Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File:                     cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier:          5cv8SMaIhplHEZKQo4rZ2Peg90RUUp2yEgc/nNl+CAs=
Subject key identifier:   6A:B8:D0:FC:9C:F7:99:90:7C:E4:11:68:48:CB:78:5F:6F:D5:93:45
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer:       /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number:          46
Signing time:             Sun 01 Mar 2026 09:46:10 +0000
Manifest this update:     Sun 01 Mar 2026 09:46:09 +0000
Manifest next update:     Sun 08 Mar 2026 09:46:09 +0000
Files and hashes:         1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: zV6GB6oKmHvVUDFG/pMrH4AummMJuQ8UMdttgBKbtIs=)
                          2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
                          rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
        Validity
            Not Before: Mar  1 09:46:09 2026 GMT
            Not After : Mar  8 09:46:09 2026 GMT
        Subject: CN=69a40ae2-d025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:58:3c:a9:96:a6:38:63:95:97:d2:75:a0:
                    02:72:ec:cb:53:70:29:af:9c:c0:8a:b5:de:c5:f0:
                    97:b9:e0:ed:5f:ea:a8:42:c7:55:42:a4:ef:e6:75:
                    4a:41:32:be:c7:c4:e1:8a:28:da:ed:df:01:fc:fa:
                    bc:2e:a0:ec:39:dd:97:92:d0:aa:79:69:36:58:a7:
                    90:c9:db:d1:aa:c3:39:91:8a:55:a0:0e:cc:14:01:
                    7d:a9:fa:d1:3b:8f:f5:3b:42:ef:b3:9a:cc:26:fc:
                    87:e3:ba:27:18:19:83:57:c3:2e:47:a0:45:d7:24:
                    26:a2:62:40:74:9b:03:20:23:dd:e8:f5:3d:35:bb:
                    1f:5a:5f:8c:c7:4c:a4:4a:8c:ec:31:93:49:99:d6:
                    e2:31:85:5e:96:ad:f4:88:8f:bb:6e:8b:6c:03:d1:
                    15:1d:7b:c0:ed:16:b6:e5:c1:06:b7:a0:7e:f6:20:
                    ee:28:03:1a:08:92:69:3e:f3:57:1d:8b:ca:20:cd:
                    21:09:b7:f7:1a:89:e6:0e:78:eb:43:49:14:43:a2:
                    30:03:38:fb:12:ed:3c:d5:d2:6f:eb:21:75:5a:77:
                    bc:97:fc:c8:2b:de:6d:2c:58:37:4d:72:9c:a2:8a:
                    14:51:ec:25:69:df:15:66:50:24:be:d6:61:64:c1:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B8:D0:FC:9C:F7:99:90:7C:E4:11:68:48:CB:78:5F:6F:D5:93:45
            X509v3 Authority Key Identifier:
                keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:33:ac:3e:9c:8c:c4:f5:d7:bd:e3:f0:8e:cd:fa:d4:59:5d:
         75:a7:76:2e:29:1f:0a:12:e2:b8:ec:90:2e:c6:d6:bb:e7:32:
         30:ec:a4:63:0a:b7:66:d8:7b:22:be:67:0e:43:52:b6:03:60:
         41:12:9b:ab:ea:69:1e:1b:e4:c4:12:62:85:60:ec:62:62:8e:
         6b:55:d4:3e:55:05:40:1e:b5:96:57:65:36:a5:7a:04:6d:c8:
         8d:b9:b1:bc:41:ce:fc:8a:f8:85:04:7d:6c:5d:61:df:e3:d8:
         f0:14:60:7d:f5:e1:8c:e9:c8:90:8d:bf:33:84:99:34:cc:bf:
         65:27:35:ec:09:46:d9:09:35:02:57:69:9e:b3:4d:d4:a9:b9:
         60:22:a3:12:e3:5c:70:b4:13:a4:76:52:e1:30:35:25:64:ff:
         f5:05:80:cb:f2:07:de:be:ba:b3:74:8f:61:36:b9:75:df:60:
         94:b1:cc:a7:45:33:17:ea:48:d4:88:b8:70:61:f8:79:bd:fa:
         43:13:a5:7b:af:61:f4:8e:a9:fe:65:c8:12:7e:25:5a:cb:4b:
         dd:25:78:4e:11:cc:ba:86:e2:39:8d:40:6e:41:62:27:ca:06:
         f2:d0:41:2f:1b:95:5c:24:b6:32:4a:f9:c7:50:a6:b8:96:5c:
         e6:1f:d9:a7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MTk5NjExMC8GA1UEBRMoNzA0QzM5RTlCMjMwMkVDOTdBOUNBRTk5RUNFNzk0NUI4
MUYyQ0JFRDAeFw0yNjAzMDEwOTQ2MDlaFw0yNjAzMDgwOTQ2MDlaMBgxFjAUBgNV
BAMTDTY5YTQwYWUyLWQwMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9u1g8qZamOGOVl9J1oAJy7MtTcCmvnMCKtd7F8Je54O1f6qhCx1VCpO/mdUpB
Mr7HxOGKKNrt3wH8+rwuoOw53ZeS0Kp5aTZYp5DJ29GqwzmRilWgDswUAX2p+tE7
j/U7Qu+zmswm/IfjuicYGYNXwy5HoEXXJCaiYkB0mwMgI93o9T01ux9aX4zHTKRK
jOwxk0mZ1uIxhV6WrfSIj7tui2wD0RUde8DtFrblwQa3oH72IO4oAxoIkmk+81cd
i8ogzSEJt/caieYOeOtDSRRDojADOPsS7TzV0m/rIXVad7yX/Mgr3m0sWDdNcpyi
ihRR7CVp3xVmUCS+1mFkwcBvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUarjQ/Jz3
mZB85BFoSMt4X2/Vk0UwHwYDVR0jBBgwFoAUcEw56bIwLsl6nK6Z7OeUW4Hyy+0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxOTk2L0FGN0Y0RDZDQUU2
NzExRjBCNTM0RjYyNkM0RjlBRTAyL2NFdzU2Ykl3THNsNm5LNlo3T2VVVzRIeXkt
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvY0V3NTZiSXdMc2w2bks2WjdPZVVXNEh5eS0wLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx
OTk2L0FGN0Y0RDZDQUU2NzExRjBCNTM0RjYyNkM0RjlBRTAyL2NFdzU2Ykl3THNs
Nm5LNlo3T2VVVzRIeXktMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBHM6w+nIzE9de94/COzfrUWV11p3YuKR8KEuK47JAuxta75zIw7KRjCrdm2Hsi
vmcOQ1K2A2BBEpur6mkeG+TEEmKFYOxiYo5rVdQ+VQVAHrWWV2U2pXoEbciNubG8
Qc78iviFBH1sXWHf49jwFGB99eGM6ciQjb8zhJk0zL9lJzXsCUbZCTUCV2mes03U
qblgIqMS41xwtBOkdlLhMDUlZP/1BYDL8gfevrqzdI9hNrl132CUscynRTMX6kjU
iLhwYfh5vfpDE6V7r2H0jqn+ZcgSfiVay0vdJXhOEcy6huI5jUBuQWInygby0EEv
G5VcJLYySvnHUKa4llzmH9mn
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:26 2026 by rpki-client