Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File:                     MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier:          W4r94NGsopePmvoSRSirGs0Af9gtEhs7ZKxmg/vCibk=
Subject key identifier:   16:A1:F0:DF:0B:ED:3F:35:18:79:C0:BF:E7:93:26:1E:EA:4E:AC:23
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer:       /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number:          0238
Signing time:             Fri 27 Mar 2026 02:06:45 +0000
Manifest this update:     Fri 27 Mar 2026 02:06:45 +0000
Manifest next update:     Fri 03 Apr 2026 02:06:45 +0000
Files and hashes:         1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: OzxNTRJuWCYt53z3GCdPOwi/n381nvL3g1IiykS5ZSg=)
                          2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EIvm3xLw4Nyp5EuKey6WkJaoQc2wgEjOvCaL4fAv+m8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
                          rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
        Validity
            Not Before: Mar 27 02:06:45 2026 GMT
            Not After : Apr  3 02:06:45 2026 GMT
        Subject: CN=69c5e635-0dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ac:ed:0e:74:97:4f:ef:0d:4c:8f:34:f4:b4:
                    83:28:5c:76:a8:43:3b:60:c3:9a:e1:ee:19:e6:3c:
                    15:c4:db:6d:0b:7e:16:12:1e:d1:fd:e7:db:83:e2:
                    96:b9:4a:ac:e3:df:e5:a2:d3:8d:9f:a7:66:99:08:
                    a2:1b:a7:59:9e:e4:13:90:05:67:5b:66:df:ef:71:
                    de:07:a5:b8:0d:c2:a4:3c:8a:a7:72:c4:fa:66:3c:
                    4f:7a:05:71:58:dc:66:a7:70:23:df:d4:9b:ad:de:
                    54:bf:e1:3f:95:4d:ac:70:7e:8c:28:81:12:f3:3b:
                    c8:62:6b:8a:16:1d:66:3f:d5:6b:1d:f5:b3:b3:b0:
                    be:8c:22:a7:75:82:bc:a2:bb:48:1e:6e:6a:7a:da:
                    36:13:b0:c9:2e:33:4d:1a:66:1c:6b:b5:21:53:31:
                    4b:f1:f1:9f:5b:2b:6c:87:71:2f:e8:89:e9:d6:f6:
                    77:17:dc:82:c5:1d:08:6d:f8:43:f0:b0:c6:79:b8:
                    0a:bd:37:f5:58:24:4a:11:5e:f2:9f:21:d1:e6:49:
                    57:cc:22:f8:27:8e:33:59:ab:ca:d4:29:5e:57:64:
                    d0:95:8e:02:35:0a:f7:db:06:8d:39:e7:66:64:67:
                    b1:b9:1d:db:ed:3e:1d:85:a2:e9:3c:5f:0e:13:dd:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:F0:DF:0B:ED:3F:35:18:79:C0:BF:E7:93:26:1E:EA:4E:AC:23
            X509v3 Authority Key Identifier:
                keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:6a:d1:e5:a9:93:2a:3d:74:95:da:36:bf:9e:59:32:12:af:
         6b:1d:5f:97:bb:66:e0:02:71:93:e4:43:45:a7:75:ae:83:26:
         0b:06:34:bc:82:73:35:d2:95:bb:13:84:c1:0d:62:5d:60:4f:
         61:d2:12:4c:4c:af:5f:b4:04:b8:c5:a7:3e:b2:9b:06:df:9e:
         75:17:18:33:10:b9:9e:e3:04:3d:9e:de:1e:98:7b:c8:5b:94:
         c4:67:df:10:c7:db:ae:1e:45:fa:bd:71:e9:83:d6:10:e2:9c:
         06:b1:50:53:f1:2a:49:e1:88:ad:6f:ef:d5:11:6f:68:8b:71:
         c3:3d:4b:b0:af:40:47:f6:41:59:af:f9:e3:bd:d3:fc:64:d4:
         3e:77:fe:1b:85:dc:85:c1:df:3e:44:17:03:9e:16:05:79:5a:
         1f:50:0e:7e:33:ae:98:de:27:e4:0b:8d:7e:7d:0c:df:1c:d1:
         37:03:20:fb:04:4a:ab:dd:97:0d:b9:a0:b4:bb:94:df:26:10:
         1d:9c:5e:be:db:76:a9:f3:74:92:dc:9e:80:c5:05:d0:a0:f9:
         c5:97:0f:a4:ad:01:dd:8d:97:3b:10:5e:b8:31:84:6f:8d:d1:
         8d:d8:cb:e6:82:ea:48:ba:27:d4:a8:b8:7d:3c:57:b8:9c:53:
         60:81:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:36:24 2026 by rpki-client