Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
File:                     w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json)
Hash identifier:          B4b2+8xt2aHsVK6LmnLjvyd5owhjBWJyn3L5QiX6Kbs=
Subject key identifier:   FC:49:DC:6E:93:DF:49:25:78:4E:14:56:64:E0:7B:D3:FA:78:95:71
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Certificate issuer:       /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
Manifest number:          01C0
Signing time:             Mon 02 Mar 2026 00:40:48 +0000
Manifest this update:     Mon 02 Mar 2026 00:40:46 +0000
Manifest next update:     Mon 09 Mar 2026 00:40:46 +0000
Files and hashes:         1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: cS9UEmqQ29BGEhiyn66ZSdxUVnYhhv37TeqsD+vql/o=)
                          2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: fy25uYGOBqAopUBfqaQ8eRizW0jfQRIrb63fi4fchGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
                          rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
        Validity
            Not Before: Mar  2 00:40:46 2026 GMT
            Not After : Mar  9 00:40:46 2026 GMT
        Subject: CN=69a4dc8f-f454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:72:64:ec:bf:6e:b8:30:55:17:91:b1:b8:
                    c7:da:ce:3b:bc:a8:c9:6b:ef:b6:ff:1c:8f:c0:4b:
                    9d:8d:e3:9c:8c:cf:96:93:4d:d7:f4:9b:b8:ff:30:
                    68:f8:91:10:14:6e:b9:43:23:fe:40:cc:01:86:5f:
                    66:78:d6:3d:36:fe:3a:af:bc:c0:72:43:d6:23:13:
                    a4:6f:0e:96:a5:6a:8e:7e:0e:67:2b:a8:ed:69:b9:
                    5a:af:eb:90:e9:27:8c:33:07:7d:3e:0d:59:08:41:
                    73:d0:69:51:f4:a7:5a:b5:1e:67:fb:c2:f6:43:fc:
                    52:4d:c3:35:e4:cc:61:38:db:dc:69:f5:80:4b:c6:
                    ff:6a:12:3b:06:4a:6b:a8:bc:f1:fb:e8:54:f2:ba:
                    c4:32:92:ba:1c:61:a4:0d:d1:4d:79:23:8d:73:0d:
                    26:2c:32:db:c2:50:26:c5:8a:50:00:bd:8b:45:9f:
                    21:5c:93:ce:0f:fa:7c:0e:7c:76:86:2e:0f:31:07:
                    6d:8c:02:f2:aa:22:2d:09:d5:b2:fc:20:c2:b0:86:
                    a6:04:c2:aa:a6:5a:ff:87:c9:5a:af:54:64:63:6e:
                    3a:c7:fa:2a:0d:6a:e4:5f:86:a6:cc:5a:43:92:b1:
                    01:9c:31:ab:e8:29:fa:19:b6:c0:ed:87:f9:85:00:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:49:DC:6E:93:DF:49:25:78:4E:14:56:64:E0:7B:D3:FA:78:95:71
            X509v3 Authority Key Identifier:
                keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:76:69:4f:93:ae:62:c5:f6:b7:bc:0b:ed:7e:fe:af:c9:f0:
         05:06:6b:04:d0:7c:3d:84:0e:85:41:09:4e:80:0c:0b:f2:49:
         a1:fe:3d:fa:72:64:dd:be:c8:19:9f:43:94:ca:53:4d:0f:99:
         ff:71:65:13:33:00:23:ab:4d:33:ee:b6:62:35:6e:be:98:1c:
         06:10:ce:f1:e4:9c:1c:da:35:6b:3e:cf:ca:c9:4c:41:8c:42:
         dc:0a:e2:c4:21:e9:1a:b6:8b:a1:1f:fb:ae:00:fe:1a:c8:07:
         cc:dc:a5:a9:a5:d6:2b:cb:83:e6:ac:5f:58:f1:1e:fd:f8:6e:
         bf:e8:7e:8f:a6:78:0e:e3:b5:6a:a5:50:c4:c9:f7:c3:27:1b:
         12:c9:77:60:84:c9:f3:00:da:b2:b9:aa:fb:1a:eb:04:db:dd:
         b9:27:93:0b:8e:d8:08:b5:7f:88:df:c7:6a:d5:2d:34:0c:01:
         75:dc:02:0c:c3:dc:4d:1a:56:75:a3:ad:f2:c9:7d:24:79:fe:
         c3:ed:cc:e8:cd:cb:f6:b4:82:2e:e8:ac:d0:51:e1:28:10:48:
         4e:25:17:1f:9a:bf:65:b0:03:ef:fc:19:28:e1:69:18:53:9f:
         17:fc:73:ef:29:b3:73:aa:b2:54:13:f1:2e:a8:14:06:fa:22:
         08:ed:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:29 2026 by rpki-client