Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
File:                     4AJb-TLnFuGh-K-QECEcQRCE_J0.mft (raw, json)
Hash identifier:          7Zm0/5hFJaic43hFlIesI0qc73aDgzR7TN73PhJv1h0=
Subject key identifier:   D6:90:09:7C:AA:E9:46:71:93:21:14:45:E0:B8:2B:B1:52:CD:5B:71
Authority key identifier: E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D
Certificate issuer:       /CN=A9197FDB/serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D
Certificate serial:       0628
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
Manifest number:          061E
Signing time:             Thu 12 Mar 2026 22:27:07 +0000
Manifest this update:     Thu 12 Mar 2026 22:27:06 +0000
Manifest next update:     Thu 19 Mar 2026 22:27:06 +0000
Files and hashes:         1: 4AJb-TLnFuGh-K-QECEcQRCE_J0.crl (hash: OVMI9DTdj8Kys4YxUSjPHHZCOhEchQF/rjCeF815bTw=)
                          2: 0A1FAC405BB211EEAD06B243C4F9AE02.roa (hash: cLEGJuuOutpOBPsuC1eSdRC04oAPN6e0TRfgYBt8aGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl
                          rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197FDB, serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D
        Validity
            Not Before: Mar 12 22:27:06 2026 GMT
            Not After : Mar 19 22:27:06 2026 GMT
        Subject: CN=69b33dbb-eaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:c1:1e:98:3f:c9:14:6f:3d:19:14:ff:46:
                    ab:6e:61:0f:1d:b9:07:c1:62:34:1b:c5:3c:81:46:
                    bf:73:71:03:a6:c9:2b:cb:50:7c:14:83:aa:06:19:
                    29:9f:1f:4e:20:1d:b3:41:84:fe:f5:62:45:b0:ba:
                    96:14:96:ed:a2:52:c2:0f:de:bb:9c:95:9b:b5:b5:
                    bf:eb:f6:35:cc:34:4e:74:da:78:a7:51:d4:37:30:
                    a4:18:3f:5d:38:89:8f:cd:b1:b7:21:1a:36:51:0d:
                    f5:3f:6b:6e:ce:2f:c8:8e:86:ad:78:15:33:69:f6:
                    07:01:31:a1:c2:ec:47:cb:38:9a:6f:c0:19:00:96:
                    09:f6:56:65:a4:d5:bf:4a:10:a7:a7:4c:4f:fa:42:
                    21:4c:fb:94:0c:09:05:48:cc:24:e0:b1:73:93:11:
                    a4:e0:8f:84:ae:d9:21:f4:e5:b8:be:c6:a0:2d:9f:
                    95:56:28:26:b1:8b:70:6d:31:8b:d2:33:f4:0c:11:
                    17:df:c1:20:5d:84:5c:99:8b:ad:58:d2:44:17:c1:
                    5e:63:81:45:71:0f:1b:75:be:5a:5c:a5:cf:34:ce:
                    bf:35:53:4b:b2:2d:d3:fb:26:d4:87:31:54:66:6d:
                    16:67:b9:ad:6b:f4:de:dd:e9:14:7f:f9:65:31:bd:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:90:09:7C:AA:E9:46:71:93:21:14:45:E0:B8:2B:B1:52:CD:5B:71
            X509v3 Authority Key Identifier:
                keyid:E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:6f:a8:43:c6:dc:54:d0:a6:71:45:eb:d0:34:af:cd:bd:
         bb:1c:ff:3e:8a:98:db:e6:71:94:f6:88:f6:db:c4:41:b0:16:
         07:ac:b2:8e:96:63:ce:bc:72:07:ac:75:fa:32:b3:fe:a0:5c:
         b9:01:ad:2c:bd:2f:cd:de:17:0a:52:3f:f6:16:aa:20:c8:8b:
         a6:ad:87:d7:6a:a0:d1:ce:2f:4e:49:e7:e0:b0:3c:aa:85:20:
         bb:29:b6:1c:67:26:ee:c4:54:ae:62:43:35:55:15:09:ba:d6:
         c5:c0:b1:6a:d2:33:59:c6:ae:85:42:40:45:55:10:97:ed:21:
         f2:a3:bb:11:c5:18:43:21:4f:9c:19:6a:3d:f2:ac:19:f4:fa:
         8f:47:4e:d9:c0:0b:cd:36:72:a1:64:fb:65:9c:3a:ba:a2:e1:
         02:ef:f4:39:19:c7:3a:3f:e7:de:da:09:c8:04:a2:40:18:7b:
         da:07:78:f7:e6:2e:e0:f5:db:ce:34:1b:97:13:78:82:fe:3e:
         6f:d1:7e:4b:72:f9:bf:00:4a:a9:00:19:29:99:79:ff:98:44:
         cb:90:c2:e5:ab:0b:0a:b4:a5:28:f1:ea:1d:4e:7d:df:fd:c5:
         07:a7:88:88:9c:82:33:91:70:d6:2c:d3:2f:af:37:88:c7:b5:
         4e:48:89:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdGREIxMTAvBgNVBAUTKEUwMDI1QkY5MzJFNzE2RTFBMUY4QUY5MDEwMjExQzQx
MTA4NEZDOUQwHhcNMjYwMzEyMjIyNzA2WhcNMjYwMzE5MjIyNzA2WjAYMRYwFAYD
VQQDEw02OWIzM2RiYi1lYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqTBHpg/yRRvPRkU/0arbmEPHbkHwWI0G8U8gUa/c3EDpskry1B8FIOqBhkp
nx9OIB2zQYT+9WJFsLqWFJbtolLCD967nJWbtbW/6/Y1zDROdNp4p1HUNzCkGD9d
OImPzbG3IRo2UQ31P2tuzi/IjoateBUzafYHATGhwuxHyziab8AZAJYJ9lZlpNW/
ShCnp0xP+kIhTPuUDAkFSMwk4LFzkxGk4I+Ertkh9OW4vsagLZ+VVigmsYtwbTGL
0jP0DBEX38EgXYRcmYutWNJEF8FeY4FFcQ8bdb5aXKXPNM6/NVNLsi3T+ybUhzFU
Zm0WZ7mta/Te3ekUf/llMb12ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaQCXyq
6UZxkyEUReC4K7FSzVtxMB8GA1UdIwQYMBaAFOACW/ky5xbhofivkBAhHEEQhPyd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZEQi82NTdFNDA3NERB
MzYxMUVCODRFNkEzNDlDNEY5QUUwMi80QUpiLVRMbkZ1R2gtSy1RRUNFY1FSQ0Vf
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRBSmItVExuRnVHaC1LLVFFQ0VjUVJDRV9KMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
N0ZEQi82NTdFNDA3NERBMzYxMUVCODRFNkEzNDlDNEY5QUUwMi80QUpiLVRMbkZ1
R2gtSy1RRUNFY1FSQ0VfSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAewZvqEPG3FTQpnFF69A0r829uxz/PoqY2+ZxlPaI9tvEQbAWB6yyjpZjzrxy
B6x1+jKz/qBcuQGtLL0vzd4XClI/9haqIMiLpq2H12qg0c4vTknn4LA8qoUguym2
HGcm7sRUrmJDNVUVCbrWxcCxatIzWcauhUJARVUQl+0h8qO7EcUYQyFPnBlqPfKs
GfT6j0dO2cALzTZyoWT7ZZw6uqLhAu/0ORnHOj/n3toJyASiQBh72gd49+Yu4PXb
zjQblxN4gv4+b9F+S3L5vwBKqQAZKZl5/5hEy5DC5asLCrSlKPHqHU593/3FB6eI
iJyCM5Fw1izTL683iMe1TkiJig==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:28:51 2026 by rpki-client