Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
File:                     EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft (raw, json)
Hash identifier:          mxvP1sjn3q1uFfmuQplUXVMOlOZs0XmQAm9jBTeXlPs=
Subject key identifier:   4A:71:8D:B1:4D:7B:2A:65:68:CE:66:56:7B:A8:BA:7C:60:F8:A7:5C
Authority key identifier: 11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F
Certificate issuer:       /CN=A91A0807/serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
Manifest number:          32
Signing time:             Sun 01 Mar 2026 10:05:01 +0000
Manifest this update:     Sun 01 Mar 2026 10:05:00 +0000
Manifest next update:     Sun 08 Mar 2026 10:05:00 +0000
Files and hashes:         1: EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl (hash: vxOzagifV29VGDZBSp8T7VnaGUtqhNEZNFkSpflRSs4=)
                          2: 507C7202CCBE11F0AAAC3C24C4F9AE02.roa (hash: 32SWwd/uA3kg1otVJJYx1D2OTVjSQSkyd9lnzIXFPaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl
                          rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0807, serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F
        Validity
            Not Before: Mar  1 10:05:00 2026 GMT
            Not After : Mar  8 10:05:00 2026 GMT
        Subject: CN=69a40f4d-e7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:4a:d3:cd:09:32:98:20:b7:df:7e:89:91:
                    c0:38:9f:ef:de:e3:a8:48:b6:36:c7:9d:00:d2:63:
                    2d:b3:4f:84:43:f5:be:81:b2:1d:46:cb:96:43:3a:
                    e2:42:7a:81:a6:2e:87:12:31:92:36:f1:e7:d8:2a:
                    38:73:c6:88:0d:0a:d5:45:14:73:83:e1:0e:91:a8:
                    f7:a6:d1:9e:39:ee:0e:49:0b:b3:fa:24:e1:67:f6:
                    36:e9:51:4d:f1:44:2f:b9:d2:d8:40:83:13:98:c6:
                    c2:eb:ef:bf:39:33:b9:7a:fc:80:57:c5:0e:40:fc:
                    e1:87:9e:98:06:3e:3f:21:9b:fa:ea:b9:23:75:20:
                    81:a1:af:78:03:0b:9e:ab:54:fd:4c:8c:5b:db:05:
                    83:d1:ab:f8:a2:46:30:38:29:ae:a6:0b:43:42:14:
                    d8:cf:8e:da:69:be:a5:4b:a3:64:9b:5e:5e:74:67:
                    9b:4b:bb:4e:1b:34:b1:7a:d3:a6:f0:59:ea:7a:77:
                    fc:76:cc:64:54:13:1d:85:1d:3a:21:d2:e2:2a:4e:
                    cf:96:21:ab:18:da:e4:f0:70:85:40:19:cf:45:65:
                    a9:6f:9f:c0:12:98:ef:29:8e:de:d5:b7:b0:b0:da:
                    da:40:70:e8:48:e9:7c:6e:ca:03:68:e9:73:39:47:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:71:8D:B1:4D:7B:2A:65:68:CE:66:56:7B:A8:BA:7C:60:F8:A7:5C
            X509v3 Authority Key Identifier:
                keyid:11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:da:80:5c:e2:7c:65:f4:b0:c6:b4:60:fd:8c:ab:ff:b8:61:
         28:fb:23:8e:30:97:8f:ae:e4:88:c6:69:4a:9b:8f:69:08:89:
         d6:88:f5:83:fc:7a:a2:80:e1:fa:b7:11:29:98:3c:b9:cc:03:
         84:9e:ae:48:df:c6:46:3b:39:2b:a3:b4:b4:d7:4d:8e:40:70:
         01:42:63:8d:d0:7f:13:b2:ee:30:9a:d8:39:01:62:70:ef:66:
         16:4a:6d:82:9d:b9:a5:f7:d2:ae:bc:4b:c7:e1:33:8e:e5:02:
         c7:ef:ae:cc:55:0d:b6:eb:9f:bd:ed:9d:82:c5:9a:fd:e1:ef:
         a8:e1:78:10:b7:7d:77:0e:16:5c:63:c4:57:0c:2a:36:37:d9:
         6e:34:50:75:32:d8:06:40:68:4e:34:70:9c:35:8f:58:b6:3a:
         44:dd:62:45:08:05:78:ea:99:d5:d2:26:df:b6:3b:ce:d5:e9:
         80:13:d3:50:b9:52:2c:2c:27:01:4e:64:c6:42:52:2d:54:89:
         2e:6b:93:70:e3:1e:39:33:cd:cd:66:54:28:a7:65:d0:4f:22:
         92:a9:ed:14:a9:e6:2b:3b:b6:8c:a9:3f:2a:03:75:1b:54:06:
         bf:80:d4:0f:9c:c0:75:f4:45:fe:54:67:cb:f8:0d:d1:07:15:
         1a:35:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:49 2026 by rpki-client