Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
File:                     xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft (raw, json)
Hash identifier:          NiyXBET2fYJk45uTaNWFMhlaHqUAdq+jEMFKz+26qQU=
Subject key identifier:   83:62:89:DD:DD:1D:33:D8:C8:59:FA:D4:5C:0C:33:66:06:45:7B:C7
Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
Certificate issuer:       /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Certificate serial:       044F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
Manifest number:          0449
Signing time:             Mon 02 Mar 2026 02:23:13 +0000
Manifest this update:     Mon 02 Mar 2026 02:23:12 +0000
Manifest next update:     Mon 09 Mar 2026 02:23:12 +0000
Files and hashes:         1: xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl (hash: Pc3uWbFCgdiiUjPDoUsXjJ8AQfh1WrKiZHvkq09Fnq4=)
                          2: 76391AA6995311EC8EAA8C59C4F9AE02.roa (hash: hVWOem+pLii4MQTJ55oAfG4bFT1qvrHFyRRkJ/xs+Qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
                          rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181CA2, serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
        Validity
            Not Before: Mar  2 02:23:12 2026 GMT
            Not After : Mar  9 02:23:12 2026 GMT
        Subject: CN=69a4f491-9487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:94:31:a9:6d:b7:56:d0:49:df:17:6a:7a:
                    9b:fe:f7:fc:52:98:47:5c:15:24:b3:65:af:6e:27:
                    0b:d8:42:f0:16:02:c5:3d:cf:23:e3:25:d8:b4:96:
                    90:82:87:f3:8d:94:51:77:9c:43:1e:92:c0:32:1c:
                    26:ec:d0:a2:3f:5a:ea:cf:f9:58:cb:13:50:9c:14:
                    14:db:fc:46:42:1e:29:29:00:d9:83:5a:c0:08:40:
                    8b:95:09:7f:5f:de:42:6b:89:2b:04:db:35:c0:26:
                    1d:b4:a5:94:7e:d0:90:5d:8d:00:2c:66:7c:31:40:
                    28:a5:95:19:03:ec:b0:06:64:9f:b9:cb:e3:4b:c7:
                    e4:8a:2e:d1:85:fa:36:5f:d9:91:44:f3:e0:13:86:
                    1c:0c:c1:96:71:b5:dc:20:a5:aa:bd:08:37:fc:8b:
                    d7:95:26:72:de:fe:18:3f:df:6a:05:b8:7e:0d:de:
                    c8:a4:83:d5:ff:fd:73:62:d8:25:62:6e:51:b2:a4:
                    d6:7f:90:e0:37:5d:56:af:be:52:8e:9d:ae:b5:1d:
                    f4:70:90:5d:f9:a1:ac:5a:90:f9:90:76:52:eb:ad:
                    e9:d8:6d:7a:4e:08:cc:62:f1:5a:46:10:16:92:9d:
                    2d:c2:a1:b7:b6:00:33:ea:61:a9:f6:60:85:8b:fb:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:62:89:DD:DD:1D:33:D8:C8:59:FA:D4:5C:0C:33:66:06:45:7B:C7
            X509v3 Authority Key Identifier:
                keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:ff:0e:f5:c1:06:d1:fb:42:e5:f7:e7:b2:d3:e8:ab:74:
         73:85:b9:3b:7b:ad:0d:16:1e:70:0a:33:bc:b3:49:24:d1:0e:
         91:5a:dd:fc:21:ac:91:14:14:ea:d1:54:29:56:6a:d8:58:81:
         36:37:ec:d8:db:95:a7:df:d5:bb:1b:45:55:dc:31:05:21:f6:
         e8:37:35:b3:80:52:d1:d6:55:ff:31:89:82:01:04:36:6c:96:
         d8:ad:5b:2e:af:d6:49:80:70:72:d4:24:e9:38:e5:18:28:7e:
         39:30:2b:8f:9e:c4:99:8d:62:e3:98:4c:fb:e0:32:6a:92:d9:
         3d:97:74:8d:cf:cc:36:27:0c:86:2c:77:d1:44:1f:b7:87:bd:
         7a:84:ee:39:2e:53:18:a6:97:f5:c7:91:2d:6a:a7:d5:30:c2:
         d2:3d:1b:4e:d1:99:05:36:d1:a3:78:14:84:03:af:43:8f:4e:
         4d:5b:7f:98:d8:d7:28:30:bc:e7:24:cf:bb:90:7b:91:0e:b7:
         c0:2a:2f:26:30:da:e4:6d:b3:f7:eb:06:87:e3:d8:98:a4:da:
         1a:6b:35:31:d5:92:ad:54:5e:60:df:3a:f2:29:84:97:23:b1:
         6e:1f:d0:a4:34:87:fe:33:50:fd:0d:6b:57:34:3f:b9:4f:7e:
         81:a6:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:48 2026 by rpki-client