Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
File:                     V02z1iXehCAuOsnBw9Wwd01reOM.mft (raw, json)
Hash identifier:          FXwyArbFMOu3zvB5emyGVcRI3NXaFtuSK9w7hVGn6Bg=
Subject key identifier:   48:D3:04:27:98:2F:F9:EE:BA:27:DA:15:68:FD:AA:2C:89:11:01:E3
Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3
Certificate issuer:       /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
Manifest number:          8D
Signing time:             Wed 25 Mar 2026 06:48:01 +0000
Manifest this update:     Wed 25 Mar 2026 06:48:00 +0000
Manifest next update:     Wed 01 Apr 2026 06:48:00 +0000
Files and hashes:         1: V02z1iXehCAuOsnBw9Wwd01reOM.crl (hash: UPPfJUzzEJDdMGTKgDhLIjAHW9hnLZCXndwi8A2RFx0=)
                          2: A5E6E422A8E511F0A46A7729C4F9AE02.roa (hash: Uf6HZPRPVaJl/FDZZQpXyev2o8OHPg1QV6rsUx5DyWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl
                          rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
        Validity
            Not Before: Mar 25 06:48:00 2026 GMT
            Not After : Apr  1 06:48:00 2026 GMT
        Subject: CN=69c38521-8282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:73:ae:a9:d8:fc:a3:7d:c3:69:ec:16:e8:bc:
                    8a:26:e4:e3:53:64:8d:9b:13:57:a4:fc:b7:6d:91:
                    9f:29:61:9e:a2:9e:76:95:2d:c9:9e:ce:26:a5:c3:
                    af:48:bc:f5:b1:86:b8:ca:2a:b1:4a:ff:eb:20:7d:
                    ce:e7:9b:3f:eb:00:51:53:9e:ba:8f:30:4e:3b:17:
                    b4:a1:74:cf:bc:97:e3:cb:26:14:1a:3b:78:8a:63:
                    54:8d:fb:82:ae:9e:e3:37:2d:7a:17:72:b9:17:98:
                    5e:8a:39:f7:fa:4c:b6:92:6d:f9:fd:16:72:fd:2e:
                    ff:a5:d6:a2:a8:a6:8d:74:42:e6:00:02:1f:51:c8:
                    0c:c7:43:54:0a:1d:86:d2:64:41:e2:55:ee:c5:1c:
                    2d:2a:ec:89:a3:74:11:68:46:8c:61:0e:7d:da:f9:
                    11:fe:28:d8:7a:a2:93:85:9e:ac:40:5d:dc:25:0a:
                    0a:06:59:ee:fa:55:f5:0d:84:a2:57:c2:a5:d9:6c:
                    90:52:ad:ee:90:47:9e:ed:44:f4:11:c5:0e:4c:c4:
                    b8:d2:bb:fc:80:28:de:08:72:9a:9a:6e:69:16:15:
                    a5:d0:cc:0f:4c:ba:52:22:75:08:89:dc:0c:40:17:
                    55:e8:64:14:17:81:d1:29:71:a5:69:a0:d1:19:4f:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D3:04:27:98:2F:F9:EE:BA:27:DA:15:68:FD:AA:2C:89:11:01:E3
            X509v3 Authority Key Identifier:
                keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:41:c5:b4:76:d8:39:65:a9:fe:02:1e:12:ed:34:7d:61:92:
         f5:37:40:4f:dc:7d:6a:0d:0a:97:44:4b:e8:76:7d:ca:82:06:
         1a:f7:a6:6a:6c:ea:d2:ac:de:61:58:54:1f:cf:f6:10:05:f9:
         c5:ca:ee:e6:4f:5d:d9:50:08:72:b8:41:99:57:41:ce:f4:01:
         7f:55:db:12:2c:11:ab:6e:66:57:57:76:59:8e:22:e0:bc:97:
         82:7e:ae:3e:3b:58:ec:d9:da:9e:0b:aa:a8:ca:91:49:3a:33:
         2a:ee:f8:32:5e:0a:39:9e:6f:32:2e:6a:e0:df:70:6c:b8:dc:
         07:e8:ef:4b:50:aa:bf:05:2e:ac:7c:15:5f:1f:44:8f:5d:fc:
         32:82:1b:76:bc:e8:60:fd:6a:25:c7:4b:81:e4:ca:83:91:e8:
         91:a4:de:f8:2a:bb:ae:46:f0:91:f2:96:ba:a7:e6:fc:6e:ba:
         13:96:03:ce:63:e6:ea:9c:d6:ae:bb:d0:88:26:aa:e2:85:3a:
         e9:08:c3:14:6f:2a:df:36:db:92:f6:60:fc:43:20:4d:2b:24:
         a9:a6:ea:3a:ea:e0:3f:5b:4e:f0:e0:ba:26:58:a3:4e:93:b2:
         7c:74:15:4e:4e:9b:4b:1b:68:a5:20:cc:49:62:20:5e:1d:d6:
         19:28:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:17 2026 by rpki-client