Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
File:                     rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json)
Hash identifier:          +lbOnjRfkJqU6cpmckcURnAqRM7PaMBY4ck2kGQ0Jz8=
Subject key identifier:   C7:18:A0:C6:E8:99:DE:24:48:8A:D4:1F:4C:DF:A8:84:38:7E:0E:F3
Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
Certificate issuer:       /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
Manifest number:          DE
Signing time:             Mon 02 Mar 2026 00:24:35 +0000
Manifest this update:     Mon 02 Mar 2026 00:24:34 +0000
Manifest next update:     Mon 09 Mar 2026 00:24:34 +0000
Files and hashes:         1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: aIcEoUl4YPC+KYdf4su7pj98JSISt969pVtdUGdAz9w=)
                          2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: hdlYLSviqdsjiISi2RWRWAEZ34QocD0U9ocvGaJFxhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
                          rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
        Validity
            Not Before: Mar  2 00:24:34 2026 GMT
            Not After : Mar  9 00:24:34 2026 GMT
        Subject: CN=69a4d8c2-73e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:e5:a7:42:b7:95:ef:e1:36:91:b7:d9:15:
                    e7:65:87:d1:a6:bb:d6:4e:e5:2d:b3:51:54:b8:41:
                    db:f1:42:1b:33:fa:c1:2a:4e:0f:3b:f9:d0:3e:2f:
                    5a:c1:32:56:fc:1a:a9:36:6b:39:d1:a1:18:c0:bb:
                    2d:6c:c5:06:4f:10:e1:29:4e:09:00:d7:a9:e0:c8:
                    16:98:0e:f1:f3:65:2e:a7:1e:38:cc:ce:31:7d:5d:
                    49:9d:51:34:69:4a:3d:4f:8c:55:cd:d0:d9:3a:3e:
                    6d:4e:d7:d0:bc:fb:59:7d:0e:e1:69:c3:f8:86:a9:
                    6f:be:9a:fd:3e:9d:57:34:fd:9c:0f:79:83:28:53:
                    3d:f1:82:d8:b9:76:50:0c:50:b9:33:0c:ec:43:f5:
                    a4:cc:5f:02:5f:0c:55:f1:75:55:13:88:f4:e1:4a:
                    66:b4:4a:76:e7:a2:7c:f3:a5:e5:0e:0f:86:b2:31:
                    eb:88:3c:4a:43:95:35:d4:4e:dd:61:a7:36:04:3b:
                    e9:b7:79:0d:8a:13:8c:0f:28:5b:92:bb:2f:18:98:
                    9b:52:12:a3:02:f9:d4:75:58:bb:fe:00:cd:40:3a:
                    00:fa:93:a2:8d:bb:f9:d0:4f:12:d9:bd:c1:42:b9:
                    3f:e4:33:9a:e7:32:11:20:ca:d9:84:a1:3e:6e:40:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:18:A0:C6:E8:99:DE:24:48:8A:D4:1F:4C:DF:A8:84:38:7E:0E:F3
            X509v3 Authority Key Identifier:
                keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:67:9e:69:89:05:b2:ef:a7:71:bc:f0:cf:a5:73:7d:66:98:
         fb:ad:a9:1d:f7:4a:81:b4:06:4c:df:fc:27:10:3e:b4:66:16:
         88:a3:25:b2:50:0d:fa:64:50:32:2b:e4:98:41:7d:cb:c1:cd:
         21:69:be:bb:be:18:2e:96:87:c1:84:6f:6a:c0:0d:18:49:0c:
         d9:c9:ee:10:64:51:4d:e1:01:e8:6b:ac:85:1a:fc:12:8a:74:
         12:eb:e2:24:fd:4c:0f:40:db:bd:40:a5:0d:05:76:1b:34:1e:
         ab:13:93:da:69:0e:2d:8d:2d:62:a5:b6:85:77:4a:28:68:b7:
         24:91:d9:37:14:09:f6:06:78:26:39:6f:6b:25:12:69:71:66:
         95:ef:d4:11:f7:25:47:fa:d7:bf:ed:fa:98:2f:23:a5:a7:26:
         0f:5d:09:49:13:78:6f:69:7a:46:f5:88:16:9c:a4:2e:00:ce:
         82:3f:20:72:59:2a:1b:2e:d0:23:1c:8e:7e:19:1f:09:ea:50:
         27:7e:f4:e0:7f:52:44:99:b7:13:9c:c6:57:c0:40:6c:14:9c:
         c1:c6:1a:a2:a2:95:86:aa:a5:a9:0a:92:47:20:44:08:cd:97:
         7c:d7:f5:9c:c2:f7:e1:14:ca:fa:ee:a9:40:7e:ba:4c:39:c1:
         d2:fe:ed:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZEQ0ExMTAvBgNVBAUTKEFFNzNCNzA1NDhGRjQyMkVEMDJENTlEMUNBMjU3OTNB
MDVFOUU0MkEwHhcNMjYwMzAyMDAyNDM0WhcNMjYwMzA5MDAyNDM0WjAYMRYwFAYD
VQQDEw02OWE0ZDhjMi03M2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmflp0K3le/hNpG32RXnZYfRprvWTuUts1FUuEHb8UIbM/rBKk4PO/nQPi9a
wTJW/BqpNms50aEYwLstbMUGTxDhKU4JANep4MgWmA7x82Uupx44zM4xfV1JnVE0
aUo9T4xVzdDZOj5tTtfQvPtZfQ7hacP4hqlvvpr9Pp1XNP2cD3mDKFM98YLYuXZQ
DFC5MwzsQ/WkzF8CXwxV8XVVE4j04UpmtEp256J886XlDg+GsjHriDxKQ5U11E7d
Yac2BDvpt3kNihOMDyhbkrsvGJibUhKjAvnUdVi7/gDNQDoA+pOijbv50E8S2b3B
Qrk/5DOa5zIRIMrZhKE+bkDjUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcYoMbo
md4kSIrUH0zfqIQ4fg7zMB8GA1UdIwQYMBaAFK5ztwVI/0Iu0C1Z0coleToF6eQq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81MDEwOTg3NkNC
MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9ybk8zQlVqX1FpN1FMVm5SeWlWNU9nWHA1
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JuTzNCVWpfUWk3UUxWblJ5aVY1T2dYcDVDby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkRDQS81MDEwOTg3NkNCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9ybk8zQlVqX1Fp
N1FMVm5SeWlWNU9nWHA1Q28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYmeeaYkFsu+ncbzwz6VzfWaY+62pHfdKgbQGTN/8JxA+tGYWiKMlslAN+mRQ
MivkmEF9y8HNIWm+u74YLpaHwYRvasANGEkM2cnuEGRRTeEB6GushRr8Eop0Euvi
JP1MD0DbvUClDQV2GzQeqxOT2mkOLY0tYqW2hXdKKGi3JJHZNxQJ9gZ4JjlvayUS
aXFmle/UEfclR/rXv+36mC8jpacmD10JSRN4b2l6RvWIFpykLgDOgj8gclkqGy7Q
IxyOfhkfCepQJ3704H9SRJm3E5zGV8BAbBScwcYaoqKVhqqlqQqSRyBECM2XfNf1
nML34RTK+u6pQH66TDnB0v7tiQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:47 2026 by rpki-client