Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
File:                     Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json)
Hash identifier:          /PevXqk3etrpw6s6c183THxNqp0U2M08b4WkKX1Z0w8=
Subject key identifier:   78:CD:E7:C2:78:0B:21:D7:BC:FF:06:F1:57:10:5D:2F:E5:90:22:2B
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Certificate issuer:       /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial:       0501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
Manifest number:          04B6
Signing time:             Tue 10 Mar 2026 23:36:51 +0000
Manifest this update:     Tue 10 Mar 2026 23:36:51 +0000
Manifest next update:     Tue 17 Mar 2026 23:36:51 +0000
Files and hashes:         1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: bAgg0R2KGYIuZZcUQAHferR6FhIRHBMksrYZ+z14OgU=)
                          2: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: 3Nhpzz36VSFEHxJya2rE/6rzHTYaQVksxEeUha/irsc=)
                          3: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: sK7hOQtBbdjqCpDICxDk4yk4JTjSJi8T3sqSf4Lha9w=)
                          4: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: UCg4wJkvMAwrQhdPO9e6tz9kKiLqe8tkbkp5RwOBI9k=)
                          5: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: ddJzWQzhPMRW8RWCPYnqPYLIbALxTv96n4V/wf2N7x8=)
                          6: 4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa (hash: p+BwKAodmJqbLlqXyZtD+mJHN7NUdRLLCP8+RPEq8R4=)
                          7: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: J/y5zeodGHbN3vp7O7AJhQI6RPkj8TQkWk7gr7sHHCA=)
                          8: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: u+MRGHbFeFUPlLfGYwJEnpOiyClJtJ0KRuVBvJpUNDk=)
                          9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: ErPhHuDK3ekByL6ifWQZAzFYI/duFVOlJelFvK4aMbc=)
                          10: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: 2QtjnY/xrXLEykN5W8u+hPxfRcseLCmC+14qCL2SI+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
                          rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 23:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
        Validity
            Not Before: Mar 10 23:36:51 2026 GMT
            Not After : Mar 17 23:36:51 2026 GMT
        Subject: CN=69b0ab13-dfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:75:9d:f8:b9:54:6a:72:78:0f:62:38:b8:
                    50:c4:47:e7:a6:17:6d:6f:45:4b:0a:17:ce:4d:a2:
                    91:0f:62:f2:0c:ce:55:42:34:d1:ac:ed:91:98:6f:
                    2c:3f:07:82:30:05:8c:26:9b:a5:e0:eb:dd:0a:60:
                    04:40:78:4b:23:f3:5d:92:77:13:d9:81:e0:e1:4e:
                    25:e9:67:99:e0:44:2e:72:fa:40:dc:c5:ed:79:58:
                    bf:b6:75:a0:a4:82:26:f2:05:41:72:86:a5:83:b1:
                    2b:25:fd:be:d0:30:df:2d:70:8d:bc:d4:7d:1a:7d:
                    ea:40:21:ed:73:ac:c6:9b:0d:cb:06:5d:b5:1b:a4:
                    39:fe:6f:76:8a:d1:70:40:71:41:69:cb:e9:16:ba:
                    f8:a7:23:fa:46:be:0e:49:78:ad:34:42:cf:71:79:
                    67:37:48:bc:20:ad:e2:54:7d:d2:58:d2:d8:32:81:
                    be:0e:03:ae:b3:52:6c:60:a3:3b:24:12:1f:8e:89:
                    be:57:02:03:7f:da:23:cb:7c:1c:2b:b2:82:47:23:
                    70:7f:73:7b:82:fa:d0:19:57:5e:93:d4:65:4b:c8:
                    a2:64:b7:36:30:72:80:9f:32:b4:00:f3:41:7c:e3:
                    4f:36:5f:a5:b4:5a:a5:a2:65:db:01:07:61:63:44:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CD:E7:C2:78:0B:21:D7:BC:FF:06:F1:57:10:5D:2F:E5:90:22:2B
            X509v3 Authority Key Identifier:
                keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fd:fa:ea:21:5f:6c:b9:fe:d2:e1:d2:4f:58:fb:17:0c:02:
         0e:50:23:d7:87:84:92:2b:d1:3e:eb:e4:6a:3a:a4:ac:7c:c2:
         b2:aa:57:ba:68:a2:8d:1a:56:e2:98:fb:27:46:e0:af:e1:b0:
         8a:db:61:27:0e:f0:50:5f:1e:d0:87:99:6b:69:20:59:24:80:
         f7:11:58:55:2d:97:3c:35:02:e2:4e:85:36:12:40:a0:39:2d:
         53:4d:ab:e6:4e:2f:a4:e8:4f:33:4e:d8:e4:4c:3a:26:e5:75:
         6e:f3:43:12:4e:c3:31:8b:52:29:e9:ef:50:50:bb:a3:71:e1:
         3d:36:67:4a:59:f2:e4:31:0f:7e:05:44:20:d4:da:07:06:9b:
         1d:1e:7b:cb:53:75:cb:ea:1b:1b:8d:71:b5:d8:f7:b4:c5:8d:
         32:32:bb:62:4b:b0:6f:80:9b:27:98:d7:9e:c2:30:df:04:b3:
         36:a1:87:95:16:38:4b:58:5a:87:8f:60:f4:2e:95:2a:b5:c5:
         37:81:94:46:48:82:ad:b7:44:d9:cd:00:11:8b:bc:f8:fe:3e:
         2a:5e:64:85:86:09:0d:f4:7e:c4:e5:ed:9f:9b:50:d6:f7:50:
         fe:43:65:83:80:8b:3f:66:1c:76:ef:b6:72:83:4d:b3:0d:9d:
         df:36:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 10:37:24 2026 by rpki-client