Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File:                     aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier:          LUuhx8hTpWcjFAOLPBFbRk+rwXpqesdM9jFfSTTVFNY=
Subject key identifier:   1F:0C:C5:24:D8:FD:4A:66:85:1A:81:E8:90:83:24:04:7D:7A:FA:97
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer:       /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number:          0126
Signing time:             Sun 01 Mar 2026 06:43:05 +0000
Manifest this update:     Sun 01 Mar 2026 06:43:04 +0000
Manifest next update:     Sun 08 Mar 2026 06:43:04 +0000
Files and hashes:         1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: 3KdA58ZqFgok6ZnXiSuHtOAm/adYnw7Z6wcdVmzEVu0=)
                          2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: 4wFdAJqxj8YswLOV/tdLrHAF7d4VnFbbezC7qK8vV6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
                          rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
        Validity
            Not Before: Mar  1 06:43:04 2026 GMT
            Not After : Mar  8 06:43:04 2026 GMT
        Subject: CN=69a3dff9-bab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:82:b3:8f:b0:45:24:05:58:65:a8:4f:49:
                    55:66:fa:96:4e:ea:e8:f5:eb:2d:f6:1a:2d:f6:77:
                    d0:a4:65:2a:4d:ff:38:f2:23:f0:e9:d0:e3:27:98:
                    d8:fe:26:ba:9c:85:e9:81:a3:2e:6d:8d:43:33:51:
                    c8:9e:a1:cc:c7:d7:59:42:62:71:03:42:d5:91:1d:
                    f5:8c:25:70:fd:dc:99:69:c9:39:7e:f7:0a:43:20:
                    70:b2:b1:51:df:b0:5b:82:7e:ff:48:d7:6f:f1:e2:
                    76:ef:c3:0d:19:1a:97:1c:28:e0:84:93:b3:ca:b9:
                    35:e4:3e:4d:76:2b:b0:26:e0:2f:66:18:ab:68:7f:
                    34:d6:03:dd:b7:cd:64:15:02:67:de:04:be:10:09:
                    86:7b:c0:77:d8:70:35:26:7d:f1:59:fe:8b:78:31:
                    5b:c2:e8:13:6b:ee:05:1d:1a:4d:2d:3c:1b:61:55:
                    aa:03:40:7b:9f:b1:c5:dd:45:9a:53:f0:35:79:48:
                    db:4f:5d:33:af:d7:61:70:e2:21:f1:e5:86:b1:78:
                    bf:99:57:6d:4a:be:93:e9:59:a0:96:99:b2:ab:57:
                    77:40:c4:3b:73:ab:4c:59:e1:14:f6:d3:9d:83:09:
                    71:7c:cf:c3:0a:8f:49:7d:12:14:03:3d:a6:9f:e1:
                    6f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0C:C5:24:D8:FD:4A:66:85:1A:81:E8:90:83:24:04:7D:7A:FA:97
            X509v3 Authority Key Identifier:
                keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a2:05:26:69:78:48:18:d2:bc:93:d2:27:3b:27:90:7f:ac:
         c3:6e:ae:21:c8:d5:e5:07:e8:c1:6d:d5:d0:11:3e:23:41:db:
         99:8c:34:47:d3:b1:84:6a:a0:24:95:4d:96:60:ab:e3:79:a6:
         ca:93:d1:c2:63:28:59:01:d9:ba:6b:68:a2:b9:29:a4:58:ed:
         4e:91:ae:11:9d:f5:fc:74:ce:bd:5e:5a:23:e8:cf:70:2c:be:
         6a:f5:e9:33:41:8b:45:8e:7d:ca:f3:06:4c:16:a5:55:1f:03:
         2e:11:a3:d4:76:04:f4:ec:d8:bf:33:4f:9f:d8:d5:c7:9a:96:
         c1:67:bc:23:9b:f8:f7:a2:df:2e:90:1e:a8:7d:36:06:5f:d6:
         6b:fc:2c:c6:f1:0d:d7:98:28:3f:0d:0e:d8:fa:64:62:66:58:
         2e:d7:01:78:ea:c9:f2:e1:59:13:d7:04:22:e5:db:50:ee:a7:
         47:97:ba:84:ec:2d:b6:77:a9:19:85:66:e8:07:9f:cf:92:95:
         e6:7d:01:5b:84:b2:00:09:c6:ea:f2:cd:6f:3a:1b:4c:d1:fc:
         f9:a7:aa:b8:b8:62:19:60:ed:62:f6:26:c4:c9:a6:63:0c:5e:
         c3:63:b9:16:70:e7:9d:54:73:b1:40:fb:97:9e:95:bd:ca:78:
         4f:d3:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:35:10 2026 by rpki-client