Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
File:                     1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json)
Hash identifier:          lI2SnBSQRuQv2pJZnQOeHqAaPUcZy8ZjIR7A9hsZI9M=
Subject key identifier:   D3:CA:99:8C:2E:30:3B:7F:99:57:60:2B:BD:E5:93:B0:F1:35:E0:37
Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
Certificate issuer:       /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Certificate serial:       05B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
Manifest number:          05AC
Signing time:             Sat 28 Feb 2026 23:43:55 +0000
Manifest this update:     Sat 28 Feb 2026 23:43:55 +0000
Manifest next update:     Sat 07 Mar 2026 23:43:55 +0000
Files and hashes:         1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: 3ooF8WSRlPJMRbeZc5vH5nVJ05OwO0MgUhsJdg/Cbes=)
                          2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: ym0ByuNOndht95n45vmzI/LTnp1dbpbPf/6SayzC+38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
                          rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
        Validity
            Not Before: Feb 28 23:43:55 2026 GMT
            Not After : Mar  7 23:43:55 2026 GMT
        Subject: CN=69a37dbb-56c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:9b:87:2e:5c:35:6b:2f:ce:39:bf:fd:0d:
                    c8:88:51:95:66:3a:ae:ad:4c:e9:f2:6a:dc:7a:2b:
                    c4:10:e6:3c:b3:08:77:ef:0f:40:6f:55:d7:22:f1:
                    98:e5:41:56:96:1a:ea:0c:c0:2f:43:92:bd:ec:d4:
                    e6:0c:3b:59:af:5d:99:35:cf:69:e1:12:1d:3a:f9:
                    e5:a3:6a:c2:a3:8d:28:a8:02:95:80:64:50:95:1a:
                    92:45:78:23:c2:d7:5f:50:7b:23:4d:7a:38:57:55:
                    df:34:70:72:4f:56:b9:4c:bb:f2:34:c5:fe:8e:54:
                    aa:3a:bc:05:89:a0:32:06:1a:0b:e1:0c:1b:f4:75:
                    e5:db:af:65:3f:93:24:28:e8:68:9f:f0:23:4b:c4:
                    05:5b:1a:97:a7:e4:f3:39:5d:db:ee:4f:c3:76:59:
                    dc:54:59:45:e0:6d:1b:39:10:a5:c1:81:92:4e:80:
                    7a:51:e5:cf:97:df:8b:f9:62:5e:9c:46:bf:c8:c1:
                    2f:fc:83:2d:9d:f6:5d:a2:c5:12:53:a9:e7:57:45:
                    e8:ec:2a:7e:92:48:21:ee:16:70:ce:70:97:cb:00:
                    18:62:b8:7e:b4:4e:f4:27:77:92:58:cc:00:7c:65:
                    ed:c7:a4:02:df:b3:3b:60:9a:2f:f3:21:6d:4b:d4:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CA:99:8C:2E:30:3B:7F:99:57:60:2B:BD:E5:93:B0:F1:35:E0:37
            X509v3 Authority Key Identifier:
                keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9f:86:9c:6c:6a:d4:ee:40:5f:29:ce:c2:dc:46:3a:66:c5:
         ae:65:06:8f:02:83:eb:ff:8b:6b:95:71:3e:27:38:5d:4e:0b:
         e6:f1:49:c8:0e:ba:09:0c:27:c4:d8:8a:a5:eb:2d:79:92:b7:
         2f:03:fa:fa:65:92:e2:86:f1:f7:bd:ca:b7:65:73:17:33:de:
         95:8e:37:65:18:bc:6c:19:8b:b4:18:54:50:31:e3:d5:bb:9a:
         cd:e6:a2:c2:57:f2:b6:ec:83:8e:41:23:8d:2c:59:39:64:ee:
         18:0b:ac:ea:d5:61:b7:77:fb:86:aa:70:88:80:e7:81:06:51:
         c9:55:cf:df:8b:25:3f:02:0f:99:e4:5b:ff:19:c8:04:4c:18:
         5c:72:2b:bb:7b:60:bd:e3:b2:9b:d7:42:ad:ca:98:23:7c:b0:
         a9:2e:41:b3:3c:0d:e4:17:40:89:5a:d2:9d:02:0c:2d:2d:83:
         4e:f5:56:55:95:e3:06:d1:07:c5:a8:13:fc:6d:39:28:1c:89:
         db:1a:45:1d:85:7b:8f:96:0f:34:83:03:40:9c:91:86:6a:f6:
         a3:0e:09:cf:8e:fc:29:e8:05:45:d7:5d:9c:96:db:c9:33:1d:
         9a:18:d2:1c:fa:e8:08:1b:56:ff:9b:4f:c6:9c:e4:d9:4a:0d:
         84:a0:7f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:45 2026 by rpki-client