Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
File:                     _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json)
Hash identifier:          vnaZHfgoTQ+UVYLLgssmJCeMwq1yQ8O1UTrEcGF1D4k=
Subject key identifier:   DB:95:1D:34:3E:BC:97:E3:44:6F:D6:06:BF:9B:1C:60:89:95:99:FA
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Certificate issuer:       /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
Manifest number:          0178
Signing time:             Fri 13 Mar 2026 03:41:22 +0000
Manifest this update:     Fri 13 Mar 2026 03:41:22 +0000
Manifest next update:     Fri 20 Mar 2026 03:41:22 +0000
Files and hashes:         1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: fmmh9X7runk9IvfBxbY+9AYkcrNcTxhGa66M2X9yMh4=)
                          2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: iAJ7bJgPc3fvc0VT2Ih64KNDwG9PjNk9khGO+aQcVnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
                          rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 03:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
        Validity
            Not Before: Mar 13 03:41:22 2026 GMT
            Not After : Mar 20 03:41:22 2026 GMT
        Subject: CN=69b38762-2bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:e0:c5:c7:ba:0e:95:c0:4a:c7:6d:1a:df:
                    2b:2a:a7:87:b9:8b:55:fd:f1:33:99:dc:d0:9b:cb:
                    a2:a1:e6:69:25:13:78:f7:cc:19:85:28:dc:5f:78:
                    9a:4a:bf:ae:4a:1b:27:9c:a9:fb:33:ce:36:7d:df:
                    24:7d:08:f9:9a:33:f0:42:6e:fe:87:64:b5:7f:86:
                    eb:4f:80:1c:ac:03:a8:b3:ba:ec:4a:41:4f:1a:12:
                    d0:57:17:7b:c7:e3:18:ea:50:d8:01:6b:55:58:9f:
                    00:f9:dc:88:6b:33:c6:36:d1:ce:92:31:ef:24:7c:
                    54:6d:7a:79:9e:87:88:ea:0e:b0:66:07:c2:f7:3b:
                    25:78:c4:ed:ab:51:f2:06:a2:f7:8e:0c:20:76:7e:
                    09:9f:ab:97:a7:da:d9:23:54:74:85:45:a6:47:eb:
                    1b:4d:03:62:0c:fe:c4:44:b2:ed:38:d7:36:1c:2a:
                    08:d4:32:eb:c2:fc:20:b7:e2:32:f9:f1:92:00:67:
                    87:35:35:a9:66:13:44:47:e6:b1:75:69:eb:bf:e3:
                    44:f0:54:66:3e:50:e7:f8:e6:c1:b6:6f:69:9c:78:
                    6a:37:59:8b:2d:99:8a:e5:77:c8:6a:6d:ed:4d:b4:
                    7b:e6:20:25:d0:9c:b2:a4:df:3e:34:ba:0e:04:60:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:95:1D:34:3E:BC:97:E3:44:6F:D6:06:BF:9B:1C:60:89:95:99:FA
            X509v3 Authority Key Identifier:
                keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:58:fb:5b:e1:79:21:3e:ea:34:11:e2:05:d2:8a:21:60:60:
         bf:d3:f8:46:97:11:a0:5b:40:b8:3f:09:3c:74:8f:e9:b6:29:
         59:08:54:c4:37:63:0c:47:3e:65:e1:b4:f1:df:e6:ea:cf:f2:
         f5:ca:d0:aa:c7:b7:3c:b3:6c:ae:c0:69:28:22:ce:f9:c9:3b:
         96:7a:48:da:de:92:cd:b7:b8:d8:cd:9a:60:21:ab:20:ba:a3:
         8d:1e:f9:f8:bf:a8:5c:63:e7:db:4f:d7:e8:61:5a:55:db:7d:
         5f:71:ed:bd:cc:0b:c6:0a:43:18:6d:1e:77:5a:63:fe:9d:ce:
         bf:9f:b8:b7:b9:4a:49:5d:d0:c0:6c:5d:12:23:49:cd:9e:a8:
         e6:af:85:16:01:56:1f:28:a7:26:ca:a0:30:66:bc:0f:ec:0c:
         f5:7d:b0:63:58:55:c6:1a:70:eb:0e:2c:50:06:c9:d4:f6:7e:
         2a:28:7a:20:ee:28:92:e8:a7:cb:6f:b8:b3:5e:9f:3f:30:8d:
         69:ae:66:a0:5c:dc:48:3c:6d:b9:f8:5c:36:f7:eb:b3:15:87:
         8c:5e:1b:45:e6:3e:6c:21:20:48:32:95:93:9d:72:1f:00:f6:
         d9:8f:7b:16:3a:df:f5:d1:59:2b:1a:22:cd:b6:b4:34:50:3f:
         c4:4a:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:39:55 2026 by rpki-client