Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
File:                     j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json)
Hash identifier:          YWnBI//gIW59riHlZWWyx1+B0QmeFH7vbTJpQsDJLlc=
Subject key identifier:   8D:A9:A3:DD:61:DA:99:7A:27:07:FC:CF:CB:1A:C4:9B:93:16:87:0E
Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
Certificate issuer:       /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Certificate serial:       08E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
Manifest number:          08E1
Signing time:             Mon 02 Mar 2026 02:50:45 +0000
Manifest this update:     Mon 02 Mar 2026 02:50:43 +0000
Manifest next update:     Mon 09 Mar 2026 02:50:43 +0000
Files and hashes:         1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: Ythdv9Mxj6dq5iPW1ofI/7gJ9oPeY2CE/kCZYigsezg=)
                          2: BA33C4CC638A11F090002541C4F9AE02.roa (hash: SYp3+Qw2NUOxAP2PI8VyKC4eZrJ7XxwyTmQykIlzc3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl
                          rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280 (0x8e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
        Validity
            Not Before: Mar  2 02:50:43 2026 GMT
            Not After : Mar  9 02:50:43 2026 GMT
        Subject: CN=69a4fb05-e768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:f6:69:de:6c:8a:e0:de:b4:e7:3a:9d:c3:
                    f5:ef:ac:e4:32:41:27:cc:b0:51:dc:d1:aa:04:69:
                    17:34:75:53:cc:1a:2c:fe:d2:fd:46:2f:2e:9d:d2:
                    ac:ff:0d:6a:5c:eb:bb:83:25:ee:a0:1e:79:65:a2:
                    70:2b:b4:d4:3b:e4:8b:42:c1:26:3d:e6:bd:5c:6b:
                    a2:28:6c:65:23:52:0c:26:9c:e6:b7:67:47:57:66:
                    14:c1:d9:ac:bc:bb:7b:95:bf:21:8e:d9:78:b2:42:
                    8c:62:32:75:3d:5e:88:34:e3:e3:f3:03:48:b7:de:
                    97:68:c0:fa:aa:e9:1c:cf:20:06:17:8c:4c:0f:99:
                    59:c5:4e:75:31:97:82:3b:bf:d2:b0:51:8f:95:45:
                    8a:f5:39:10:73:51:a2:d8:5d:45:f4:27:32:95:44:
                    df:96:a2:42:82:c9:dc:06:ea:b4:0c:9b:3d:13:2f:
                    e6:0c:77:08:62:cf:80:82:8f:78:7e:76:a0:e5:c4:
                    6e:14:8c:29:12:96:15:fc:8f:46:e5:17:d8:0c:19:
                    89:d3:63:10:d3:cb:83:d9:4b:d5:92:cc:a0:bb:d8:
                    59:7c:25:61:7d:41:ec:f4:9e:be:17:d2:d0:9f:f5:
                    01:95:c2:5f:2c:e7:1b:d4:91:36:87:6e:71:34:56:
                    af:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A9:A3:DD:61:DA:99:7A:27:07:FC:CF:CB:1A:C4:9B:93:16:87:0E
            X509v3 Authority Key Identifier:
                keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:95:be:a0:9b:9b:54:41:2f:4d:3c:00:59:2e:92:62:a0:e0:
         01:11:f9:cd:5f:d7:bc:0a:54:b4:dd:8d:87:cc:75:2f:69:05:
         df:b5:7d:cb:8e:84:3b:1e:3e:9d:04:d3:c2:98:77:fe:1f:1c:
         47:a5:88:82:01:a8:c8:d3:61:23:c8:da:2f:18:7f:8f:c1:8a:
         6a:42:7f:1e:f2:85:87:47:1e:ee:64:6a:3e:fa:2b:4d:19:55:
         f4:4b:ba:65:31:c7:33:af:fa:f9:79:35:9e:75:9d:6b:60:09:
         5b:00:23:b3:b8:90:bb:ea:78:7b:f8:45:0b:4e:53:b8:e6:cd:
         b6:32:18:b7:40:67:e5:e7:bc:0a:9c:71:78:24:13:c6:cd:ef:
         3e:35:e0:e0:28:30:b2:16:a9:ac:a3:b0:b9:33:28:d0:38:c3:
         98:e2:07:0f:de:2c:8d:45:e1:7c:36:78:ea:80:ed:11:b1:b1:
         43:8b:68:6e:aa:87:90:e9:3e:c3:aa:bc:1c:6f:30:b4:52:dc:
         00:2c:61:45:80:87:45:38:2e:b2:45:ff:55:4a:e7:dd:42:83:
         32:04:67:c4:08:b8:6f:af:f2:92:71:85:6a:b9:93:99:09:79:
         19:33:7b:39:b5:7e:6d:9d:f9:a9:6e:d1:5e:e9:c0:2c:81:05:
         c8:a2:c3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:42 2026 by rpki-client