Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
File:                     Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json)
Hash identifier:          EdQSMgDzIyt0kkrvxo/3+nFiSeu/FNZcyMW/OCCDx/s=
Subject key identifier:   D6:FE:E0:6C:56:F2:8A:1D:37:EE:84:1B:6C:DF:0D:83:D8:D9:91:00
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Certificate issuer:       /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial:       0834
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
Manifest number:          0817
Signing time:             Mon 02 Mar 2026 00:42:34 +0000
Manifest this update:     Mon 02 Mar 2026 00:42:31 +0000
Manifest next update:     Mon 09 Mar 2026 00:42:31 +0000
Files and hashes:         1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: uieyPRQvp0++QQr12Mns+PB38Ae3KbZtKX1mzhIfQ/Q=)
                          2: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=)
                          3: 7AAA8154000311F191DFD8AE3C6F56BC.roa (hash: x6G+iXovRti/BntEfhaZ6wM5ntzRbJdW9j8h7+t6XG0=)
                          4: 7A299148000311F191DFD8AE3C6F56BC.roa (hash: CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
                          rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100 (0x834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
        Validity
            Not Before: Mar  2 00:42:31 2026 GMT
            Not After : Mar  9 00:42:31 2026 GMT
        Subject: CN=69a4dcf9-6cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:15:27:be:b9:d0:40:d5:05:ad:38:80:e2:6c:
                    81:50:7d:77:1b:b5:11:d9:73:12:31:28:df:73:70:
                    92:90:0b:5d:7b:f5:d2:d0:b5:62:d5:69:6f:8c:70:
                    9f:0b:35:e5:82:0d:92:74:f5:a2:0c:a9:ea:9f:10:
                    0c:7e:85:de:f3:30:67:ce:98:1e:6e:a6:07:2c:79:
                    d3:c5:d5:94:eb:fa:69:17:70:a4:32:6f:95:5a:13:
                    04:8d:e1:a2:b4:e4:65:e4:d4:a4:e8:fe:91:da:f7:
                    9a:7d:a4:d9:54:de:c6:48:0e:31:89:8a:f0:f9:2c:
                    1c:4e:f8:05:11:73:ad:45:d1:b7:0a:da:58:0e:09:
                    20:c7:0d:a5:0c:de:6d:49:8a:32:cd:d5:2b:04:05:
                    53:8c:70:ab:8f:9b:ce:6c:10:57:ae:77:c4:17:d8:
                    f7:ff:f6:7e:e7:2b:23:43:4d:2e:c0:b3:96:6d:30:
                    2c:21:eb:e7:f1:39:1d:59:96:4d:4d:8d:9c:fb:24:
                    50:bf:28:ed:d5:c5:b1:ca:3f:26:83:ff:7b:86:29:
                    52:22:ff:19:98:db:2e:8c:ae:31:06:8d:20:02:97:
                    f7:43:97:06:c3:42:e7:40:c4:07:8a:01:3c:18:1e:
                    62:0b:62:4a:71:2b:b5:76:c4:d0:23:34:dc:2e:1c:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FE:E0:6C:56:F2:8A:1D:37:EE:84:1B:6C:DF:0D:83:D8:D9:91:00
            X509v3 Authority Key Identifier:
                keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:49:be:14:92:03:64:2e:04:44:c7:51:f8:59:28:30:64:30:
         f0:d5:bb:da:b0:5f:d0:c5:33:f4:30:b3:4c:c3:88:5c:f1:8c:
         8d:4e:a0:db:9d:6c:24:5e:6c:f1:44:7e:d8:96:6b:a3:e7:86:
         ee:11:f2:7d:ce:02:90:a7:a3:e1:16:2a:df:48:9a:18:ff:44:
         bd:b7:66:88:07:ed:93:ed:ac:79:33:0e:8e:84:97:01:56:9a:
         ac:a2:ac:96:cd:57:bd:1f:9c:a7:9c:24:e2:76:f9:64:e6:93:
         8f:60:f5:e8:5f:90:e4:ca:06:a7:d4:a8:f6:d1:70:4c:af:cd:
         45:35:9d:b8:c0:3a:03:c8:f3:5f:ee:79:5c:91:9e:43:ff:21:
         80:8f:fa:e4:2f:8f:6f:11:a9:5f:13:4f:1b:5b:bc:5c:1c:6d:
         c2:49:da:f5:a1:6f:95:43:e2:22:21:1d:95:d8:77:da:e9:5b:
         77:19:34:ea:96:f7:b5:fa:03:28:bf:9b:1e:a8:af:c9:50:83:
         90:b5:f8:fe:67:2e:df:60:6a:a7:93:30:23:4c:90:21:eb:e7:
         60:30:0c:c9:be:94:4f:aa:dc:57:c5:87:1e:e2:a4:0d:9c:4e:
         12:67:bf:ab:91:c6:10:8d:c0:9c:f4:ad:10:73:a9:58:21:bf:
         fb:11:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:53 2026 by rpki-client