Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
File:                     gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json)
Hash identifier:          Y2CjzSGMebCXOjRaEuEzC9wLOXqF/7KScZZit98r+bA=
Subject key identifier:   D4:CE:5B:EC:5B:CD:14:6D:75:9C:3B:52:79:E4:51:12:B9:BC:EF:D6
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Certificate issuer:       /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
Manifest number:          AB
Signing time:             Sun 01 Mar 2026 08:33:47 +0000
Manifest this update:     Sun 01 Mar 2026 08:33:46 +0000
Manifest next update:     Sun 08 Mar 2026 08:33:46 +0000
Files and hashes:         1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: sStnNZ1mBGC1t2IW85N2gcOSesL1r4oQnnGuBxGJW34=)
                          2: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: JIEsA7areAo/HXr9zawFvTRRX2S0zguLE0PWXUlfIVA=)
                          3: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: iS1RAh1nMPiaCmT07O7xAgf1BvaBTAfnVl6oRY7qhr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
                          rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
        Validity
            Not Before: Mar  1 08:33:46 2026 GMT
            Not After : Mar  8 08:33:46 2026 GMT
        Subject: CN=69a3f9eb-db82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d5:84:b2:13:a9:65:81:e7:cd:d5:38:d6:a3:
                    b5:e2:00:1e:cc:a6:6b:f4:87:33:cb:47:75:76:1a:
                    f3:f5:0f:6d:f4:b5:54:78:b9:fd:11:c3:a5:be:62:
                    e0:df:11:b5:8f:93:37:88:ef:af:a1:fa:43:f6:3b:
                    4e:f9:b1:85:42:3b:43:12:9c:29:b4:33:b2:d9:1c:
                    a3:96:ba:90:23:5b:5b:87:b0:4a:4e:ec:1d:4f:f7:
                    51:f6:c4:81:dd:d1:33:80:be:24:db:cc:84:df:db:
                    c0:ad:b7:43:de:49:d7:bc:df:d7:71:45:6f:60:29:
                    26:ea:07:a7:6d:5e:54:68:ea:04:e1:03:0a:fb:14:
                    3d:44:d3:03:f0:6b:e2:62:b7:57:65:2e:b1:89:75:
                    da:75:d5:22:c6:a5:09:70:4f:5d:1e:58:02:08:f5:
                    dc:fc:6b:0f:bd:4c:e0:a8:0a:e3:d5:73:81:95:14:
                    71:66:39:07:f6:c9:ee:8c:11:e4:8f:d6:26:aa:ee:
                    d5:bc:f5:90:e8:8a:3e:d1:40:cd:a2:46:db:14:7b:
                    8a:a1:bb:45:87:c7:49:40:59:2f:77:30:22:3a:b8:
                    7d:42:3c:14:a2:d0:bb:6b:8d:dd:ea:f7:8b:45:7b:
                    19:ba:3c:58:ca:df:6b:d2:db:63:b2:0d:b9:cd:de:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CE:5B:EC:5B:CD:14:6D:75:9C:3B:52:79:E4:51:12:B9:BC:EF:D6
            X509v3 Authority Key Identifier:
                keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:da:77:9e:d4:98:a2:34:76:79:52:2c:69:43:d1:db:49:ff:
         1e:f1:20:a4:7a:6a:53:88:4a:48:70:50:bd:7e:91:08:11:d7:
         db:21:e9:0b:c7:66:19:4d:cb:e0:3b:d6:67:47:c7:51:0f:d8:
         f0:9d:5d:24:61:53:b3:1b:3f:0f:4c:96:62:26:51:ba:7a:70:
         2c:20:6e:19:1e:c6:57:c8:5d:58:c4:d3:d9:d6:d9:a5:cd:3a:
         9b:48:6d:ea:91:39:1f:aa:35:66:67:9e:dd:3b:3e:78:b9:3a:
         b9:08:e4:3a:10:c9:b4:14:34:5c:e1:d6:3a:83:89:e4:4c:84:
         67:19:6c:d6:15:aa:7a:dc:7b:df:f0:c7:5b:a0:af:b7:b9:a4:
         e0:02:21:61:8a:6c:86:01:14:57:e6:d3:c6:c2:3b:bb:d8:5b:
         2c:f3:e7:2c:88:2c:23:75:1b:4a:1e:5e:8f:43:b7:5c:3c:3f:
         73:02:39:08:b5:67:06:16:f1:5a:50:07:2e:f3:ed:2a:27:4f:
         fc:14:b9:a6:92:c4:e4:41:1b:f7:6e:00:d8:5f:fa:66:90:ef:
         9d:97:30:f3:99:be:45:cd:01:f8:f5:7c:21:4f:aa:17:6b:f6:
         8b:01:e0:25:2f:bc:a9:15:b7:80:5d:01:df:22:ea:dc:d6:3d:
         4d:aa:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:09:05 2026 by rpki-client