Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
File:                     4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json)
Hash identifier:          oToMy41+RLHq0jqszGclx1cGyR91o/vnv2KiYkWZdPM=
Subject key identifier:   BF:D1:A8:72:6F:70:14:BF:47:57:B7:DB:C0:82:C7:23:27:CD:12:21
Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
Certificate issuer:       /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
Manifest number:          0240
Signing time:             Mon 02 Mar 2026 01:01:24 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:21 +0000
Manifest next update:     Mon 09 Mar 2026 01:01:21 +0000
Files and hashes:         1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: WmoLJoBE//S58hUQtiopS3P8OEar02Ll2CFcOVJoWdE=)
                          2: A4D24AE4C8A811F0B2500664C4F9AE02.roa (hash: 5KyYdKKzKKNZJ5o3lIKnEvZm4/+01rm3shU8ePI1af8=)
                          3: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: 1d10xZbJawZOgiRoLspusD2wd9i5IKQYkPksSCGbosM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
                          rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
        Validity
            Not Before: Mar  2 01:01:21 2026 GMT
            Not After : Mar  9 01:01:21 2026 GMT
        Subject: CN=69a4e163-acc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:38:bc:e2:de:6b:f8:b5:34:86:d1:64:89:
                    30:e1:cc:3e:30:f3:e2:21:5e:56:bc:f2:21:0c:9c:
                    dd:fe:96:10:d3:2c:f6:4e:bd:2b:4a:5f:e5:4e:bd:
                    08:c7:51:d7:14:6f:a0:08:a7:3f:fe:5b:ef:7a:42:
                    a8:82:11:41:a8:0c:81:d3:78:f2:b1:e6:4c:0b:f9:
                    b8:e9:c8:9f:31:c2:80:96:1a:75:46:d6:7b:e7:ac:
                    ed:66:af:e8:d7:c6:4d:07:5b:2e:4a:d5:99:e8:6c:
                    99:89:1b:c9:ab:8c:27:f1:29:c4:ec:a5:f3:ed:12:
                    6b:ca:4c:42:d5:3f:cb:73:ac:3a:5d:c4:2e:88:43:
                    03:8c:f9:62:f0:13:24:aa:5d:f9:15:f1:6e:3d:d8:
                    1c:14:00:7a:b7:e7:77:f2:69:22:58:6d:cc:1d:2a:
                    ab:70:bb:6d:72:e5:5f:76:41:51:69:e2:6c:ae:4f:
                    56:dc:13:29:76:dc:c3:53:42:38:e7:36:9d:a9:eb:
                    c4:1a:a3:6a:c6:f8:cb:5d:60:4b:42:2c:7d:a4:50:
                    3c:2b:c3:d5:d5:a1:be:1a:97:55:78:9b:ee:a1:f9:
                    ba:83:5c:f4:36:68:15:09:b2:75:5b:8d:6f:6a:84:
                    1f:ed:74:46:91:b5:41:61:30:ab:9b:ee:22:1a:91:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D1:A8:72:6F:70:14:BF:47:57:B7:DB:C0:82:C7:23:27:CD:12:21
            X509v3 Authority Key Identifier:
                keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:db:36:44:ae:a3:e6:2b:4c:7f:4b:6f:62:82:9d:80:8a:b3:
         7f:97:36:78:a8:c2:8a:b6:4d:8b:0d:6c:78:1a:23:bd:c5:02:
         d2:14:16:43:d4:45:aa:57:27:06:92:6e:82:59:28:c9:2a:32:
         a0:02:4f:d8:1c:90:59:5a:35:d7:85:cf:00:5e:a4:15:a3:04:
         e7:0d:be:ed:91:69:1c:03:d9:f7:7d:cf:76:a5:e4:ad:a2:34:
         fb:b1:89:42:e5:de:49:42:9e:fd:97:39:19:e9:6e:aa:72:4f:
         15:de:15:a4:6f:65:f3:d0:9b:33:e7:a7:62:d4:2e:dc:1b:89:
         05:ea:cd:7c:d1:b9:8c:d9:62:ab:b5:60:f4:ae:a9:7c:d3:05:
         e2:24:2a:23:90:45:ab:f4:db:3e:81:e0:53:e7:3d:f4:a9:f9:
         d9:48:be:c1:e1:06:05:01:33:43:de:25:99:81:b3:f6:ab:ee:
         33:50:f0:a9:88:38:e8:2c:c8:7d:b2:2e:5e:4a:e0:27:76:a3:
         82:eb:26:19:c0:ef:b5:81:f8:82:73:27:7e:50:68:33:de:37:
         2e:a9:23:6d:29:43:e1:56:ab:f7:0d:cf:39:e8:75:de:d2:b2:
         f4:bc:4c:a5:80:6a:3b:0b:86:5e:12:4e:33:04:91:f1:c0:ad:
         eb:69:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:55 2026 by rpki-client