Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
File:                     adcLNjVnbk9zG47xxYVbXi8n84g.mft (raw, json)
Hash identifier:          xn7W87Yjb/DR/O/cMWpQwDKc5zg98FxRTTUZN5P1H5Q=
Subject key identifier:   A5:47:5F:75:91:4F:36:7F:3A:FA:D8:56:44:1E:BA:5A:2A:2F:85:6A
Authority key identifier: 69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88
Certificate issuer:       /CN=A9174B04/serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
Manifest number:          024A
Signing time:             Mon 02 Mar 2026 00:35:01 +0000
Manifest this update:     Mon 02 Mar 2026 00:34:59 +0000
Manifest next update:     Mon 09 Mar 2026 00:34:59 +0000
Files and hashes:         1: adcLNjVnbk9zG47xxYVbXi8n84g.crl (hash: jrOEXDE+E4uGQKI8emHuJoQVnX9OJW5Nz9O7pGJf2zw=)
                          2: 576B4A9298AB11EDBC12AA81C4F9AE02.roa (hash: ImiMkEE2J+XdZByQIat0mMFwYTcecNiTjW/OPxuOTXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl
                          rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174B04, serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388
        Validity
            Not Before: Mar  2 00:34:59 2026 GMT
            Not After : Mar  9 00:34:59 2026 GMT
        Subject: CN=69a4db34-cb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:ce:d5:22:d4:ef:8a:ef:0d:14:c1:56:3d:
                    29:d7:e5:02:dc:83:67:0b:1b:ce:2a:3f:8c:47:49:
                    4d:82:ef:d7:2f:30:f5:4d:83:98:a2:b4:6a:4a:23:
                    c4:30:ab:1e:96:c8:03:0d:72:08:0f:bf:96:35:d7:
                    68:ff:82:27:e2:99:66:2b:9a:59:46:3f:96:18:9e:
                    aa:33:80:37:d4:2d:dd:25:52:f6:8f:5c:05:a2:ae:
                    ba:a6:0a:0d:67:46:ab:f3:13:b6:1c:ff:35:57:4a:
                    cd:da:aa:d9:60:25:5d:1a:6b:2e:5f:64:d2:38:16:
                    bd:92:a0:a7:1a:d7:be:08:44:16:34:c9:46:61:03:
                    83:59:90:c9:59:92:96:7b:36:ac:21:a4:13:94:51:
                    7e:5d:fc:f2:38:1a:d7:da:5a:03:71:bf:70:07:d6:
                    35:1a:a8:44:38:3a:41:17:89:d8:bb:82:41:b3:a0:
                    25:29:da:38:49:b5:48:e8:c2:15:7b:6c:0d:08:ef:
                    bf:32:b2:06:6e:6c:56:06:e1:86:31:46:bd:e8:00:
                    0f:be:63:d2:f0:a1:d6:27:48:01:0c:fb:29:ef:cc:
                    a7:de:41:e2:29:2e:e0:4e:de:41:0e:6f:ab:6a:eb:
                    81:eb:93:a2:a2:c3:e7:f3:20:4a:92:01:a0:30:e0:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:47:5F:75:91:4F:36:7F:3A:FA:D8:56:44:1E:BA:5A:2A:2F:85:6A
            X509v3 Authority Key Identifier:
                keyid:69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:63:d7:63:10:64:51:c0:5b:0f:cb:0b:57:39:a7:8b:e3:
         9b:7a:c1:f2:57:93:18:aa:67:9b:7f:8a:cd:35:5b:b8:ce:43:
         aa:0c:45:e6:11:cf:50:e7:26:3d:c2:1a:44:10:b7:80:d3:1b:
         de:af:2c:81:dc:3b:d5:11:d3:18:6c:ef:da:f0:a8:c5:0d:cc:
         f6:44:3f:ce:fd:2e:a6:63:93:60:29:33:b4:11:e6:06:36:01:
         5d:04:fe:72:69:c4:d4:50:28:75:5a:fe:74:94:f6:af:d6:34:
         28:1d:bb:cc:58:0b:49:78:67:99:16:5b:06:a0:d9:d9:2d:52:
         39:78:0b:1f:2e:7d:d8:09:43:b3:a5:e6:72:72:0a:62:0a:44:
         11:e1:b9:16:5a:8f:3a:8b:48:78:cf:2a:8f:74:b5:50:da:05:
         44:a6:81:b4:36:9e:8a:e0:ae:7f:ea:07:1a:0a:2f:7e:fc:14:
         3b:b7:bd:76:85:2f:e3:b1:51:3d:01:b2:ae:99:64:7a:86:04:
         b1:a7:02:a7:1f:98:18:48:56:bb:d4:7a:6e:9e:a6:04:86:cd:
         47:a5:42:78:47:3e:6e:ab:f7:ae:cd:39:2c:9e:ea:a7:db:de:
         9b:e6:2e:c2:fd:34:3a:f7:1c:46:aa:da:30:8f:c4:a8:5f:3e:
         30:1e:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:41 2026 by rpki-client