Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
File:                     lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft (raw, json)
Hash identifier:          AUYN8EG1/B6NiVvlbezeuu8xRSkoJQUR5YSzscaTzeU=
Subject key identifier:   B0:3B:67:06:57:08:7A:0A:78:27:CD:28:D7:40:71:30:61:A5:E9:FF
Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73
Certificate issuer:       /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
Certificate serial:       043A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
Manifest number:          0431
Signing time:             Tue 31 Mar 2026 00:11:52 +0000
Manifest this update:     Tue 31 Mar 2026 00:11:52 +0000
Manifest next update:     Tue 07 Apr 2026 00:11:52 +0000
Files and hashes:         1: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl (hash: P1etJAZmMOqOGfkPz6F8iAUacPnLpJQnPsefr02OhT8=)
                          2: EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (hash: ZXgKboUrATOaba4OCUaBI2e36XdZPzRo2ljJIUVJnOo=)
                          3: 886907F8EE9911EDB02DA367C4F9AE02.roa (hash: ugYyh2tWa/EfFa2n6GBnKXjm3DO0Nx4EENY2rTL3k2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl
                          rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473
        Validity
            Not Before: Mar 31 00:11:52 2026 GMT
            Not After : Apr  7 00:11:52 2026 GMT
        Subject: CN=69cb1148-3776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:00:fd:91:fe:12:bc:89:b9:55:53:cc:3f:
                    f4:69:1f:3f:48:90:5b:43:e6:4e:23:0a:a8:83:ff:
                    a0:5f:3c:b4:31:f8:a7:04:69:7b:4f:e6:29:ae:a4:
                    e9:b4:7d:3c:e7:87:cd:70:6c:7f:18:f4:01:dc:5b:
                    cb:ea:10:91:a9:88:bb:21:e5:a2:1d:6c:a5:c6:26:
                    4b:34:aa:2c:88:7a:cb:01:d5:9e:c3:92:cd:71:e1:
                    24:b6:b6:6d:b0:6e:48:be:3f:a4:88:6b:05:fa:bd:
                    b2:20:d4:78:cf:e4:a7:88:67:6a:0c:c4:0a:92:8f:
                    d4:d6:b7:ef:b8:bb:d0:6e:16:a7:bb:fa:3f:7e:b0:
                    12:6d:49:ba:2a:c2:40:aa:e8:27:4b:5f:66:3d:0d:
                    e3:9a:a9:87:87:5e:a0:7b:48:bb:d0:e9:fc:e7:83:
                    e2:ec:24:89:80:ff:9a:0c:4d:47:a1:4b:b2:95:2d:
                    75:25:a2:64:a9:9e:b9:f8:9f:5b:06:3e:29:ad:f2:
                    a6:c6:02:5e:0d:d3:d8:20:3d:89:d7:05:d3:12:2f:
                    d6:2e:d8:2e:67:fe:60:d5:9a:e7:04:46:4c:07:63:
                    a7:82:cb:f5:8c:ee:02:5b:0a:8d:52:8c:fc:0e:d8:
                    eb:3d:5f:cb:b3:9e:74:40:ff:6b:a0:91:a1:e7:ac:
                    7d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3B:67:06:57:08:7A:0A:78:27:CD:28:D7:40:71:30:61:A5:E9:FF
            X509v3 Authority Key Identifier:
                keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:db:df:3d:b3:db:a6:b8:c2:31:a8:c3:54:10:65:86:c8:6f:
         b9:dd:83:26:ea:07:d5:aa:2d:89:65:e1:e6:94:6e:63:3b:b5:
         48:c8:5a:8a:d3:c8:78:ea:48:e0:e1:ad:ab:5f:a1:a8:93:4b:
         73:63:41:f8:b3:64:17:7c:3f:ae:f4:f7:af:43:c6:4c:d2:56:
         0e:63:54:35:c7:c1:a1:eb:f7:d6:05:34:1a:77:a4:23:b2:2d:
         c4:5f:10:cf:b6:70:d1:d9:95:c3:d0:ec:d1:9b:c1:5b:52:f8:
         9b:16:7c:de:62:88:53:27:d0:ea:f1:77:e8:e0:f1:bf:90:38:
         e0:2a:3a:7f:fc:3d:1e:e2:b8:a5:26:8a:fa:14:9d:60:ac:57:
         0c:bc:5e:21:00:69:57:a5:19:17:59:53:67:e3:15:98:5e:62:
         73:ae:d4:e8:95:1e:01:e9:a3:9a:d4:68:4b:07:0d:e7:d4:c4:
         1d:ee:ff:a5:e7:5f:18:07:5d:97:30:f9:d1:84:98:c1:eb:d3:
         d7:a7:53:64:69:2a:af:de:67:ee:ef:85:47:bd:6f:2c:06:59:
         71:0b:74:53:30:5d:48:2f:86:b9:37:83:00:43:d3:5f:17:ee:
         3b:92:f4:39:d7:60:ac:0f:1d:bf:57:11:9b:bf:d6:d8:bf:56:
         66:d2:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 06:43:16 2026 by rpki-client