Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
File:                     _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json)
Hash identifier:          wqmYornHRq2tC1HRGfhkDlK5++NPaqoWlJ56MmBBBfQ=
Subject key identifier:   26:6C:4A:3E:13:64:1C:6E:8A:CE:50:14:3D:DE:A1:85:9D:F4:1A:76
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Certificate issuer:       /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial:       358E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
Manifest number:          3556
Signing time:             Sat 04 Apr 2026 14:38:15 +0000
Manifest this update:     Sat 04 Apr 2026 14:38:15 +0000
Manifest next update:     Sat 11 Apr 2026 14:38:15 +0000
Files and hashes:         1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: xFSnQ/E/mK7sAU2U2tgoaPlPuCRkmLY/d+JUvypABfY=)
                          2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: d1VOETNhFOccLSwqdQXH2GNl8fCdfHMVZ6K7EwkYRNQ=)
                          3: F62323DEB97911F0A728D041C4F9AE02.roa (hash: VYA799jHHyf/EZwQx98vKIoBtcAMfoZki4v45ia4iow=)
                          4: DA8A3692A59411F0BF072D6DC4F9AE02.roa (hash: KPbP95r3TCc58AOeYUlQqKFz/YOZ3L4nxR/B312mHxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
                          rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13710 (0x358e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
        Validity
            Not Before: Apr  4 14:38:15 2026 GMT
            Not After : Apr 11 14:38:15 2026 GMT
        Subject: CN=69d12257-17c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:38:23:bc:51:12:9f:e8:5c:72:7c:8d:6a:c4:
                    21:f2:cb:fb:91:59:5a:05:e9:e9:da:56:f7:84:5b:
                    85:93:7a:78:3d:9d:f0:f2:12:6d:23:8c:e7:e5:78:
                    ca:99:09:58:bc:08:45:97:70:7a:bc:67:c5:b5:e2:
                    a6:d8:a8:7c:20:3f:3e:a0:b0:bb:31:c5:e8:9b:54:
                    78:24:d3:89:ff:de:7e:82:9f:ba:4b:fa:45:af:d7:
                    b1:c6:b0:70:cf:8d:70:b0:90:43:a8:6e:5c:9e:6c:
                    85:50:9f:b2:2c:d8:32:b8:65:d1:3d:56:ed:b4:81:
                    6e:0c:0d:3c:71:36:16:c8:4b:03:ae:30:b1:e0:cb:
                    4c:b4:05:57:5b:01:da:56:60:56:da:66:9f:fa:e3:
                    64:6e:82:92:22:7b:42:37:d1:c8:cb:e1:47:41:61:
                    ce:74:2f:ae:68:c3:61:d7:b5:47:c2:cb:c5:2f:22:
                    76:e0:67:c8:1e:26:b0:a8:4c:de:ab:2d:ed:05:c7:
                    ea:5f:12:2f:84:cf:e2:5d:3b:2b:a6:ed:71:07:1d:
                    f2:54:f7:4e:ac:52:a0:f7:eb:89:40:31:cc:3b:88:
                    dc:47:14:23:65:0a:23:ec:1d:fe:a0:1f:f2:74:c8:
                    92:26:46:ed:c8:74:41:9b:a0:62:87:15:0c:79:e6:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6C:4A:3E:13:64:1C:6E:8A:CE:50:14:3D:DE:A1:85:9D:F4:1A:76
            X509v3 Authority Key Identifier:
                keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:57:83:4c:50:be:2a:f4:1b:44:4e:72:bd:2c:3f:f5:35:59:
         4f:b7:6a:72:77:f7:65:2f:67:3f:3d:51:1f:cf:b8:91:f2:7c:
         a8:b0:df:5f:b3:a6:4b:1d:c0:ca:49:58:5c:02:b2:cd:7e:51:
         65:3b:5b:a4:dc:7b:9b:4a:17:0e:30:7d:19:27:a2:33:d0:40:
         3a:4e:d3:a8:f5:e4:1b:ee:53:f9:01:3a:d6:f0:4b:56:11:83:
         1b:21:fc:de:98:21:13:29:ba:07:36:4e:20:c9:00:84:89:7e:
         50:41:f7:a6:93:c6:15:f1:21:6b:e2:3f:98:98:76:70:3d:70:
         8f:78:e5:cb:4e:5c:ef:bb:32:3b:35:90:0e:bb:3a:16:d3:ff:
         87:96:15:80:40:c8:41:7e:d5:c4:51:d8:60:a5:d7:7d:d8:8a:
         a5:4b:c4:5e:c5:4e:32:d3:f7:08:0d:1b:f2:b5:fd:6a:f4:21:
         5d:d4:cf:95:a3:ab:8f:cc:95:b5:4f:1b:f7:2c:bd:4a:8c:ff:
         5a:6b:42:52:d6:8c:94:63:52:59:d7:72:ec:5d:fb:72:16:f1:
         92:1b:4f:cf:a0:54:ea:2d:a4:56:6c:a3:03:01:34:10:c1:01:
         ec:c8:6e:ae:79:38:96:e2:00:0b:fb:9b:fa:4d:20:74:7f:86:
         ff:11:6b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:51 2026 by rpki-client