Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
File:                     P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json)
Hash identifier:          0L1U9WB3/uXMHv6aUoiYTIvhwehwR/iwQ8iReodoaJY=
Subject key identifier:   27:A2:D5:F6:E7:22:15:AE:D5:62:CD:97:A1:AF:A0:97:62:E8:20:AC
Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
Certificate issuer:       /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Certificate serial:       0CE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
Manifest number:          0CD4
Signing time:             Mon 02 Mar 2026 01:38:09 +0000
Manifest this update:     Mon 02 Mar 2026 01:38:08 +0000
Manifest next update:     Mon 09 Mar 2026 01:38:08 +0000
Files and hashes:         1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: W1n+uRqqVO1CDpxoVXapazc+pHp4EInB0iZU8MxhaYo=)
                          2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 0Bzx3cTQetOlK87DOybR5kJ5yU0elH44slx+HVrYHM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3296 (0xce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
        Validity
            Not Before: Mar  2 01:38:08 2026 GMT
            Not After : Mar  9 01:38:08 2026 GMT
        Subject: CN=69a4ea00-0c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:3c:d8:69:30:de:b3:af:05:2d:d1:e1:2e:
                    26:8f:9a:21:24:9d:99:c5:50:2b:fa:9b:e3:f8:5d:
                    be:18:00:3e:7f:a0:bd:db:c9:b3:bb:bf:6c:20:9a:
                    f0:b9:bc:f7:02:d0:28:fb:7f:0e:02:d6:9e:52:3b:
                    83:df:87:79:ee:30:9e:45:51:9c:b1:32:84:91:38:
                    39:14:1a:d4:09:b3:aa:54:ab:08:09:68:fa:57:37:
                    54:27:80:f2:5b:c2:ba:9d:40:77:06:1d:75:28:96:
                    3b:75:ef:3c:5e:99:27:83:2c:db:c9:99:2c:32:df:
                    6b:18:22:0c:2a:9d:10:a6:1a:1c:34:38:23:48:c9:
                    64:3c:a6:a0:03:42:23:41:ab:c2:b0:97:39:2e:a6:
                    69:e8:0c:7e:9f:df:f6:e8:59:fc:fd:d2:f3:53:0a:
                    f3:b3:8e:52:01:c8:8f:8b:97:22:d9:4d:96:28:14:
                    8a:19:9b:a6:09:3b:92:62:a7:ae:6d:11:c0:6f:1d:
                    8b:a8:7e:68:c8:79:92:9f:15:7e:4b:3a:c0:46:76:
                    3b:5b:0c:9c:31:ac:2a:bf:d6:39:cb:96:c2:2e:ae:
                    95:8e:4d:25:77:83:d9:c9:ec:db:4e:fa:b9:43:05:
                    cc:cc:59:2c:64:82:04:f8:d7:75:2f:bd:2e:67:8e:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A2:D5:F6:E7:22:15:AE:D5:62:CD:97:A1:AF:A0:97:62:E8:20:AC
            X509v3 Authority Key Identifier:
                keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:03:de:48:d0:c9:5a:87:d8:f5:bf:09:8c:5e:96:e5:8e:93:
         3e:01:79:1b:06:0e:7e:8d:88:bd:f3:12:cc:36:c4:eb:bb:2a:
         60:15:9c:c7:63:56:d0:04:c1:91:fb:e7:e0:4c:e4:6d:c2:cd:
         62:7a:07:7a:f0:03:d7:89:0c:3e:a6:88:ad:7a:ab:ed:a5:b3:
         94:48:e5:2b:18:64:11:47:49:0a:d5:d2:6a:cb:a3:5a:75:21:
         84:3b:a9:ef:62:f5:35:93:19:c1:cc:1e:fd:1c:12:8d:67:de:
         c6:8c:1d:35:d0:e0:d6:93:bb:59:6b:6d:8f:b3:64:57:8e:3d:
         c1:59:32:5c:01:68:bf:d3:75:2e:73:05:06:71:ef:eb:d5:b7:
         14:ba:f3:ff:cf:d8:17:d0:2c:cf:a3:9c:da:86:57:78:7b:7d:
         c3:c2:dc:fd:31:d9:65:a0:86:09:62:f1:92:92:16:46:e8:6a:
         0e:9c:8c:63:64:3b:8d:91:8a:4e:a8:95:ef:14:ae:92:cf:1b:
         b1:14:23:12:fd:6c:c3:3f:bb:e0:34:6d:19:a8:81:0c:a4:b5:
         79:0b:65:4f:08:ca:d1:e7:4c:f7:c3:7f:39:96:d3:16:f3:ed:
         24:18:1e:e3:86:8e:d4:c5:f1:a6:a5:76:77:0d:48:e9:e0:18:
         c6:db:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:46 2026 by rpki-client