Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
File:                     8cgPvdVMGAKQLIXOmQoRLtMLX18.mft (raw, json)
Hash identifier:          tNfkDSSLgd+pdVArdyKAUSct/ek1r4VK8y8/AD6NF0o=
Subject key identifier:   73:9C:1D:9D:D6:88:67:00:3F:37:B8:9F:74:AC:A8:AE:6F:56:66:7F
Authority key identifier: F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
Certificate issuer:       /CN=A915AC36/serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
Manifest number:          33
Signing time:             Sun 01 Mar 2026 10:04:26 +0000
Manifest this update:     Sun 01 Mar 2026 10:04:26 +0000
Manifest next update:     Sun 08 Mar 2026 10:04:26 +0000
Files and hashes:         1: 8cgPvdVMGAKQLIXOmQoRLtMLX18.crl (hash: 6R3H+A1DGiNVdJGMJTzZ/Acp37Wo83DFkUM8GM5cdbo=)
                          2: 4E7FF5F8CF4011F093323D50C4F9AE02.roa (hash: M9I/hSYD+ElxC9y/ixYE8aOTrorhxz17vPRFzccFUq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
                          rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AC36, serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
        Validity
            Not Before: Mar  1 10:04:26 2026 GMT
            Not After : Mar  8 10:04:26 2026 GMT
        Subject: CN=69a40f2a-9dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:81:17:fd:48:29:b5:90:c0:55:2a:96:81:
                    06:7e:ff:01:27:ea:8a:f6:d3:c9:51:6e:98:16:a2:
                    b7:ff:ad:ad:d6:a7:1a:0e:ae:1a:cd:3c:9c:89:cc:
                    89:b6:76:f5:0f:0b:9d:03:b0:b6:03:eb:a4:55:a9:
                    49:a7:b3:ab:d5:8c:5a:7d:a2:4b:01:47:0d:35:00:
                    f7:a7:00:cd:7d:48:a2:af:36:a3:27:c1:cc:a5:60:
                    3c:bf:ae:23:6f:95:f7:81:d8:4e:4c:f4:7e:c1:cd:
                    27:bd:8e:84:58:6b:1f:9b:eb:d2:d7:fd:a1:48:8d:
                    fc:06:85:4e:08:7c:8c:05:41:58:37:3d:b0:fa:05:
                    a9:20:d0:7a:b7:51:e0:43:c9:7e:c2:8c:f1:fa:2c:
                    d5:ce:b6:fa:13:ad:56:20:a6:5f:24:99:14:f5:07:
                    41:02:44:bf:75:71:e8:3c:25:c7:59:34:73:cd:1e:
                    25:d5:99:e3:c8:e1:81:e6:1d:13:16:ed:13:28:28:
                    d5:28:4e:7c:53:29:89:b4:75:b8:77:04:3a:98:ac:
                    b7:4e:99:33:97:1c:6d:84:35:a0:d6:32:36:18:25:
                    33:89:3c:5c:88:09:d9:b3:ad:35:43:30:5d:f7:79:
                    ca:99:81:25:56:c9:9f:5d:5f:79:5f:c9:9c:e7:81:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9C:1D:9D:D6:88:67:00:3F:37:B8:9F:74:AC:A8:AE:6F:56:66:7F
            X509v3 Authority Key Identifier:
                keyid:F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6e:5b:8a:27:61:e6:68:c4:0a:ca:d1:9f:98:a8:5c:bd:d6:
         13:ce:87:92:fa:3b:8a:10:ca:6f:d0:29:08:bd:23:c2:03:c1:
         1f:a5:98:0a:bf:df:da:8d:c4:a1:f9:2d:ab:f4:f8:e1:01:05:
         96:cb:2b:1b:44:3e:86:68:a6:2a:93:43:3f:41:5f:0a:a1:a4:
         a4:cc:5d:11:e6:31:fa:a3:db:57:5f:db:c0:09:48:10:a5:45:
         b5:03:6a:99:b1:f1:1c:b3:aa:0c:16:cd:5e:fe:11:e7:9c:c8:
         2c:92:6d:1c:f5:e5:ae:a2:3a:b2:aa:ee:22:f8:53:c5:59:88:
         2c:f7:2c:b5:f4:7a:9b:61:8f:21:96:82:a8:92:3f:f5:f5:51:
         9e:70:ba:8a:c0:5e:53:90:f7:24:99:91:42:dd:79:4d:74:9f:
         e4:e8:bb:cf:cb:7e:48:8c:05:5c:a4:5b:a1:75:82:df:3b:81:
         4a:5e:02:fa:8a:a4:4d:b4:9e:36:14:c0:80:65:d2:df:52:1b:
         c1:8e:8e:99:c7:bb:47:7d:bd:ec:58:65:61:d8:78:c4:9e:07:
         4d:b8:03:f6:d9:4c:82:36:74:06:8a:96:8b:bf:97:03:a8:da:
         c8:b3:ed:7c:90:f2:db:c5:ac:ae:19:dc:8b:46:e2:6c:ec:bb:
         22:81:c1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:57 2026 by rpki-client