Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
File:                     wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json)
Hash identifier:          s4I7eRAZGE2eo1nmNNMAExVinbt2kTynnolBLR9CHWg=
Subject key identifier:   21:52:4C:3A:74:02:C6:0A:25:50:6E:DC:8B:7C:B6:4F:D1:3E:0D:9B
Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
Certificate issuer:       /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Certificate serial:       0946
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
Manifest number:          0A3E
Signing time:             Mon 02 Mar 2026 20:06:19 +0000
Manifest this update:     Mon 02 Mar 2026 20:06:19 +0000
Manifest next update:     Mon 09 Mar 2026 20:06:19 +0000
Files and hashes:         1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: XRH+pyQHwIODdqdcDIWY7LCZNnVsWhuUQhH/JOXvzCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
                          rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374 (0x946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
        Validity
            Not Before: Mar  2 20:06:19 2026 GMT
            Not After : Mar  9 20:06:19 2026 GMT
        Subject: CN=69a5edbb-ee9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c4:b2:1c:81:80:2f:89:f2:ff:8e:6c:41:89:
                    e5:86:00:fe:58:e9:5e:76:68:c0:61:53:5f:cd:2a:
                    56:35:c6:ee:7b:af:a9:5e:db:09:8d:2c:87:f8:e7:
                    a3:90:a8:3a:c3:d5:cf:85:fd:45:13:74:74:5e:38:
                    5e:02:b8:f9:4d:ec:a9:85:dc:93:b5:6b:bc:6c:bb:
                    03:6b:4c:6a:2c:45:ee:4a:b5:42:92:b0:c5:29:9a:
                    36:77:f0:12:a3:ef:b5:56:41:69:85:66:c8:0b:57:
                    ad:25:10:30:17:93:3e:58:b0:ab:a0:e8:51:3b:b6:
                    38:e3:81:db:7c:23:7d:8e:a2:bb:bc:fd:a8:57:e5:
                    78:25:3d:e4:39:43:5d:19:c1:1a:55:c1:7e:88:65:
                    7e:ed:93:54:fd:2d:51:16:d3:e6:7e:df:e8:46:04:
                    6f:0d:d3:13:e6:5b:30:c7:3f:fc:c2:be:39:4e:6e:
                    9b:58:fe:6a:9a:46:4d:0b:c5:45:5b:ab:45:f1:d5:
                    29:d5:22:af:75:1a:ed:c7:60:d0:6d:a9:8b:da:3e:
                    9c:e1:e7:e3:04:5d:1d:97:62:cb:81:d9:79:34:d5:
                    54:bf:82:ce:fb:cc:82:82:ec:8a:03:8a:c0:5a:c3:
                    4d:3a:b6:53:c5:96:b4:ea:06:67:2a:eb:97:95:6a:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:52:4C:3A:74:02:C6:0A:25:50:6E:DC:8B:7C:B6:4F:D1:3E:0D:9B
            X509v3 Authority Key Identifier:
                keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:93:37:fd:cf:6d:7c:41:0b:6a:01:b0:b9:24:d0:3f:00:b6:
         d4:66:6f:4b:d6:53:f6:26:d6:f2:71:f8:35:ba:e0:0e:79:b5:
         bf:7f:36:a0:9f:77:46:25:46:11:30:e4:10:e1:31:49:c7:18:
         ad:24:da:cd:bf:9e:56:7d:13:a5:79:29:86:c2:5b:25:85:cb:
         00:5d:c0:6f:7c:ef:72:23:16:3d:c7:b9:35:99:7b:db:e4:c3:
         7c:8a:6b:7a:0a:9a:62:86:12:2c:b4:ff:af:90:a7:52:92:1e:
         cb:6d:88:e2:60:75:13:0a:d1:b0:e5:56:a9:01:a7:93:13:4c:
         48:37:c4:cc:7a:4c:56:95:af:f9:97:99:51:b4:38:c7:d5:6f:
         2e:44:18:1b:39:f0:5a:89:0c:b0:19:91:ab:4d:d6:09:db:7b:
         33:0d:e6:d1:7b:22:a4:1b:b2:6a:a5:fe:f7:25:05:c1:1e:00:
         90:fb:ac:34:85:4c:37:8f:33:83:36:54:bb:80:20:f6:db:03:
         39:13:12:a7:21:fa:67:98:ba:17:d7:77:7e:2e:aa:c8:81:64:
         c3:57:b5:ef:2b:c9:00:fe:ef:a0:f1:48:bc:51:bb:59:c1:3b:
         0c:10:03:b0:43:51:c9:de:fe:aa:7d:34:70:3b:33:23:50:80:
         c9:ae:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:45 2026 by rpki-client