Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
File:                     NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json)
Hash identifier:          8h3zcZvuuT7mfj7P1Ve75Gi2cPmYNunY8NU4wSAinC8=
Subject key identifier:   B1:27:8C:3D:6A:7D:DC:51:33:DE:3F:1F:1A:5E:7F:8B:2A:CF:ED:82
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Certificate issuer:       /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial:       14B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
Manifest number:          14A6
Signing time:             Mon 02 Mar 2026 02:25:15 +0000
Manifest this update:     Mon 02 Mar 2026 02:25:13 +0000
Manifest next update:     Mon 09 Mar 2026 02:25:13 +0000
Files and hashes:         1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: l1nuH42aeIOm8qJdV3Gfj693f3KwRMAhiptF7H/VuWI=)
                          2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: hJB0fg4PvfDHbWpDoExt2hBG5m90vZAeqjoeirpmrtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
                          rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5296 (0x14b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
        Validity
            Not Before: Mar  2 02:25:13 2026 GMT
            Not After : Mar  9 02:25:13 2026 GMT
        Subject: CN=69a4f50a-7b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:67:7e:48:aa:a4:5d:78:3a:02:c9:e6:3e:
                    79:c0:c4:04:21:60:6f:da:d4:8f:9a:42:06:fd:e7:
                    c9:94:46:fa:1e:31:e6:8e:38:7d:ba:33:0e:f4:e4:
                    6e:91:ae:78:c8:a3:02:66:27:25:63:5c:b8:e7:64:
                    1b:3d:4d:38:88:d6:b1:ba:52:3c:5f:67:a6:1b:31:
                    74:48:84:6b:aa:c5:aa:63:8e:90:12:5e:43:35:2e:
                    c8:a3:fc:c4:40:4f:e3:2e:3b:ed:a5:51:49:44:c8:
                    f4:46:97:cb:d6:ad:63:f6:6b:45:df:61:1c:9f:db:
                    94:cf:6b:33:da:65:0c:6c:cc:df:d7:33:1e:e7:cc:
                    4f:f2:57:40:c6:09:fa:4c:ee:0d:02:70:90:c1:1b:
                    b9:33:de:c4:59:79:8b:85:1d:4f:2d:7a:f2:08:12:
                    37:a8:68:73:37:e6:a7:56:17:d5:08:c0:85:0b:b5:
                    e4:ef:7e:e2:29:c2:d4:d0:49:7c:fc:af:c0:97:ca:
                    76:78:8b:8e:9f:01:4a:87:03:91:2a:41:c1:04:2e:
                    de:b5:72:e6:50:ae:57:5a:70:04:7d:2c:71:6f:00:
                    ee:b6:ec:f2:c8:f0:5a:ab:d0:11:f0:92:92:0a:7e:
                    cf:82:14:7a:d8:48:98:10:e8:fd:0a:ae:dd:0b:fc:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:27:8C:3D:6A:7D:DC:51:33:DE:3F:1F:1A:5E:7F:8B:2A:CF:ED:82
            X509v3 Authority Key Identifier:
                keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:20:83:6c:26:b4:10:32:3f:db:e8:52:82:ac:56:fc:35:d0:
         33:1b:9b:94:e5:07:26:28:f0:a4:d1:29:4e:1c:cb:ef:be:30:
         d4:ce:a4:54:5c:81:f2:88:fb:17:cf:45:13:26:7b:93:4b:e2:
         1d:76:cb:89:27:b2:44:05:00:7e:e3:df:2f:8f:09:41:a9:a1:
         03:cd:6f:f5:ff:a6:57:ef:e8:57:58:13:e2:c4:5b:5b:da:2a:
         6f:c4:28:d5:b9:5f:7a:0f:e7:06:f6:64:43:c1:76:08:4e:44:
         97:6d:0d:d1:9f:49:76:a5:de:62:08:14:50:61:8f:1c:53:c1:
         a2:e9:90:7e:bc:a8:63:3d:a9:28:df:70:11:ca:b5:b1:da:5a:
         9c:f8:a3:75:13:61:f1:a0:be:f0:60:92:c2:5a:b4:f8:41:26:
         93:77:56:9b:45:a5:26:a3:b2:e5:c5:f4:6b:79:7f:28:5d:cc:
         05:7a:a2:d7:00:15:16:fd:67:58:9c:8b:78:ed:85:46:18:39:
         3b:6d:9b:d2:e5:86:c5:2f:0b:55:35:37:f6:93:5e:b1:7a:65:
         a7:b3:af:82:05:69:c7:37:ea:cf:f5:3b:60:db:aa:9e:27:87:
         ed:82:8e:e8:3f:1d:37:9c:1f:4e:ac:05:41:d5:58:e4:97:8c:
         70:f9:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:44 2026 by rpki-client