Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          hboANNASXYh4Mt9ruipz+wjm3o0XTVAQCzh9l4eCgNg=
Subject key identifier:   65:EA:51:99:BA:0A:AB:48:49:49:AD:5B:7E:6A:49:C1:D2:83:3C:13
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       033C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          02CE
Signing time:             Sun 01 Mar 2026 23:46:08 +0000
Manifest this update:     Sun 01 Mar 2026 23:46:07 +0000
Manifest next update:     Sun 08 Mar 2026 23:46:07 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: tsoMFbSCDroLqzKLDdCjk8CW4VRu2Pg9dPaNS1azbA4=)
                          2: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: ZL7HtMcMaee/+U2RFcFAEBNXOBbDZe6QSqp6AaUWyjA=)
                          3: 359EA23662B311F081881A48C4F9AE02.roa (hash: lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=)
                          4: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: ThNEZ/wZ14mYXLet8Z4TArJCtuPb8L+Y4/Se6rgtJdc=)
                          5: E735782EBB8911F083DB6D28C4F9AE02.roa (hash: EGPPvZRgoPkvLfSn1FO9IWICWOn4INg9mkEVkACiYBo=)
                          6: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: fhpQuv0y4UT5DryZGfmgAQDcckv6IFWk6lv7Kpt2qsY=)
                          7: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: L5jvQRnxxxHdy5lodGkjPlaB/lJvpEFIVFuxxQ3ZhTI=)
                          8: B895CEFADD9A11F0956A19D3406F56BC.roa (hash: QHNHaXar6tn1K3fpu4q5EwIJGjeA5hGhBt9DNwjJ3Ng=)
                          9: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: OyJt2s3qPZnoO34lc+1xKuSSrj0jZolC/kQHql+HGrY=)
                          10: 0634745A36D311F091108A4EC4F9AE02.roa (hash: uaiAXHFgkoPRxU2DoLpe3SDOvNdXy/Ij5A7mMKtf32g=)
                          11: EDD791BCA80611F09091490CC4F9AE02.roa (hash: H19PUWRg0OLXt+zyul68ugvmUr9ug8PqNggB/l0rirk=)
                          12: E7BB6878778511F0A4E72535C4F9AE02.roa (hash: ZS69q+KLB0wxQSpzELQNwnOrdQL0A5TtkzgU+YFIMPc=)
                          13: 82FE8E1C90B511F0B55D6F53C4F9AE02.roa (hash: jniVoFO7asjIWO6HqjPSEhXjJIJMpsAC3AM61zDyHDg=)
                          14: 40257FE64D0E11F082837352C4F9AE02.roa (hash: 3xwrhLhWrv4Rc8fICKcBZccULTitMeKwRM4KNepaPck=)
                          15: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: AnPywYvkMzKBvrL7EYJm43TN30A+CP8/exgQap5VkDs=)
                          16: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: pORpsNJ98G1sLBSGTNwGRFcCTTGxkjeaJpZ9poV5mz8=)
                          17: 974EDB46ED1311F09DD269343F6F56BC.roa (hash: wp6/EcySdPY2J9HVTxurzHs/7C5ZFYTx7rFTXPJhFNQ=)
                          18: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: RMVp8Qup/NU120gAEj7lgUVqAC4aVcpU8zUbzT1yzig=)
                          19: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Mar  1 23:46:07 2026 GMT
            Not After : Mar  8 23:46:07 2026 GMT
        Subject: CN=69a4cfc0-d43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:0a:75:23:b5:d8:8f:fe:29:8a:ef:34:c9:
                    38:1f:84:8b:58:1b:5b:e6:9e:bc:2a:34:b0:97:9b:
                    01:44:6f:cd:7e:d1:49:f7:6f:30:ee:6a:68:34:a3:
                    3a:d1:ef:eb:46:d3:d8:01:f0:76:e6:df:a8:af:85:
                    dc:6e:b1:24:35:4f:a6:6e:cf:2f:7d:77:4b:43:57:
                    5c:f6:c3:b9:43:6c:2e:2f:c9:6e:e4:f0:60:80:33:
                    c2:54:5a:a7:43:fa:03:ac:aa:fc:e6:db:c7:24:9a:
                    99:02:39:8a:5e:f9:e4:7d:07:71:ca:00:6d:21:28:
                    f5:a6:bc:a1:4e:a4:2a:b4:81:0a:fe:7a:e3:91:49:
                    b9:f1:ce:73:6c:b8:b4:d2:fc:f6:2a:1a:0f:48:3c:
                    1b:49:e3:1a:b8:3c:f8:81:1f:da:25:f6:d9:6b:da:
                    e9:dd:52:89:c9:ce:1e:0c:e2:18:11:81:73:fc:a6:
                    05:49:77:d7:69:dd:5d:44:94:c4:55:76:ba:8f:ea:
                    08:92:67:0c:7a:9b:93:ea:dd:6f:c7:27:5d:7d:17:
                    2a:56:01:8f:9b:26:a3:49:87:0f:04:60:07:f0:09:
                    29:81:4a:63:af:87:2c:98:ac:ec:fc:4c:96:95:97:
                    97:1a:5f:c0:28:12:71:b3:37:c5:e6:55:d5:90:86:
                    ab:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EA:51:99:BA:0A:AB:48:49:49:AD:5B:7E:6A:49:C1:D2:83:3C:13
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d6:90:6d:b0:ae:a7:61:d2:bd:b3:9b:f0:50:90:36:a4:ce:
         55:9f:26:df:cf:b5:f2:96:a0:b9:d6:27:6a:d7:ae:3b:bb:27:
         be:6c:94:86:4f:09:0b:1b:7f:2d:c8:fc:73:db:08:48:fc:63:
         c6:09:b6:33:9e:0a:df:e5:52:1e:f3:7b:46:39:4b:31:5f:b6:
         79:85:73:88:ff:08:66:a1:03:96:8c:13:7a:be:a7:a7:e9:fc:
         0a:81:1a:30:00:fe:ee:82:6e:54:d5:ab:07:14:50:15:49:09:
         58:c1:ad:99:90:23:31:09:1e:16:c6:4b:84:c8:32:f7:85:66:
         f4:9f:51:0f:fe:fd:a9:28:7e:75:35:b7:61:e6:02:5b:37:6b:
         97:83:c7:08:5b:9a:ad:3e:0e:c2:a2:6a:36:49:3e:58:c2:ee:
         cd:f5:a2:c8:ea:ba:3d:0c:39:48:44:64:7b:0f:2b:d7:d0:2c:
         bf:4d:0c:6c:28:d1:3e:08:0f:47:52:e5:1d:79:08:35:da:c8:
         fd:d2:c9:51:50:29:e8:ae:c3:00:24:42:10:ac:f4:06:de:ab:
         c4:a8:53:8f:a3:28:bd:b8:03:48:34:37:ff:35:0d:11:1b:ac:
         e8:c3:b4:80:50:34:88:bd:32:f2:42:7d:f5:bd:b2:b7:bd:12:
         73:13:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:21 2026 by rpki-client