Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
File:                     -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json)
Hash identifier:          Veup60Cm13DTrH1rPAu9w88bbU5HNBXI2x3F/M6pnBQ=
Subject key identifier:   FA:A6:CA:D7:BF:4A:18:F2:0B:F7:C4:AB:78:60:EF:14:1D:2B:13:CC
Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
Certificate issuer:       /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
Manifest number:          0180
Signing time:             Sun 01 Mar 2026 05:34:02 +0000
Manifest this update:     Sun 01 Mar 2026 05:34:01 +0000
Manifest next update:     Sun 08 Mar 2026 05:34:01 +0000
Files and hashes:         1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: S4YEUpv6jpuh19JMbKcpFBTz7ScAmxu1f2S9ZzK/epY=)
                          2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: 78U/w57PvT+FVEdRzkbgRL49bNVYISozUZOyQlDFcE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
                          rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
        Validity
            Not Before: Mar  1 05:34:01 2026 GMT
            Not After : Mar  8 05:34:01 2026 GMT
        Subject: CN=69a3cfca-24e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ae:2b:8f:32:2f:85:37:e8:e4:f8:04:a1:1d:
                    aa:39:f7:3f:26:46:46:01:ca:a1:30:70:63:0c:b5:
                    c2:58:64:44:e1:7e:fc:fe:e7:5c:a6:c5:23:52:32:
                    06:d8:41:6f:d4:69:2f:a3:e4:97:30:45:fc:af:8e:
                    fb:38:e9:fc:ba:85:19:05:a4:fd:aa:d5:11:27:69:
                    36:2b:b2:0d:da:ff:e1:df:3c:50:af:7c:2e:b4:82:
                    8d:c1:48:88:8e:4c:f8:f3:8d:50:22:ef:02:13:0f:
                    d6:a6:ce:34:52:23:53:4c:7f:a8:0e:d7:5e:a7:f5:
                    30:54:06:34:c5:89:65:83:b3:8a:d3:ac:61:ba:69:
                    6d:95:89:f0:fc:fe:93:1c:ca:7b:ce:71:e1:75:42:
                    30:34:6a:5f:d6:fb:72:81:90:23:fc:1d:17:9f:e2:
                    fa:33:da:95:3b:c1:49:f5:a8:da:f9:b6:3b:ef:2a:
                    d8:85:cb:42:cf:8b:00:00:e8:17:dc:78:f7:d5:ed:
                    88:9f:c6:b1:ae:4f:f7:7b:46:36:23:3f:a0:6e:09:
                    ac:11:59:f2:c8:93:4e:02:95:12:a1:66:89:f9:90:
                    7e:0a:2f:07:0c:1f:b8:0c:7d:8b:e6:f8:86:35:98:
                    a8:7c:8d:d6:f0:44:73:6a:7b:99:74:20:d1:a6:fc:
                    18:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A6:CA:D7:BF:4A:18:F2:0B:F7:C4:AB:78:60:EF:14:1D:2B:13:CC
            X509v3 Authority Key Identifier:
                keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:53:49:3b:69:b1:8b:d5:bd:e0:b3:03:6b:19:a7:56:f9:
         e1:89:5e:21:f5:e4:f3:90:21:44:be:96:7a:61:b7:67:71:c4:
         cb:d1:f9:8b:1a:67:ed:aa:4f:6d:8c:b1:1b:e6:df:38:56:a9:
         86:91:0c:f1:fe:ea:99:9e:6a:6e:a7:62:84:a8:cb:88:15:fa:
         49:ef:ba:e2:15:b0:79:8e:57:31:e7:77:d0:30:3b:d3:d0:a5:
         6f:03:f2:87:79:4e:97:14:c9:73:c4:d5:d7:c6:d9:b7:1d:ef:
         78:09:84:44:44:c5:e3:32:67:73:7a:c6:f8:9b:c9:1d:f2:8f:
         3a:88:40:b7:95:49:39:b0:bf:17:ba:bb:72:35:67:cd:0e:d9:
         06:83:9b:d9:e0:0f:ab:60:72:ad:7a:c0:58:66:cb:66:73:77:
         6a:3d:f6:81:b0:3f:6b:9c:20:9f:43:b6:b9:01:d8:ec:5f:45:
         33:10:12:5b:5a:a0:39:da:0e:e5:a2:14:cc:1b:01:59:4c:7e:
         8a:7d:f6:7e:3e:c2:14:a5:3a:b7:57:f5:27:78:db:b4:7c:96:
         c5:fc:02:be:71:19:6b:cf:cb:95:18:b1:c5:8c:bc:22:ed:1e:
         93:2e:f2:71:d7:04:a4:1a:96:fc:2b:87:95:b6:e5:7b:a7:01:
         61:43:09:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:12 2026 by rpki-client