Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File:                     xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier:          4egaIlFDO99rD8CemOT/t+ofMbfEG6dunncnEyMg7jQ=
Subject key identifier:   20:3F:C6:6C:45:F9:39:5D:BB:EC:77:81:D1:1F:29:42:67:35:2F:B2
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer:       /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial:       354A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number:          3531
Signing time:             Sat 28 Feb 2026 14:20:09 +0000
Manifest this update:     Sat 28 Feb 2026 14:20:09 +0000
Manifest next update:     Sat 07 Mar 2026 14:20:09 +0000
Files and hashes:         1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: 3E+x7dRF+QPzucyuy6tCXKZDW9x5+40GpyBOh8PHrCc=)
                          2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: yi83MC4bGsYsYYIO3cLCV7chmo/rO1rwAJjntq4bNoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
                          rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13642 (0x354a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
        Validity
            Not Before: Feb 28 14:20:09 2026 GMT
            Not After : Mar  7 14:20:09 2026 GMT
        Subject: CN=69a2f999-19a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:70:77:04:71:34:30:8f:74:fa:e1:8b:ba:76:
                    da:0d:99:5a:6d:30:89:3f:d1:3c:c6:cd:f0:cd:09:
                    3f:ca:e3:40:19:9f:8f:73:c6:71:58:48:8c:16:86:
                    bb:51:3c:8f:17:91:11:ab:b1:31:48:fe:8f:54:ab:
                    68:93:f9:f3:46:5e:86:a7:bd:89:46:f7:e0:6d:4c:
                    3b:d2:6c:87:50:0c:1b:ef:66:c6:58:34:f8:a8:be:
                    0e:e7:4e:e4:03:21:c8:78:8e:c6:05:90:cf:4a:bc:
                    93:dd:c8:dc:9e:5b:82:97:d8:b8:bc:f1:4d:23:b6:
                    46:8d:d7:b0:a8:93:39:6d:a6:b8:9d:69:d7:d0:32:
                    18:47:76:1a:06:64:ac:35:69:3e:78:e9:6a:30:07:
                    25:b9:57:1c:ef:24:4d:e5:09:3a:cc:b7:30:09:ff:
                    bc:ab:a6:20:66:07:fa:16:8f:2d:15:20:eb:0c:71:
                    d7:77:78:81:30:9f:bf:9a:69:0a:0f:bb:72:bb:7c:
                    18:b9:0c:77:e3:d8:ce:86:2b:09:48:b3:31:5a:6e:
                    23:1c:fa:31:3e:c5:df:c7:d6:c0:fd:ee:14:b3:0b:
                    b1:97:97:ec:62:78:8f:1c:18:5a:1f:a5:a4:db:77:
                    78:0a:86:ca:a9:88:6d:e0:15:5c:88:02:5f:3d:b3:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:C6:6C:45:F9:39:5D:BB:EC:77:81:D1:1F:29:42:67:35:2F:B2
            X509v3 Authority Key Identifier:
                keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e1:81:62:25:54:4d:f8:cc:c1:12:5f:84:ff:29:3d:63:59:
         69:bc:2d:15:00:86:84:4e:cc:91:7d:4e:59:9a:19:a7:92:56:
         d7:64:dc:18:14:21:16:14:57:69:93:d1:7f:b3:e7:9e:55:60:
         d9:f9:f9:8f:f2:64:85:bf:22:ab:ed:10:cb:87:92:81:36:8f:
         02:a4:6c:d8:5f:a7:ca:0f:01:86:cb:70:50:67:cf:1f:25:21:
         4d:d0:81:67:dc:d6:9c:67:43:0d:6b:34:2c:fd:89:de:3f:db:
         b3:98:21:50:da:d1:cd:8f:91:2c:2b:91:71:7e:74:31:6e:83:
         bf:52:d4:cc:4b:ea:21:c3:7e:49:5a:ab:aa:9a:6e:01:11:e4:
         f6:d6:bf:11:a0:a6:13:38:fb:c7:7d:65:d9:b4:a0:5a:11:63:
         e9:7d:56:b0:11:d8:62:53:23:3f:dd:d9:d3:a5:7b:8c:20:46:
         f0:49:4c:95:6c:c7:12:91:2f:6a:f7:3a:5b:05:14:05:52:45:
         0d:61:66:75:ff:8d:6e:5d:a3:e1:93:05:1f:d9:00:0f:72:56:
         57:f2:97:9d:1c:1e:73:e5:ba:e4:1e:c8:e7:04:b5:60:77:a0:
         7d:30:76:d4:51:36:7a:c6:fb:60:0c:51:4a:c9:d5:44:a6:09:
         a6:8b:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:03:36 2026 by rpki-client