Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
File:                     cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json)
Hash identifier:          x5/Wt2zmjdKVG8K5PwEmxeTXkC8SHtm6T0Xrzr0QScM=
Subject key identifier:   E8:7F:C3:0C:5B:9B:B5:FC:77:F9:03:11:BC:E8:7D:BC:A3:65:E0:7D
Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6
Certificate issuer:       /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
Manifest number:          01EF
Signing time:             Mon 02 Mar 2026 03:00:10 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:07 +0000
Manifest next update:     Mon 09 Mar 2026 03:00:07 +0000
Files and hashes:         1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: mb32VifhaI8VZsd6Ie7LO+0FUux5WMxPl37MtldBic4=)
                          2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: oX5jPgoEnJEiktMzwRJVvIVKVxoixwhb1Y5ipQvJJlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl
                          rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
        Validity
            Not Before: Mar  2 03:00:07 2026 GMT
            Not After : Mar  9 03:00:07 2026 GMT
        Subject: CN=69a4fd39-10ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:4b:ec:fe:c2:fd:fd:c5:94:62:96:45:aa:
                    30:22:3b:b3:d6:e8:04:47:d0:06:7e:66:92:44:a3:
                    3b:bb:c5:d6:d6:6c:f5:e1:18:09:56:d0:7a:ce:e4:
                    e7:d2:5d:04:db:79:06:9e:28:96:c8:d1:82:93:d4:
                    e0:58:8f:13:2c:8a:d9:cf:a7:b2:a5:66:0a:3f:e6:
                    2f:e6:b7:c3:39:b4:30:48:e6:50:22:41:de:eb:fc:
                    7c:e2:4f:71:d2:01:34:5b:63:18:42:7a:a5:83:5c:
                    9f:8e:42:36:a6:8a:a3:09:65:fd:e0:72:66:13:5f:
                    4d:81:bd:63:b1:d8:70:7a:06:64:9c:e5:31:85:99:
                    85:21:d3:52:a2:0a:df:01:d9:37:9f:9c:26:bf:93:
                    61:a6:f4:b6:ae:cb:b0:7d:86:38:4f:d5:64:d3:1c:
                    39:bc:bc:8e:50:ac:86:16:8b:9e:97:c1:4e:d2:7e:
                    f5:95:e9:05:32:34:f8:c3:18:fe:57:ca:fa:75:3c:
                    45:28:4b:0a:73:d1:d6:1b:34:5d:48:f7:ab:69:82:
                    fb:9c:08:cd:59:2e:49:11:7c:e1:2e:40:9c:15:2b:
                    2d:8a:8c:26:fb:12:b4:f2:72:db:17:95:c5:63:b0:
                    83:5e:99:c3:1e:19:3a:20:6a:cf:69:fa:1c:95:a4:
                    13:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7F:C3:0C:5B:9B:B5:FC:77:F9:03:11:BC:E8:7D:BC:A3:65:E0:7D
            X509v3 Authority Key Identifier:
                keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:de:c5:ba:8c:7b:c9:e7:25:74:c5:a1:0c:f7:0f:7c:cf:6f:
         d4:7f:73:1f:c7:ba:e4:09:86:4f:90:15:a0:39:ba:72:1b:ae:
         b2:a7:b5:d5:0c:f3:f1:dc:ca:fc:ee:a4:f2:7a:d5:a5:75:eb:
         02:92:5d:30:25:d2:10:60:18:5b:55:f7:b2:af:e4:eb:74:22:
         c8:59:c3:c9:58:30:e3:45:2f:32:d2:f4:f7:df:7c:95:ce:a4:
         db:8a:ce:98:83:34:29:df:22:63:e1:64:80:18:55:4a:d2:6a:
         7c:ca:f5:f5:33:26:82:62:ca:d6:9e:61:50:1a:4d:17:b0:da:
         ea:fe:1a:b2:f5:1a:2e:1d:3c:00:f8:07:ed:ea:55:ff:31:a0:
         5a:d3:d2:fe:41:d8:9c:d0:92:13:94:fe:ad:24:20:39:f6:78:
         4f:d4:e9:07:a0:89:f7:a0:2f:c0:3f:47:7b:b0:0c:9f:08:6a:
         ab:2c:98:52:7c:26:14:f7:a9:42:f0:66:3a:a5:12:df:45:16:
         f7:37:8a:2b:74:a6:11:a6:93:fb:3e:ac:32:db:06:21:84:e3:
         90:94:8e:35:80:ca:66:2c:a8:a7:18:76:7c:1f:29:e9:0d:ba:
         af:67:cb:e5:f9:89:2f:b0:45:c9:6b:e4:b7:0e:df:f9:03:0d:
         01:3a:ff:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:21 2026 by rpki-client