Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
File:                     CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json)
Hash identifier:          s6+xHTUiS+teiiu0NuhxJmdCrKqnzxgW4UdrlCiC2bo=
Subject key identifier:   CC:E6:1B:C1:53:B3:76:EA:A2:2F:0F:23:19:92:A4:49:3D:08:30:79
Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
Certificate issuer:       /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Certificate serial:       08EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
Manifest number:          08E3
Signing time:             Mon 02 Mar 2026 01:25:27 +0000
Manifest this update:     Mon 02 Mar 2026 01:25:26 +0000
Manifest next update:     Mon 09 Mar 2026 01:25:26 +0000
Files and hashes:         1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: 7PVrPkOEP/X6+E+gxtC+irUo75xEilseX8/9fIJBW8k=)
                          2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: Z2QNPzHw5Ee7FsMiXK3KEIBE/uAyk1VrZxpoDjQMDc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl
                          rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
        Validity
            Not Before: Mar  2 01:25:26 2026 GMT
            Not After : Mar  9 01:25:26 2026 GMT
        Subject: CN=69a4e707-9664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:8c:66:ee:a8:12:76:76:73:26:10:df:7d:
                    64:76:c0:93:bb:c9:30:98:61:1a:d8:92:de:37:35:
                    69:04:5c:01:81:50:11:b0:56:e5:4a:82:5d:cc:28:
                    a9:17:71:8c:49:31:45:2e:f5:dc:e5:6a:8d:ac:92:
                    31:0e:26:8c:b2:19:a9:17:63:c9:bc:66:6e:e2:96:
                    1f:d8:d2:32:5e:ba:60:4b:88:c8:38:9e:57:20:30:
                    84:02:cd:59:e8:62:b1:5b:2c:eb:e9:6e:0c:5a:7b:
                    f1:42:46:a7:cd:af:5c:41:24:fe:7b:c7:88:17:d2:
                    a1:9d:55:7c:7f:96:f3:37:27:51:73:d1:0a:8c:2c:
                    33:8b:f1:69:97:26:cd:85:52:14:65:e8:d3:c0:ac:
                    fc:bf:d2:3a:fd:10:4f:2b:a0:2c:79:af:bf:5f:99:
                    79:47:3e:d2:5a:7d:bb:1f:8d:6d:53:ef:e8:cb:8b:
                    be:bb:db:66:39:3e:4f:98:cf:af:a4:c9:ea:23:be:
                    53:81:d2:cc:3d:b6:d7:f7:77:24:de:70:61:ea:7e:
                    91:8b:a6:5c:e8:b9:1d:8d:4a:e4:c4:6b:78:64:78:
                    39:c5:4b:23:e4:f6:4e:89:6b:69:8a:dd:16:b1:32:
                    02:e8:48:09:c8:c6:27:71:92:cd:60:86:ce:a8:38:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E6:1B:C1:53:B3:76:EA:A2:2F:0F:23:19:92:A4:49:3D:08:30:79
            X509v3 Authority Key Identifier:
                keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:5b:d4:1c:32:eb:2e:ae:e4:73:cc:58:cc:83:56:dc:f5:
         95:b9:b8:45:19:7e:82:ba:2a:35:aa:80:9b:7d:bd:22:2f:20:
         18:84:03:82:cd:5e:d8:05:b3:c7:cd:6a:4b:69:75:02:da:f7:
         5e:52:89:db:46:1e:02:57:e6:3e:09:19:92:2c:af:c4:44:73:
         40:22:b1:a9:8b:0c:a9:81:2d:0b:9b:fd:de:e2:de:10:55:5b:
         94:aa:1b:5c:cb:38:77:21:dc:13:e0:9c:34:a4:35:b3:b5:48:
         62:74:59:fb:11:ad:7d:a3:c8:a9:40:e8:6a:72:e9:02:c0:4e:
         3b:a9:00:5c:5c:04:fe:92:96:7d:9b:8b:ed:b3:6b:56:75:85:
         f6:02:8e:85:2d:c5:e5:0f:bc:36:fe:e9:f7:ba:87:cc:08:5e:
         05:b8:66:91:e1:3a:b2:11:7b:83:7c:1f:70:5a:bb:69:ee:1e:
         a8:9d:db:3b:64:ed:dd:4f:54:36:08:2d:94:78:ee:b6:23:d7:
         65:62:b3:a5:0d:e8:58:35:a1:08:26:a3:92:ad:39:d6:e5:e9:
         4e:5e:e1:22:31:7c:79:60:38:06:cc:72:f7:73:fb:93:db:a2:
         7d:ac:23:c3:2d:e1:e9:48:f1:b6:29:88:4b:d2:8a:d1:04:a5:
         66:b1:1a:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwNTAxMTAvBgNVBAUTKDA4MkM2N0M5QUVDN0REMUFBOUQ4NTVEOEEwRkNDMDc5
NjZFRkM4QzcwHhcNMjYwMzAyMDEyNTI2WhcNMjYwMzA5MDEyNTI2WjAYMRYwFAYD
VQQDEw02OWE0ZTcwNy05NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuVeMZu6oEnZ2cyYQ331kdsCTu8kwmGEa2JLeNzVpBFwBgVARsFblSoJdzCip
F3GMSTFFLvXc5WqNrJIxDiaMshmpF2PJvGZu4pYf2NIyXrpgS4jIOJ5XIDCEAs1Z
6GKxWyzr6W4MWnvxQkanza9cQST+e8eIF9KhnVV8f5bzNydRc9EKjCwzi/FplybN
hVIUZejTwKz8v9I6/RBPK6Asea+/X5l5Rz7SWn27H41tU+/oy4u+u9tmOT5PmM+v
pMnqI75TgdLMPbbX93ck3nBh6n6Ri6Zc6LkdjUrkxGt4ZHg5xUsj5PZOiWtpit0W
sTIC6EgJyMYncZLNYIbOqDjiFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzmG8FT
s3bqoi8PIxmSpEk9CDB5MB8GA1UdIwQYMBaAFAgsZ8mux90aqdhV2KD8wHlm78jH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTA1MC80NkE5QzQ0MEM5
NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNScXAyRlhZb1B6QWVXYnZ5
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NDeG55YTdIM1JxcDJGWFlvUHpBZVdidnlNYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTA1MC80NkE5QzQ0MEM5NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNS
cXAyRlhZb1B6QWVXYnZ5TWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADQpb1Bwy6y6u5HPMWMyDVtz1lbm4RRl+groqNaqAm329Ii8gGIQDgs1e2AWz
x81qS2l1Atr3XlKJ20YeAlfmPgkZkiyvxERzQCKxqYsMqYEtC5v93uLeEFVblKob
XMs4dyHcE+CcNKQ1s7VIYnRZ+xGtfaPIqUDoanLpAsBOO6kAXFwE/pKWfZuL7bNr
VnWF9gKOhS3F5Q+8Nv7p97qHzAheBbhmkeE6shF7g3wfcFq7ae4eqJ3bO2Tt3U9U
NggtlHjutiPXZWKzpQ3oWDWhCCajkq051uXpTl7hIjF8eWA4Bsxy93P7k9uifawj
wy3h6UjxtimIS9KK0QSlZrEabg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:21 2026 by rpki-client