Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
File:                     tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json)
Hash identifier:          uUVGPgz3KTyutrF+D7sxxTMrN573g/HOzbF4WZPDW5o=
Subject key identifier:   B8:F4:60:D1:77:5A:FD:2F:CF:F1:95:74:C1:50:B3:F7:91:F4:8F:B2
Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
Certificate issuer:       /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
Manifest number:          0455
Signing time:             Sun 01 Mar 2026 02:18:57 +0000
Manifest this update:     Sun 01 Mar 2026 02:18:57 +0000
Manifest next update:     Sun 08 Mar 2026 02:18:57 +0000
Files and hashes:         1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: g+yPZy9z9PGi2BFZqFhZS/3Z5j5SPwu7JbGFGNQBX8k=)
                          2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: 9Glg+FZVnuYVbnpDUoXkmTWX1UGlCmh3veSk6hQSk2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
                          rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
        Validity
            Not Before: Mar  1 02:18:57 2026 GMT
            Not After : Mar  8 02:18:57 2026 GMT
        Subject: CN=69a3a211-fe73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:76:d6:bd:c6:95:5b:21:62:b9:8b:5a:e9:86:
                    50:b7:e3:2a:3f:59:45:92:e0:7d:2e:b8:e0:b6:08:
                    d5:b0:f6:8d:da:bc:48:5b:e1:1c:cb:eb:d8:14:69:
                    13:89:05:48:c0:20:10:28:49:7c:4b:0f:cc:75:b3:
                    81:12:9f:0a:26:f0:d1:64:58:6c:53:b9:b7:22:83:
                    2f:d4:7e:d2:ed:b0:96:8c:0e:5d:ce:a2:b1:98:99:
                    c2:cb:3d:cb:6a:f5:27:e2:db:12:e4:e0:31:29:c7:
                    26:0d:74:37:3b:31:64:67:2f:b8:e6:c3:a4:ee:78:
                    83:78:81:dd:50:61:65:85:f2:6a:cb:d3:c2:c1:04:
                    d5:7c:7d:f2:a2:13:22:2f:11:45:bf:6e:52:36:ea:
                    0a:4b:25:cf:0f:e8:b4:ed:9e:5b:82:c4:f1:b6:72:
                    2a:3f:8e:44:28:f6:e0:00:aa:3e:e3:c6:61:d5:7d:
                    6c:2b:4f:b0:0c:89:52:7a:a8:f9:8c:69:29:0e:ed:
                    e1:c6:98:15:88:06:c1:48:7c:17:83:d7:f3:78:e7:
                    ba:a5:ad:af:b9:be:2f:1d:be:68:24:1f:7c:a7:77:
                    d6:62:04:08:2a:f7:4d:18:d7:35:c6:a3:ec:a0:63:
                    cb:1f:66:f2:21:be:6e:13:91:b8:e6:cc:88:d5:b5:
                    33:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F4:60:D1:77:5A:FD:2F:CF:F1:95:74:C1:50:B3:F7:91:F4:8F:B2
            X509v3 Authority Key Identifier:
                keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fd:bb:18:d4:dd:8d:1a:f0:4b:9c:2e:86:e5:3a:ba:b8:8b:
         19:24:f5:04:d0:b1:88:ff:85:31:6e:5d:9d:b9:2b:a1:23:b5:
         d7:6e:d6:82:12:86:44:95:e1:69:d0:ba:32:5c:b8:b8:5d:fb:
         f7:d5:c0:6a:96:b4:12:ec:51:5a:2e:c6:46:9d:a1:41:cb:50:
         a4:a4:a4:56:06:1c:ad:e0:d3:a0:c1:16:6f:f3:fe:88:a5:a8:
         b3:62:e5:c9:28:e1:da:e2:7d:59:65:93:82:28:4e:c7:48:de:
         7a:c1:c5:46:c4:40:45:84:11:07:f9:56:e2:59:ac:c3:3f:a3:
         f1:04:84:cb:a9:fd:7a:91:e8:21:5b:f7:0a:25:04:02:ec:13:
         14:44:f4:89:22:3c:2d:8e:e4:70:e2:ce:2f:c9:a8:6e:86:34:
         1c:02:eb:d8:e1:33:22:32:f0:f6:0c:9d:ee:df:42:6e:b8:13:
         1f:ad:c8:7a:47:a6:df:3b:a6:e2:35:a4:d5:29:69:ac:0a:86:
         9e:5e:4c:af:b6:1b:95:ad:38:bb:01:33:56:ef:e0:66:fd:b9:
         76:5c:d5:61:88:06:e6:95:4e:30:20:0b:5d:e7:a5:82:d7:9f:
         77:a3:81:4c:57:80:97:9b:13:de:e4:04:66:b0:57:b8:70:b5:
         e2:7e:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:03 2026 by rpki-client