Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
File:                     SihlGpSsY59qsTJHTTHrDfzm3Hk.mft (raw, json)
Hash identifier:          RgELoM5IqHAd/ylEnX5xI4orQfqlBBJF6mPMH4F82uE=
Subject key identifier:   7F:AF:C9:20:05:6E:06:85:7D:31:45:CB:93:1A:9D:ED:30:BC:EE:DD
Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
Certificate issuer:       /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Certificate serial:       0562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
Manifest number:          054F
Signing time:             Sun 01 Mar 2026 00:01:20 +0000
Manifest this update:     Sun 01 Mar 2026 00:01:20 +0000
Manifest next update:     Sun 08 Mar 2026 00:01:20 +0000
Files and hashes:         1: SihlGpSsY59qsTJHTTHrDfzm3Hk.crl (hash: HWtp0+XFNpfG+wLtmNZhuPhGD9Sy4HFxfcelfYtahxw=)
                          2: C420EBE06EC911EC8A5A940AC4F9AE02.roa (hash: CmqKWcu5rzChWjhtTQvy211Wonly3ow/OGWPthnbqKE=)
                          3: A64296622BAA11EC9618D864C4F9AE02.roa (hash: v+FzGmDbG4ktmg8bwxKoDgp8/3yzS6ygyCQtH5/4gJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl
                          rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122373, serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
        Validity
            Not Before: Mar  1 00:01:20 2026 GMT
            Not After : Mar  8 00:01:20 2026 GMT
        Subject: CN=69a381d0-36ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:78:12:39:0d:69:ff:8d:f3:85:4c:d5:b0:
                    7c:2d:61:56:10:d5:bb:9e:45:79:4b:7e:c1:8c:86:
                    38:08:ee:3f:1e:ad:cc:e5:e9:51:e2:b0:10:19:9e:
                    11:ae:65:99:15:2a:85:c3:2f:30:33:a0:9c:82:4a:
                    44:ed:8e:39:19:15:c7:b6:f9:5a:81:1b:6a:bd:53:
                    9c:95:cf:da:d9:c1:8a:2c:e4:5a:07:0e:77:ff:e4:
                    23:3c:9d:b6:77:ce:94:b1:a8:00:62:0c:71:43:4f:
                    4f:ec:d3:b9:6e:4d:11:95:59:f3:91:a5:eb:d5:e1:
                    09:d5:8d:a0:95:77:c3:64:ce:22:ae:b1:86:f9:7a:
                    41:77:02:6d:bc:71:84:35:73:1c:04:c1:ca:4b:e0:
                    31:86:0c:94:58:84:cb:c0:5c:eb:cd:c0:66:56:74:
                    d4:7a:18:0c:58:70:95:f9:ec:01:fb:9d:a9:40:61:
                    15:b9:5e:0f:a8:ae:57:6a:df:f2:dc:2a:01:8b:80:
                    ee:39:9d:e5:e5:41:ac:39:70:92:11:d8:a3:fe:b1:
                    f0:b5:b3:09:c1:fb:2a:42:7f:5c:a5:19:04:75:a0:
                    9b:7d:53:f5:00:bb:e7:38:05:fc:4d:3d:b0:b0:c5:
                    b8:e8:b2:a9:81:b1:98:94:71:3b:43:7c:d5:90:5e:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AF:C9:20:05:6E:06:85:7D:31:45:CB:93:1A:9D:ED:30:BC:EE:DD
            X509v3 Authority Key Identifier:
                keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:14:ca:ec:c4:1c:3e:39:11:c5:42:35:8f:e2:07:7c:4c:f5:
         10:10:00:f8:47:3d:c2:21:b8:82:8e:71:75:83:aa:4e:24:da:
         0f:06:c1:a4:e4:97:3b:df:18:f1:b6:e6:48:fa:45:35:b4:59:
         af:db:c3:6b:60:f8:5b:80:bc:32:c1:f9:cf:91:c6:32:76:8d:
         e7:b8:a9:01:41:16:18:e7:7f:4f:d4:d1:b3:45:72:5b:03:37:
         af:52:08:6b:ec:97:3b:25:93:63:0d:1b:97:81:ce:8a:a0:5c:
         90:d2:a7:0a:6f:a8:b1:ef:65:58:d8:00:be:56:6e:0a:94:3f:
         dd:ac:e5:f6:ea:6e:13:5b:b2:e8:99:a6:e2:3c:9e:34:db:5c:
         a6:08:80:93:85:2e:62:46:b9:be:54:fd:d0:a6:3e:27:e6:1f:
         99:d8:62:73:60:af:25:64:b8:d3:f9:dc:2d:fc:27:7a:63:b9:
         b5:de:8b:3b:d0:9c:b1:93:fb:a8:c4:24:4d:80:f5:f8:11:25:
         79:18:52:2b:0e:c8:da:8e:e2:37:ca:35:8b:9c:df:d5:1f:79:
         66:da:9b:be:0c:d2:88:89:0d:12:29:af:e0:25:1c:10:65:59:
         6e:84:01:13:29:7a:83:2f:b6:d7:0b:91:8e:36:fe:e8:8b:26:
         fb:92:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:19 2026 by rpki-client