Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
File:                     84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json)
Hash identifier:          3gWYr5d5TYbUyJ0KfJsS+g5DGycu87yCJsuubzTh3U8=
Subject key identifier:   16:F5:8A:6A:A2:21:DA:9E:B6:82:4C:DE:03:C8:14:84:44:08:69:CA
Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D
Certificate issuer:       /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
Certificate serial:       04BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
Manifest number:          04B5
Signing time:             Sun 01 Mar 2026 00:36:57 +0000
Manifest this update:     Sun 01 Mar 2026 00:36:57 +0000
Manifest next update:     Sun 08 Mar 2026 00:36:57 +0000
Files and hashes:         1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: VfMDxTR1SlmMgV2U6herbQxczkK9vzaLWukm9sHN5UQ=)
                          2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: ri0TS1kyJCp5RGAizutNu/7/M8+Gqg86bvQl1YYvFEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl
                          rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
        Validity
            Not Before: Mar  1 00:36:57 2026 GMT
            Not After : Mar  8 00:36:57 2026 GMT
        Subject: CN=69a38a29-9235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:94:7c:39:0f:c3:6b:da:30:4d:bc:93:0f:
                    cd:18:fe:38:9a:27:ee:d1:99:04:62:e6:a2:0e:75:
                    59:64:98:79:f5:be:9c:da:19:bb:6b:59:8b:88:f3:
                    b5:1e:b0:b4:61:ff:8e:4f:1e:c2:df:a5:68:55:59:
                    7a:8c:eb:e5:f6:87:61:a1:00:91:0b:c7:ff:b7:02:
                    2f:b9:8d:b7:8b:03:8e:00:c4:42:9c:4b:85:8b:61:
                    3d:bc:4c:44:b9:a3:a1:be:6f:82:3a:f8:01:cd:ad:
                    7f:5b:8e:ad:99:35:a2:ba:6c:44:a1:9d:fd:ca:41:
                    cf:27:e1:f3:c9:2c:99:71:61:23:d6:3f:b0:9b:b5:
                    21:23:66:0d:03:15:12:5e:67:64:de:55:12:0b:95:
                    ba:10:3f:3d:3a:33:29:47:74:b9:50:9b:6e:82:a5:
                    d2:ab:b1:43:f5:23:ac:a9:f1:cc:9b:82:95:19:5e:
                    d4:74:42:0c:a2:62:cb:46:d9:e7:ae:65:2e:73:7b:
                    83:6d:45:42:97:8f:ef:4a:01:43:9b:5c:8e:07:0c:
                    a6:c3:6e:9d:13:a6:f0:c0:d5:c8:f0:40:fb:99:cb:
                    aa:62:2b:1a:c3:35:21:64:db:cf:b1:07:40:9b:a6:
                    ef:64:aa:73:45:dd:ea:ee:4e:7e:55:4c:88:0f:e4:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F5:8A:6A:A2:21:DA:9E:B6:82:4C:DE:03:C8:14:84:44:08:69:CA
            X509v3 Authority Key Identifier:
                keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9f:53:17:33:80:7b:59:10:3a:53:89:e2:c7:67:e8:20:d8:
         a6:de:c2:13:b9:84:08:82:33:5e:2a:db:3c:c9:8d:9b:57:27:
         17:b9:c5:91:08:20:e2:90:47:36:01:36:4f:69:78:97:da:6e:
         44:07:c7:61:7e:d2:82:fe:8a:9f:56:12:6b:38:07:f1:58:22:
         95:37:86:69:89:54:b9:99:eb:32:9d:09:c2:fc:8a:4b:10:b6:
         f8:f8:94:d3:1f:17:2f:ce:8f:c1:5f:ab:de:a5:07:ca:96:48:
         f7:65:92:ee:b0:26:a3:c4:98:fb:47:0b:f3:4f:a0:7d:0a:10:
         fd:ba:0c:09:87:1b:56:ea:40:dd:21:c5:90:69:29:b7:31:cd:
         ea:cb:28:a8:b3:8b:55:fc:a1:03:bd:bc:92:84:91:d2:a7:19:
         09:bf:3a:a5:e0:fb:33:68:6e:27:42:22:b1:37:0f:be:94:6a:
         32:2e:c7:06:2a:bb:0b:4c:a1:87:7b:07:1e:c4:c4:3d:14:ab:
         1c:6a:8f:fb:af:e2:07:d5:1b:02:c0:3f:45:4f:78:6f:37:fe:
         7f:94:28:ff:b1:aa:c3:95:9e:37:20:2d:4a:67:fb:ba:a5:fb:
         32:9c:63:9a:3e:9c:93:66:ff:4e:e9:9e:f3:44:52:32:e3:98:
         61:e0:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:01 2026 by rpki-client