Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File:                     ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier:          hdbpfnSextxBuTWlY8aSYDvzhRaafDj9d747Tj4s7bk=
Subject key identifier:   48:E2:F8:32:83:64:09:FD:58:09:59:15:C9:F6:6F:29:E0:93:94:20
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer:       /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number:          020A
Signing time:             Mon 02 Mar 2026 00:42:59 +0000
Manifest this update:     Mon 02 Mar 2026 00:42:57 +0000
Manifest next update:     Mon 09 Mar 2026 00:42:57 +0000
Files and hashes:         1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: w9mRud87JBe8Luddz/6rNDjbAwluF2LhGkGxl8sMrnY=)
                          2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: QWRcixf8QLc7IkGmviGZNSC4YSR65CJzVUK/LtjPM4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
                          rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
        Validity
            Not Before: Mar  2 00:42:57 2026 GMT
            Not After : Mar  9 00:42:57 2026 GMT
        Subject: CN=69a4dd12-dd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:54:7c:c9:a4:02:b1:27:85:43:e2:94:dd:
                    97:7e:24:b4:2e:6a:13:fa:d3:b2:cb:f1:75:74:2a:
                    91:79:8f:ee:60:bd:a3:75:b7:ff:69:74:5d:31:88:
                    fe:f6:e0:f6:56:9a:69:b1:81:4f:d1:35:00:96:76:
                    6e:79:b8:8d:31:d7:00:ba:40:eb:91:04:d0:99:69:
                    8d:ee:7c:a8:03:ed:84:66:b3:58:8c:ae:24:65:b2:
                    49:cd:ef:3e:4a:31:bd:fd:e1:8c:82:ae:42:4a:29:
                    93:52:c3:3b:b5:24:03:51:14:57:13:79:94:c1:37:
                    7a:ff:06:d2:3d:db:94:6a:2e:08:9f:2f:77:e4:88:
                    6e:64:be:0e:ed:b8:ac:d4:5d:03:3c:df:ef:f4:e6:
                    50:1c:51:b7:ea:ab:1b:75:7c:7f:79:51:cf:8a:82:
                    d2:83:d5:7c:40:ec:67:a0:b5:3c:4b:07:e8:21:ea:
                    9c:1f:25:61:3c:00:37:77:24:75:99:f8:c7:ec:79:
                    9e:b5:77:24:ba:a0:b7:ab:11:0e:ee:60:cd:9f:8a:
                    c8:4f:28:b5:08:ca:1b:b5:51:c4:71:cd:a9:8b:e7:
                    9e:56:78:a7:84:d1:84:0b:48:a1:28:09:5e:51:c1:
                    1d:30:4c:c5:12:88:cb:b9:bd:ac:38:ad:c2:74:c1:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E2:F8:32:83:64:09:FD:58:09:59:15:C9:F6:6F:29:E0:93:94:20
            X509v3 Authority Key Identifier:
                keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a3:b9:56:7a:b6:1f:15:f2:f0:62:e0:76:30:d1:ef:67:17:
         a6:79:07:0a:6f:ea:cf:8e:6b:7b:e4:12:a4:8f:2e:9b:f2:d6:
         48:3e:78:f1:29:cb:38:35:9c:25:99:9f:4a:d1:96:3b:d0:9f:
         7a:dd:d3:68:bc:b3:06:47:62:2d:2f:a4:50:d0:a6:e6:ca:14:
         d3:2c:d2:cd:85:ba:55:17:c2:6b:34:c7:ab:9f:ae:fd:16:1b:
         cc:97:a8:5f:d3:5a:0c:78:c4:bd:bc:d7:8f:8b:8d:39:a4:5b:
         01:e5:0d:74:c1:3e:c4:57:02:07:4b:0b:40:6a:04:7a:dd:9b:
         1a:4b:17:03:1b:d8:d9:08:cb:b0:96:1c:40:a2:20:7e:26:a1:
         44:cf:13:b1:a3:64:c7:1c:7b:2b:cf:52:86:92:6f:97:a3:96:
         2f:aa:38:8b:6b:1a:6d:9f:3e:0f:d8:1f:1e:23:8e:96:35:ac:
         de:6e:c4:48:2d:af:7f:12:fc:06:87:89:db:3c:04:f2:6c:d1:
         45:06:25:12:9b:a8:6b:21:92:62:5b:52:7e:27:55:1d:ca:c6:
         23:2f:46:88:e4:98:1b:c3:97:68:11:5a:66:e1:68:8a:10:8d:
         e5:8c:d7:4b:9d:5e:f6:ec:8c:7b:1d:84:6a:4d:8e:9b:b0:a4:
         ac:52:53:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:08 2026 by rpki-client