Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
File:                     pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json)
Hash identifier:          +qQLDx33agY6hH1mIxwv8NSH/ctVDP53+++GW9Z3gk4=
Subject key identifier:   6D:60:57:92:DA:F3:3B:8C:02:E4:12:61:8A:C0:FE:4A:5B:25:31:19
Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
Certificate issuer:       /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Certificate serial:       05CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
Manifest number:          05C2
Signing time:             Mon 02 Mar 2026 02:49:18 +0000
Manifest this update:     Mon 02 Mar 2026 02:49:17 +0000
Manifest next update:     Mon 09 Mar 2026 02:49:17 +0000
Files and hashes:         1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: AKAxMvsJddwMGPLh5amUVlViBRI2JEvyycf5T57CnLE=)
                          2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: F6f3sqC/VrCexYL7KiqhHMWOLZTVDuTXvmAuEtkPuPk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
                          rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1482 (0x5ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
        Validity
            Not Before: Mar  2 02:49:17 2026 GMT
            Not After : Mar  9 02:49:17 2026 GMT
        Subject: CN=69a4faae-001a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:25:f9:46:0d:67:b6:13:ae:11:3a:f6:b6:
                    5a:31:6f:9a:e5:dc:a7:01:cb:f5:31:2d:cd:c0:b2:
                    20:81:f4:38:be:57:87:5d:96:a9:bb:36:9a:20:94:
                    6f:49:75:80:0e:5e:40:ca:1c:35:58:2d:5d:7f:74:
                    3b:be:ab:40:3c:f2:61:69:a9:11:cb:67:03:42:11:
                    c7:9a:bc:bf:32:b8:05:4d:e9:9b:81:73:d4:59:e5:
                    a9:91:77:33:96:e8:78:1c:6f:24:cc:c5:b6:61:cb:
                    cf:f0:b4:8e:13:68:59:37:ed:34:e6:dd:2a:a4:67:
                    d6:fe:fa:a3:fc:52:e1:80:89:e4:35:2d:0a:01:3a:
                    52:47:11:5b:d3:a5:81:3f:96:ec:a6:1e:b1:f7:78:
                    e3:6e:77:3c:73:6a:c2:14:70:f5:a2:6c:b0:b0:14:
                    c3:c3:24:7d:4d:c2:b2:c6:3b:dc:96:7a:53:fb:69:
                    35:e6:45:86:00:0a:ba:90:d7:50:af:86:2e:15:e8:
                    dd:49:d5:22:69:ee:d9:de:4e:ce:5b:61:4d:e8:cd:
                    29:99:6a:86:a8:9c:6b:75:d3:3a:de:9e:19:c0:4b:
                    1a:f0:95:33:e6:c8:d3:35:ed:d4:4e:52:69:e2:0d:
                    da:99:28:d5:dd:38:91:9d:dd:76:6b:a7:0d:63:3b:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:60:57:92:DA:F3:3B:8C:02:E4:12:61:8A:C0:FE:4A:5B:25:31:19
            X509v3 Authority Key Identifier:
                keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5f:19:14:20:de:98:06:16:3f:f3:d6:b1:65:c3:b1:13:0a:
         17:83:de:ca:b4:e9:3b:84:2c:f5:d1:59:bb:e0:2a:d1:bd:41:
         89:b2:2c:02:79:b1:0b:70:b4:a3:3b:41:84:f4:4b:12:7f:c4:
         52:4e:c6:ba:db:16:f9:ca:42:25:d4:d7:92:77:f6:15:11:8c:
         de:6b:94:5e:dc:b7:d1:ad:f1:5b:67:bb:a6:c1:a1:d4:01:fd:
         6c:a8:7b:2e:0d:3d:55:34:f1:a4:82:27:01:f4:48:6a:ac:d1:
         f1:0b:bc:96:d9:72:ac:56:aa:28:52:65:18:a6:49:27:52:3c:
         83:e6:13:71:e4:74:1d:02:5f:7c:42:a0:9d:91:02:1d:10:21:
         26:7c:40:de:05:05:5c:7d:eb:72:cf:bf:85:25:5b:73:38:17:
         3b:57:4e:5a:f6:1a:56:2f:6a:ac:d9:68:39:2d:90:f0:da:57:
         30:01:03:c3:a1:38:09:53:d6:b8:d2:4f:49:22:ec:d8:d0:fe:
         19:db:57:a5:b7:2b:9d:67:91:d9:7f:da:a8:2a:39:05:fe:ae:
         b1:f8:38:2e:c9:fd:46:53:eb:c6:e6:c6:46:b7:cd:0d:d9:ea:
         52:ea:bb:7b:6b:21:73:12:d8:34:32:c9:93:f1:07:a3:5a:21:
         44:2b:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:19 2026 by rpki-client