Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
File:                     X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json)
Hash identifier:          3kxWdAqoWo3YVPxq4p5cGvTKkPeqqW3k0NE71sj08EM=
Subject key identifier:   A4:4A:0D:19:DD:56:65:E9:06:03:BD:0B:91:13:53:37:C6:C8:12:A6
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Certificate issuer:       /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
Manifest number:          46
Signing time:             Sun 29 Mar 2026 08:02:00 +0000
Manifest this update:     Sun 29 Mar 2026 08:02:00 +0000
Manifest next update:     Sun 05 Apr 2026 08:02:00 +0000
Files and hashes:         1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: VAQMOP/QY4u8PA2LrhQlMRGenKA85EElqb0aY5m22V8=)
                          2: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=)
                          3: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (hash: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=)
                          4: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
                          rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 08:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
        Validity
            Not Before: Mar 29 08:02:00 2026 GMT
            Not After : Apr  5 08:02:00 2026 GMT
        Subject: CN=69c8dc78-14ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:ae:cd:42:42:ff:43:da:cb:03:66:6b:aa:
                    d0:88:69:f9:3c:e4:68:fc:4f:1a:71:8f:53:b8:c3:
                    3a:cf:7f:6a:b6:0d:34:cf:61:ca:26:d8:8d:e5:90:
                    6d:cc:ad:0a:1f:c3:4b:dd:f5:9c:16:bb:72:f8:29:
                    00:a9:ff:2a:45:aa:9e:0b:18:81:29:53:ce:79:cc:
                    e7:25:f9:78:13:a8:ea:d1:c9:3d:ae:9c:16:3d:c5:
                    7f:55:8e:a0:68:f6:e2:a7:55:41:81:4f:aa:1f:62:
                    c7:cb:af:bc:ba:93:ac:32:12:29:37:c0:d1:81:09:
                    ca:87:b6:3e:a9:e0:be:bf:3e:69:30:e0:20:21:46:
                    ab:23:d6:b4:a1:a9:52:ff:18:9f:63:db:a0:e8:ce:
                    5c:a0:e4:8d:bc:b5:9e:16:e4:e0:71:cc:17:39:55:
                    11:3c:3e:c4:75:f8:c0:eb:7d:58:75:66:16:57:a9:
                    00:7d:e6:25:8d:03:9e:88:e3:4d:95:ac:45:69:ae:
                    30:88:af:ab:15:b6:f1:98:de:d0:9e:eb:e0:5f:54:
                    db:51:bf:cb:de:83:89:7a:1e:1d:88:cf:e4:de:9f:
                    5a:7a:cb:02:2d:cb:5c:4c:e1:8f:3c:7b:c5:85:f8:
                    09:90:8c:9b:1c:fe:7c:2b:4f:1c:e4:e8:de:37:17:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4A:0D:19:DD:56:65:E9:06:03:BD:0B:91:13:53:37:C6:C8:12:A6
            X509v3 Authority Key Identifier:
                keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:09:f1:fd:f1:45:2e:bf:72:6c:a3:14:9c:aa:81:fc:85:81:
         60:8a:df:0c:fc:97:09:50:0d:95:c3:57:34:23:cf:98:98:d9:
         e1:66:20:58:ed:08:11:56:dd:3e:9f:7f:31:30:5e:37:33:da:
         9b:84:b0:54:6c:76:ea:36:bf:f7:83:a9:56:36:52:fc:4c:e3:
         ce:4a:1a:0e:1b:ec:99:5d:87:54:8e:2c:e1:68:43:c1:a6:aa:
         ed:2d:55:5c:6f:68:c8:97:1b:1c:94:bc:b9:b0:1e:89:ae:20:
         22:23:4e:07:b6:28:f7:66:8a:30:f0:8d:30:e6:b5:f5:d4:be:
         b5:8a:58:8e:63:d2:46:4b:8a:d7:f8:e8:85:5b:f2:fb:b5:2d:
         79:97:3c:5b:eb:52:d1:11:17:d7:98:e8:26:6b:32:16:72:90:
         35:a0:02:1e:d7:34:b9:02:06:83:45:0d:70:9f:2e:e6:38:f4:
         f5:57:05:4b:84:3c:45:86:7c:82:be:19:66:3b:04:96:45:3f:
         02:46:b8:08:60:bd:33:d5:64:b3:41:87:6c:5f:56:87:6b:63:
         36:c6:cb:ae:b1:6e:ee:bf:72:89:fd:bb:e2:ad:9f:e6:5a:3e:
         91:10:94:ce:47:99:41:59:39:7e:68:d6:84:c7:66:50:da:41:
         ac:55:90:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 01:27:35 2026 by rpki-client