Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          D2mJDec+Btv8XZDhUWx47wa2+jxCMJ8nIaOYC18bhHs=
Subject key identifier:   73:C7:B2:35:3A:A0:2B:10:67:0C:87:68:23:33:A0:44:71:8B:3E:8C
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       0345
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          02D5
Signing time:             Wed 11 Mar 2026 00:58:18 +0000
Manifest this update:     Wed 11 Mar 2026 00:58:17 +0000
Manifest next update:     Wed 18 Mar 2026 00:58:17 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: xD3xfQXr5SWrzFemM80u5sxZWRErCiTDKDR7A4SmX9c=)
                          2: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: ZL7HtMcMaee/+U2RFcFAEBNXOBbDZe6QSqp6AaUWyjA=)
                          3: 82FE8E1C90B511F0B55D6F53C4F9AE02.roa (hash: jniVoFO7asjIWO6HqjPSEhXjJIJMpsAC3AM61zDyHDg=)
                          4: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: RMVp8Qup/NU120gAEj7lgUVqAC4aVcpU8zUbzT1yzig=)
                          5: 42EEA7CE184D11F182F41629283D8C67.roa (hash: TVrPLmIBli4Y5DGPh5WbtZCgPebXr/yJxB3rRfwNFHI=)
                          6: E735782EBB8911F083DB6D28C4F9AE02.roa (hash: EGPPvZRgoPkvLfSn1FO9IWICWOn4INg9mkEVkACiYBo=)
                          7: E7BB6878778511F0A4E72535C4F9AE02.roa (hash: ZS69q+KLB0wxQSpzELQNwnOrdQL0A5TtkzgU+YFIMPc=)
                          8: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: AnPywYvkMzKBvrL7EYJm43TN30A+CP8/exgQap5VkDs=)
                          9: 0634745A36D311F091108A4EC4F9AE02.roa (hash: uaiAXHFgkoPRxU2DoLpe3SDOvNdXy/Ij5A7mMKtf32g=)
                          10: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: OyJt2s3qPZnoO34lc+1xKuSSrj0jZolC/kQHql+HGrY=)
                          11: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: pORpsNJ98G1sLBSGTNwGRFcCTTGxkjeaJpZ9poV5mz8=)
                          12: 43DD36C8184D11F182F41629283D8C67.roa (hash: rBuZ1UCPSkB8QdJUeC2S400luQuXQIUW14oFp5YN5zk=)
                          13: 974EDB46ED1311F09DD269343F6F56BC.roa (hash: wp6/EcySdPY2J9HVTxurzHs/7C5ZFYTx7rFTXPJhFNQ=)
                          14: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: ThNEZ/wZ14mYXLet8Z4TArJCtuPb8L+Y4/Se6rgtJdc=)
                          15: EDD791BCA80611F09091490CC4F9AE02.roa (hash: H19PUWRg0OLXt+zyul68ugvmUr9ug8PqNggB/l0rirk=)
                          16: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=)
                          17: 40257FE64D0E11F082837352C4F9AE02.roa (hash: 3xwrhLhWrv4Rc8fICKcBZccULTitMeKwRM4KNepaPck=)
                          18: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: L5jvQRnxxxHdy5lodGkjPlaB/lJvpEFIVFuxxQ3ZhTI=)
                          19: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: fhpQuv0y4UT5DryZGfmgAQDcckv6IFWk6lv7Kpt2qsY=)
                          20: 359EA23662B311F081881A48C4F9AE02.roa (hash: lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 00:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837 (0x345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Mar 11 00:58:17 2026 GMT
            Not After : Mar 18 00:58:17 2026 GMT
        Subject: CN=69b0be2a-0d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:85:ba:aa:81:71:2b:dc:4d:e4:59:ff:12:d8:
                    63:18:36:ec:52:ce:10:c5:9e:50:c6:58:48:35:fe:
                    01:d3:64:c6:05:e9:32:18:a7:c5:bd:7a:c2:80:80:
                    a5:3d:b7:d3:7e:5f:32:f2:1b:43:aa:76:d8:88:68:
                    3d:4e:89:e3:f8:07:b8:84:ba:f0:90:c1:81:54:5c:
                    b9:24:ee:e4:89:92:b3:50:1b:55:c9:5f:48:b7:3e:
                    f4:87:c7:77:f3:7d:9c:e4:06:d4:c8:2b:b4:72:4e:
                    42:41:98:18:6e:4d:01:9a:a7:37:e9:73:95:0c:ed:
                    19:69:f5:5c:86:16:bd:43:5b:fd:4e:bb:ae:7c:12:
                    25:53:ea:2c:cc:b4:5e:d7:6e:42:0d:0a:29:e2:96:
                    fb:2a:dd:e5:9c:76:9b:f8:0f:5b:71:39:01:d4:4a:
                    1b:47:34:a0:dd:e9:66:dc:f1:88:17:33:6f:f1:14:
                    a8:dc:85:6a:dd:a5:6d:31:94:40:94:d8:af:f6:53:
                    f6:33:29:eb:62:ee:b8:0d:3d:a3:e1:e9:3d:42:66:
                    21:34:70:01:ba:ca:aa:59:7b:c6:af:d8:1a:7c:27:
                    47:5e:dd:e8:3d:51:7d:77:14:ff:7f:22:76:a5:25:
                    f2:37:5c:45:38:18:da:e3:98:1d:42:89:6b:5b:2c:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C7:B2:35:3A:A0:2B:10:67:0C:87:68:23:33:A0:44:71:8B:3E:8C
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:09:de:cb:74:d3:dc:ae:cc:91:34:0a:2d:ea:8f:8d:7f:
         c8:b1:f1:c8:1f:93:1b:50:da:db:d1:d5:eb:b2:6d:16:e2:67:
         42:34:6e:a2:e9:a3:20:48:4c:7b:d8:da:6f:e1:34:fa:74:eb:
         b8:a1:e6:83:79:03:83:11:1b:c9:20:d3:b0:f7:e9:78:f5:8f:
         4d:f5:d3:4c:c3:d1:f2:fd:2b:d8:7b:0b:c5:e8:d4:71:e6:8c:
         10:81:27:d0:80:78:c0:0f:0a:6e:79:64:3b:06:dc:d3:ff:a4:
         08:5e:4b:50:90:d9:bd:7b:a7:e9:4d:2e:75:ca:c4:95:6c:0d:
         54:4c:6c:3d:d6:23:09:ff:23:76:ff:07:8a:f1:77:04:e8:34:
         a7:51:5a:e8:2c:4d:33:c8:05:58:eb:eb:fb:46:85:0c:b9:7d:
         0a:33:fc:2e:a2:e3:50:7e:38:57:53:f1:af:f1:f2:1c:e8:ad:
         15:b6:db:d8:41:aa:d1:99:1d:f7:15:62:2b:ea:4f:f5:08:db:
         0e:0f:c8:49:81:e6:13:78:4a:e1:09:9c:c9:7c:80:92:7b:d6:
         a8:72:66:e7:96:6c:b5:c4:d2:2f:08:a8:40:51:4d:42:e3:52:
         b6:20:49:15:fc:7b:6a:ae:f6:14:25:98:04:6e:b2:59:b1:b0:
         d2:b5:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 05:50:32 2026 by rpki-client