Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
File:                     cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json)
Hash identifier:          z9mEIoSNeKtrN88h9ST4Wovs4CfolWCnYP6HYqSwQZg=
Subject key identifier:   AF:3E:35:05:22:06:28:53:20:D3:E8:68:04:7B:5E:1D:51:53:11:15
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Certificate issuer:       /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial:       039D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
Manifest number:          0396
Signing time:             Sun 01 Mar 2026 23:46:59 +0000
Manifest this update:     Sun 01 Mar 2026 23:46:57 +0000
Manifest next update:     Sun 08 Mar 2026 23:46:57 +0000
Files and hashes:         1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: dH2cIvCCmg37hgTiv7ZeCz7H5EvKGJkV/dCY6k2RT0I=)
                          2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: nomqtva7ggVLFevc3wGgCUafYyn97H4GgqbrGIpWBXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
                          rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
        Validity
            Not Before: Mar  1 23:46:57 2026 GMT
            Not After : Mar  8 23:46:57 2026 GMT
        Subject: CN=69a4cff2-ac81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:90:8e:b8:51:a3:1b:de:37:0a:b4:60:19:
                    5d:19:cf:08:3c:6e:b6:07:c7:81:24:6f:db:06:20:
                    e3:f8:bb:73:24:ef:4b:60:6f:ac:b3:17:67:8d:33:
                    ab:5a:04:a5:d6:1f:52:f6:ae:40:08:ee:0d:c7:be:
                    5d:44:0c:44:66:2f:70:07:3b:d0:bd:96:18:fe:6d:
                    b8:0d:9e:0c:84:5a:86:9f:2f:fe:05:cb:b2:67:e8:
                    6b:64:43:6f:65:21:28:2d:1f:7c:ec:6e:a0:5d:e1:
                    ae:cf:0a:70:e8:cf:24:3b:95:3b:d2:ee:0f:29:3d:
                    8c:f8:ec:eb:7e:90:f4:8c:0d:27:e9:05:70:0f:bd:
                    02:26:7a:ce:eb:47:ee:e7:8e:c7:7c:d6:76:cf:fa:
                    53:23:de:18:a7:fc:aa:44:9f:82:57:98:ec:70:25:
                    fc:ff:d8:81:74:f3:2b:2e:ff:4d:91:18:42:46:77:
                    aa:fa:19:5a:16:ff:46:5a:9d:a3:c9:60:2f:36:66:
                    84:4e:95:23:10:a4:4f:6c:7a:29:77:eb:38:b9:ae:
                    e4:57:56:39:ee:eb:13:30:0e:72:a6:52:64:85:b9:
                    1b:93:ed:0f:7c:72:dd:a4:e7:44:89:00:11:d5:cb:
                    65:0c:f1:b2:70:73:d8:1e:2f:87:e3:73:f2:00:a8:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3E:35:05:22:06:28:53:20:D3:E8:68:04:7B:5E:1D:51:53:11:15
            X509v3 Authority Key Identifier:
                keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:24:bc:1f:90:5c:16:dc:05:0e:7b:d4:34:b8:40:b5:b8:20:
         3f:e0:2e:cf:ca:39:a0:c9:59:af:d6:5c:fe:4c:07:94:bb:cd:
         a7:82:be:10:f9:76:7f:74:e5:f5:9b:fb:2a:32:ad:c9:70:63:
         3a:18:a9:de:4e:ea:81:f7:34:4b:d6:cf:cc:8d:30:fd:23:27:
         00:7e:c1:f3:34:a6:3e:20:2a:8d:4c:b5:c7:54:54:f4:7c:28:
         17:13:25:5f:f4:66:6e:90:45:c8:3e:7d:c6:6a:c5:7b:9a:af:
         0f:04:9a:ec:e8:bc:81:ab:0e:70:33:7d:4e:b4:86:c3:2f:7b:
         78:3f:35:f8:17:c6:06:cc:39:6f:12:96:70:67:c0:82:77:81:
         53:56:16:2c:60:ca:ae:c2:d4:fa:44:dc:37:f1:7f:e1:01:6e:
         9c:e1:21:3b:61:dd:cc:04:5d:67:b5:1b:63:d0:87:67:78:f3:
         1a:7e:f5:35:d1:d4:b3:a1:89:dd:67:3b:00:39:3b:c0:10:5d:
         8e:56:98:2a:d7:b5:09:cb:42:c3:6b:6f:2f:a0:3b:55:59:b7:
         c4:a4:7f:7f:d1:89:52:a3:11:4f:cb:3c:fb:ec:b5:16:27:87:
         56:12:c0:0e:a3:1b:cb:06:39:a7:39:6b:38:68:81:b6:cb:c3:
         2c:a9:a9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:47 2026 by rpki-client