Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
File:                     T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json)
Hash identifier:          m7vEUFriqkaeCen0qMuk+IYi0mh1vBPaFDosDZWdUF4=
Subject key identifier:   3A:66:7B:A0:CA:1B:D1:47:B9:22:3B:40:E5:E0:5B:48:6A:D6:2D:73
Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
Certificate issuer:       /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
Manifest number:          0162
Signing time:             Fri 27 Mar 2026 04:27:36 +0000
Manifest this update:     Fri 27 Mar 2026 04:27:35 +0000
Manifest next update:     Fri 03 Apr 2026 04:27:35 +0000
Files and hashes:         1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: ++QbdTaJ/chGG7+hZXTE5YSKsXELQ0iFbva+glFtwhQ=)
                          2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: OLmzaxlvTJHTiGS7nwNh94NwHubP58y5RNV7lSRqby8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
        Validity
            Not Before: Mar 27 04:27:35 2026 GMT
            Not After : Apr  3 04:27:35 2026 GMT
        Subject: CN=69c60738-8c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:d3:8a:a7:ab:da:d0:1b:ac:f6:24:54:80:
                    a4:13:c8:8f:6d:99:14:a9:4b:03:13:fa:bc:a2:69:
                    12:ae:de:ed:b3:65:8c:1c:4c:f6:e6:89:7d:d0:44:
                    54:fd:2d:9e:b1:b1:c0:f2:4f:bb:d8:70:63:0d:71:
                    6a:0a:a6:f1:9a:0e:8f:9c:1d:b0:30:9c:86:4c:ba:
                    ec:5e:19:33:31:1e:54:48:0e:fb:6a:70:f8:5e:00:
                    25:68:7e:eb:58:bd:06:18:97:5b:8a:87:82:9d:c9:
                    e9:12:51:34:2b:67:f6:57:a6:12:e5:40:d8:3c:2f:
                    b5:cf:3b:2a:2f:10:56:17:74:96:ec:19:16:23:04:
                    9d:f8:86:38:b9:fe:89:7c:a2:e6:2d:3c:92:56:74:
                    5a:43:b7:c1:ee:33:8d:02:68:db:4b:11:5f:6c:fc:
                    3f:1b:ff:25:a0:1c:c6:d8:bd:0d:91:b1:1b:fa:40:
                    33:1e:66:0a:5e:6e:8f:e9:f5:0d:c1:2e:b6:47:92:
                    13:fc:71:06:ce:80:95:86:0e:55:aa:10:b8:c7:dd:
                    e2:69:e6:fe:9f:86:b3:cf:fd:a9:1d:2d:ee:80:ae:
                    a9:c9:a3:db:7f:9f:3b:59:fe:e5:0f:03:1e:ea:9c:
                    42:b6:4c:4e:10:e1:ce:f4:c6:4c:cb:f0:7e:92:43:
                    d0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:66:7B:A0:CA:1B:D1:47:B9:22:3B:40:E5:E0:5B:48:6A:D6:2D:73
            X509v3 Authority Key Identifier:
                keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:62:4d:e8:a3:9b:36:c7:a2:01:7d:d0:61:3e:4c:22:a8:73:
         ff:b5:fe:62:7f:72:b1:ba:d4:67:3d:b9:95:c8:e2:40:bc:15:
         41:cc:6d:b9:1b:b7:8e:c1:38:fb:47:a1:52:0a:e7:2a:6e:49:
         b3:82:35:1a:fb:ef:2d:79:79:a4:5f:0c:1d:c7:03:75:9f:42:
         a3:da:d4:48:04:38:60:8c:2a:8b:32:ee:fc:60:26:1d:a6:3c:
         e8:53:fd:37:cd:68:96:fd:b6:cb:60:d8:e2:eb:56:a9:ea:a6:
         6d:85:7b:37:18:47:64:69:c5:51:f6:c2:ed:13:d5:94:5e:79:
         ce:93:91:17:10:e3:53:c0:bd:a5:7e:7a:54:2d:87:50:c2:17:
         60:ee:a0:28:ac:3e:3f:57:13:91:45:14:e5:90:c6:28:9a:26:
         43:02:e9:56:f0:fc:30:06:04:27:8b:fb:e1:2a:c7:4f:be:c5:
         65:51:1b:4d:5f:ca:ca:c8:59:4c:64:90:6d:f6:d0:36:7a:7e:
         b0:6c:99:ae:c2:da:87:ec:b4:4d:e5:34:af:76:12:5c:02:5d:
         9a:1f:9d:35:3f:1f:38:39:61:7f:af:16:51:48:27:88:7d:0f:
         40:49:eb:97:ba:33:08:ed:be:28:9e:7c:a5:47:fd:88:02:6c:
         be:8c:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:12:47 2026 by rpki-client