Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File:                     exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier:          VSSxeVx79cVWS5zFuSwfU/PneGd9FOzO+DK+j3bjnYE=
Subject key identifier:   59:98:49:EE:7F:2C:DF:D3:DA:B8:DA:43:F9:DE:BE:4D:AE:D4:42:6A
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer:       /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number:          027A
Signing time:             Sun 01 Mar 2026 02:29:48 +0000
Manifest this update:     Sun 01 Mar 2026 02:29:47 +0000
Manifest next update:     Sun 08 Mar 2026 02:29:47 +0000
Files and hashes:         1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: 6tH9EREfiywal777FcDCCUsSpjCLlcNzouXcx+anEbM=)
                          2: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: uCYT4lQMur/tG8/It9xxnzgoilgSXb5cLxgwmOVEMs8=)
                          3: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: G6Wgfmuf7isN39qtMPKHSSoxC3J+volHlymr2bVvLnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
                          rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
        Validity
            Not Before: Mar  1 02:29:47 2026 GMT
            Not After : Mar  8 02:29:47 2026 GMT
        Subject: CN=69a3a49c-5a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3f:e4:83:46:cc:0c:aa:e6:ba:9b:26:3a:cd:
                    51:41:8f:70:a9:0b:6b:dc:b7:18:94:06:af:13:02:
                    b6:5c:36:35:f3:44:80:ac:fd:7a:d0:8d:83:73:76:
                    1d:a3:70:22:a1:7a:e6:66:86:fd:0b:57:2a:31:55:
                    bb:12:40:a7:23:52:b3:f7:90:c9:10:e4:86:ec:7b:
                    08:20:05:ef:cb:93:d8:e3:53:a0:3a:9e:2a:91:7c:
                    d5:da:fd:c5:2e:41:9c:62:85:c8:5e:51:34:e3:d7:
                    39:65:70:49:6a:31:17:d8:86:11:7e:da:e0:1e:0a:
                    3b:b5:f6:b2:15:d9:65:af:0d:64:82:f2:22:52:d1:
                    39:c6:5a:75:3e:8d:ca:f4:18:d5:18:43:40:0d:d1:
                    cc:8b:64:ad:56:45:30:05:f1:c5:ae:b4:90:ff:7e:
                    47:50:92:7c:46:6a:94:9d:ea:81:dd:a0:67:ef:bb:
                    3a:a1:3e:1e:f9:5a:6a:8f:fc:30:b9:78:ea:18:5d:
                    c2:40:2e:22:8d:04:42:6d:48:28:41:02:6f:f0:1d:
                    2f:e5:5b:a8:4f:98:6b:fa:3e:27:40:ed:09:3b:b2:
                    d0:ae:e5:5b:1f:95:cd:cf:01:df:bd:38:30:5d:b7:
                    12:a9:e1:1c:78:1f:9a:73:e6:d8:1b:ee:07:90:24:
                    d8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:98:49:EE:7F:2C:DF:D3:DA:B8:DA:43:F9:DE:BE:4D:AE:D4:42:6A
            X509v3 Authority Key Identifier:
                keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ee:b9:38:5c:6d:1a:ba:f0:f4:c4:b0:35:9c:c3:00:a5:b9:
         34:da:09:d0:17:1d:d1:7a:82:40:c3:96:9f:fe:0e:7d:d4:07:
         d3:a0:99:a9:a8:6d:a5:e6:c8:e8:17:cb:d9:f5:03:fd:7b:46:
         5e:1d:a6:5f:90:47:90:ca:67:f4:49:40:74:f6:56:95:7c:0a:
         be:b8:46:fa:75:6e:ab:8d:e1:9f:6c:ee:22:78:fd:06:5e:a3:
         97:b0:ab:66:c0:e8:6d:0f:3f:63:86:d4:6b:d8:ee:e7:aa:1c:
         f0:d4:34:d3:93:c4:4d:80:a2:dd:93:e1:74:85:5a:2b:9d:17:
         5c:3b:9e:17:cc:f1:3b:51:db:c5:e6:ec:4c:ed:a1:14:6f:6e:
         fa:57:fd:d6:c5:20:f3:f7:64:b2:42:3b:74:78:9a:7e:09:53:
         78:3b:42:36:47:40:8b:36:4c:56:5a:f6:d4:6b:f1:93:5e:3e:
         48:53:5a:15:fb:d2:6f:81:3c:60:ab:72:c3:8f:21:49:3d:f6:
         3e:59:9b:ba:7f:1a:91:fa:38:33:83:d4:e1:07:71:f8:2c:8f:
         6b:97:ab:4d:4b:75:18:8a:d4:53:36:b3:f6:3e:e1:cd:04:83:
         ac:32:5d:78:b0:06:b6:14:ca:2a:04:ea:0d:1c:21:70:eb:cb:
         43:f7:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:20 2026 by rpki-client