Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File:                     T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier:          mCK6dUE9mXAvc4e99BJXMVAp0oP1WBUfYhdDr08sXkA=
Subject key identifier:   32:F7:1D:F0:E7:7B:71:72:EE:99:24:35:6C:D4:A3:67:13:0C:02:E5
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer:       /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial:       0408
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number:          0402
Signing time:             Mon 02 Mar 2026 00:45:42 +0000
Manifest this update:     Mon 02 Mar 2026 00:45:40 +0000
Manifest next update:     Mon 09 Mar 2026 00:45:40 +0000
Files and hashes:         1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: dJjdjmYFXur3TAlVjyXT4Lz4o5Vp+98ra8fJyqQgeB8=)
                          2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: 2SfGs1jOgqzEhF9rdWUTh/Lqm2DcuWtgPENfS4h26Tg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
        Validity
            Not Before: Mar  2 00:45:40 2026 GMT
            Not After : Mar  9 00:45:40 2026 GMT
        Subject: CN=69a4ddb5-22c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:6b:33:fd:fb:4c:0a:11:13:53:10:4a:1c:
                    29:dd:44:4e:9a:38:7c:c0:9d:1d:76:4c:88:4d:81:
                    fd:f7:a4:1c:f2:e1:75:e3:3e:56:60:94:7a:71:d3:
                    f9:7d:c1:fe:0e:e7:38:ed:20:ed:5d:c5:b7:a6:60:
                    c7:35:ad:40:1f:cd:b5:66:47:e6:ab:a8:ef:b6:65:
                    61:cd:ae:8e:e7:b1:38:ff:a3:38:d5:bf:16:00:39:
                    1a:92:e6:29:94:84:56:d8:a9:1f:b2:68:e6:31:e1:
                    e1:0b:78:85:4c:ad:63:e3:5e:ce:30:9c:e6:ff:b3:
                    ce:d4:38:36:ad:95:67:4c:53:3e:76:75:07:b8:e1:
                    d6:78:c7:56:49:82:91:79:4d:36:49:58:78:13:f9:
                    61:94:b1:9b:07:0c:ce:3c:93:ad:6b:4e:68:9b:9a:
                    dd:4f:18:ff:aa:f2:7d:b8:41:4f:78:05:f9:72:00:
                    9e:df:e7:dd:88:21:0e:fa:57:40:59:bd:5e:85:49:
                    48:fd:d1:ac:e8:0e:dd:da:77:1e:64:18:2e:ce:1a:
                    2f:7d:dc:09:6b:4c:7a:cf:9e:49:19:1f:b1:4f:73:
                    57:81:a9:1d:19:ed:09:6b:07:24:5c:2f:01:9a:51:
                    40:43:70:54:54:97:b6:2b:b0:16:26:63:1d:0a:db:
                    45:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F7:1D:F0:E7:7B:71:72:EE:99:24:35:6C:D4:A3:67:13:0C:02:E5
            X509v3 Authority Key Identifier:
                keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c8:84:ef:b5:e8:dc:b2:51:4c:cb:9c:ee:b5:6f:28:1a:3e:
         da:41:5f:15:4c:b9:c2:b4:c3:58:f5:61:f5:25:73:56:23:2e:
         5c:60:d9:32:94:37:a6:01:5f:1a:d2:3e:64:71:06:bc:79:90:
         48:2d:58:1d:a8:c8:1c:a6:04:88:2b:40:f1:fe:43:7b:41:15:
         e1:2f:78:b1:6d:9c:bc:7c:e6:03:94:11:5f:6a:28:05:f1:f1:
         7c:1a:e2:ff:88:36:a6:c0:43:be:ad:21:8b:df:5d:81:6c:cb:
         01:b9:8e:80:9d:da:6e:1d:7f:cf:d2:62:87:f8:f9:2c:cb:36:
         1d:a2:3c:dc:55:27:a4:1a:10:99:e7:75:89:d4:3b:9a:10:18:
         06:9d:70:29:a0:a3:5a:9b:dd:42:9d:c0:d5:85:34:a2:85:b9:
         18:09:9c:8a:eb:ec:fc:3c:36:c7:f5:a6:fc:b3:38:ad:24:48:
         73:4a:24:72:4a:28:c3:1f:15:ab:20:49:7e:23:d6:10:07:2f:
         52:0b:fb:3a:08:c9:04:37:ad:9a:ab:e0:54:8b:84:4d:87:e7:
         31:b2:21:75:d0:5e:fd:b9:34:db:36:09:54:cc:f9:fb:22:bb:
         55:10:7a:14:a6:c3:30:b8:b4:1c:05:66:2c:c4:95:0b:ab:9f:
         3d:27:a9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:35 2026 by rpki-client