Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
File:                     sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft (raw, json)
Hash identifier:          SRcrfoQymSeaBFwXounlXzv2gHch/jM36/r24chG6rk=
Subject key identifier:   35:23:F0:B3:5E:44:92:01:4D:34:9B:E2:E3:8D:08:1D:69:00:9B:02
Authority key identifier: B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5
Certificate issuer:       /CN=A911FE83/serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
Manifest number:          14
Signing time:             Sun 01 Mar 2026 10:33:38 +0000
Manifest this update:     Sun 01 Mar 2026 10:33:37 +0000
Manifest next update:     Sun 08 Mar 2026 10:33:37 +0000
Files and hashes:         1: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl (hash: MICdpVbpO7bOltkZHYDrTT2h3gFkMkUsj1pr1geXFS4=)
                          2: 1CF20536001311F1AC4D12CC406F56BC.roa (hash: g4Ud8ofVkhlMNmXk1DVd80+pMPQpIN+9NWS+U7ei8zU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl
                          rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FE83, serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
        Validity
            Not Before: Mar  1 10:33:37 2026 GMT
            Not After : Mar  8 10:33:37 2026 GMT
        Subject: CN=69a41602-7755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:c8:4b:ee:19:9c:ad:19:a6:1a:21:2d:da:
                    dc:a9:80:a4:6e:42:8c:5f:d0:63:9a:d1:7c:e5:5b:
                    f1:9f:c3:a1:23:b7:71:d0:e3:42:7b:ec:74:01:c7:
                    33:cb:29:de:9a:57:57:93:92:81:18:45:2a:e5:08:
                    c3:a0:22:a3:1e:d3:77:15:74:6c:66:0a:89:0b:fb:
                    e3:b2:41:4e:98:fc:17:89:eb:8f:66:67:d6:5a:4d:
                    f5:73:4b:32:74:6c:57:2e:89:d9:20:b7:b9:7b:c4:
                    60:a4:1e:ce:eb:4d:d6:de:3f:19:3c:cf:06:d1:98:
                    24:c0:2b:49:e4:b6:71:5d:e6:ea:c0:9d:12:f3:21:
                    83:48:33:28:00:04:e0:13:8b:be:52:b9:cc:5a:0f:
                    e1:00:8d:3b:6a:95:00:24:5b:42:94:db:4b:bf:a5:
                    33:a7:fa:bf:c7:8d:1a:70:de:44:b5:29:b9:21:66:
                    17:e9:db:57:c8:65:09:a9:ea:9f:b2:35:8e:86:3e:
                    b1:8c:5c:3a:9d:12:85:ed:32:5f:d2:11:41:c7:d0:
                    3f:86:c5:ba:97:cf:54:cb:18:da:2d:68:57:7c:ee:
                    c6:42:61:be:8e:7e:83:b2:22:9f:e3:0b:6a:b5:0d:
                    50:64:fe:7f:e1:35:8b:89:1f:08:23:82:7c:36:c7:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:F0:B3:5E:44:92:01:4D:34:9B:E2:E3:8D:08:1D:69:00:9B:02
            X509v3 Authority Key Identifier:
                keyid:B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:5f:59:e2:64:10:19:47:76:d3:4b:7c:90:82:92:a9:96:
         4a:9f:62:f2:c2:98:98:32:63:41:36:37:92:c2:f2:27:e0:56:
         81:d7:87:a4:81:bc:5f:e9:cb:3c:2f:cd:43:74:b5:67:ad:6d:
         96:36:b6:1b:d3:cf:c4:54:c0:a3:ea:35:31:d2:43:d2:8b:e2:
         0f:0c:c9:e9:57:4d:f0:7a:78:a3:10:59:78:31:14:99:bd:f7:
         7e:3f:d7:4e:db:28:03:a2:99:d5:18:d3:5f:a9:a7:06:e9:9f:
         71:a3:69:a5:06:5b:5c:e0:5f:17:73:d8:0f:98:3e:f4:33:18:
         7a:b1:6e:39:a2:f0:82:01:f4:fe:59:c2:fa:f3:0c:1d:ae:5f:
         8e:39:e1:95:60:a0:02:05:f5:94:a8:48:11:22:4c:97:6b:44:
         36:59:68:b3:e9:98:5a:de:ad:9d:a7:b5:00:2d:cb:2e:1f:53:
         ab:20:a2:d1:ad:11:d6:65:af:01:1b:4a:19:6f:08:54:c7:cd:
         2a:ed:51:5a:c4:ee:0d:9b:fd:36:c7:a3:95:64:da:c5:78:fa:
         a6:d5:37:3f:bd:c2:8d:a5:b4:e2:cd:a2:b9:cd:ce:1c:00:ca:
         3d:5b:99:c0:70:96:8d:1e:6a:35:c3:6a:bc:12:76:b0:fe:b1:
         70:26:91:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:05:40 2026 by rpki-client