0:a3:22:76:d0:db:99:b7:71:cd:0e:79:43:32:e6:
         b3:28:b9:bc:cf:a8:cd:da:a5:43:20:74:63:6c:75:4e:2e:9f:
         da:c1:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:30 2026 by rpki-client