Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File:                     aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier:          JHhjlOFrjydtpo6aRmeFjGN+mMhcl5R8ksX8qzjV0rk=
Subject key identifier:   42:AA:B2:3A:B2:1A:D0:3B:C5:70:55:AC:8B:31:DC:A9:F6:AA:92:28
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       0943
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number:          08DE
Signing time:             Sat 14 Mar 2026 20:17:05 +0000
Manifest this update:     Sat 14 Mar 2026 20:17:04 +0000
Manifest next update:     Sat 21 Mar 2026 20:17:04 +0000
Files and hashes:         1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: OpFGF0flFitWkhZh35vbs6WVppooZPvY6iITPDXTAg8=)
                          2: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: MfBYIfef5q6axAJciYZD+YSWEevAKozoCGz/YdfVQD8=)
                          3: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: Uo8Q/y2S0AomO+yycZEREAugFGcv/hV1i0jWeHXdlLc=)
                          4: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 8+dd8R1o75QRLyHuuzSXOMP23xZFljZU1QgoZzaoaIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371 (0x943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: Mar 14 20:17:04 2026 GMT
            Not After : Mar 21 20:17:04 2026 GMT
        Subject: CN=69b5c241-142b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:48:b7:56:4a:9a:fa:45:7e:77:72:aa:6d:
                    82:1c:d4:90:72:5e:f7:d6:f5:0d:6e:b7:ee:17:d3:
                    fc:29:28:8a:ee:e4:57:2b:29:cf:36:2b:95:01:57:
                    bb:78:a9:a2:ce:dd:01:8c:6c:ba:32:5e:6c:af:8e:
                    55:6d:f1:9f:53:9d:9f:e1:78:d4:1e:c0:a3:ad:f3:
                    a7:d5:50:fb:6d:fe:74:62:2e:4c:34:58:4f:c5:39:
                    76:c4:55:b7:01:0c:28:90:5f:33:04:5f:87:90:af:
                    01:e0:d8:c6:84:8d:eb:4f:e0:08:99:3c:c9:c3:7c:
                    33:1f:f7:7f:fd:11:7b:b6:fb:41:b7:b6:b0:63:89:
                    46:e5:1d:c7:ad:85:96:8b:b8:4b:2e:fe:ea:53:d4:
                    91:c5:b3:9d:25:06:2a:3c:dc:fd:11:3a:9e:32:30:
                    55:c4:05:d6:6d:87:da:c5:3b:fb:d4:d7:6c:23:f3:
                    d6:87:76:1d:d0:7b:e1:23:4f:10:3a:4c:37:da:1f:
                    be:c6:48:40:ed:45:f5:92:93:f3:30:ce:0a:87:d9:
                    19:2b:0f:a2:10:00:60:51:a4:43:22:ca:87:8f:38:
                    a0:04:08:ad:e0:d9:23:3f:77:eb:48:bb:61:cd:4b:
                    6f:75:c3:a1:7e:19:64:65:81:6e:a0:fe:6b:6e:d2:
                    db:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AA:B2:3A:B2:1A:D0:3B:C5:70:55:AC:8B:31:DC:A9:F6:AA:92:28
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:63:78:03:c2:9b:8d:cc:e1:7c:24:05:02:d7:e8:36:0c:a1:
         95:f6:54:80:96:ce:41:e9:55:f0:49:1c:34:6c:4a:10:e8:b1:
         bd:87:78:31:74:eb:87:6b:15:6c:91:27:08:83:40:e2:3f:b9:
         77:e6:6a:0d:27:bf:35:f9:5d:c4:7c:82:57:60:2e:88:65:6e:
         e2:ea:60:7d:96:d0:49:61:f9:ba:30:ef:40:93:41:49:dd:ec:
         b8:78:26:ba:7e:d6:92:01:f3:d5:e7:cc:d9:fa:a7:06:b2:2c:
         1b:9b:10:29:fa:b9:bd:ec:b3:95:52:b1:f7:97:74:d4:69:86:
         06:b5:67:37:a9:d4:f9:69:4b:fd:e9:42:11:64:29:18:b7:df:
         61:6b:26:67:b7:e3:1c:cd:d8:3a:07:74:95:26:66:22:2b:f0:
         8d:a7:e6:3a:05:8b:37:ad:17:60:59:e6:15:d5:65:11:8c:0f:
         cc:16:8f:82:75:10:d9:7e:19:47:46:65:1c:ac:c9:02:31:65:
         31:4d:ba:95:24:e4:97:22:fd:1b:00:76:69:48:dd:4a:0c:2a:
         ad:43:06:dd:61:48:7f:c8:eb:20:f7:71:04:c6:62:7d:b2:ac:
         2b:e5:d9:c7:72:21:30:10:ac:3b:46:15:9c:33:b8:65:0b:38:
         e2:30:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:56:10 2026 by rpki-client