Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
File:                     1Siei3312SAW7HmO7v8FvHPoVYA.mft (raw, json)
Hash identifier:          IkcPWuK75yrUMbZw2E1pEmFx5uwVnCd2ipKYZJH5nUU=
Subject key identifier:   39:A1:91:EE:5F:E6:EE:AF:93:BB:88:DC:5E:9C:F0:2B:12:51:CD:50
Authority key identifier: D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80
Certificate issuer:       /CN=A9137722/serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
Manifest number:          0143
Signing time:             Sun 01 Mar 2026 06:16:46 +0000
Manifest this update:     Sun 01 Mar 2026 06:16:45 +0000
Manifest next update:     Sun 08 Mar 2026 06:16:45 +0000
Files and hashes:         1: 1Siei3312SAW7HmO7v8FvHPoVYA.crl (hash: XQrsCLBIJT2SpqHq9ukpfBJ5lBzu91SR+BSsMpV1Vl0=)
                          2: B4684D8A288D11EF96BC5135C4F9AE02.roa (hash: b6ERigxsXjUyaKMbJy8+YRLovoMIY+E6IWTJv3Q8jfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137722, serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
        Validity
            Not Before: Mar  1 06:16:45 2026 GMT
            Not After : Mar  8 06:16:45 2026 GMT
        Subject: CN=69a3d9ce-a3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9b:42:4b:e8:bd:1c:59:2d:be:82:36:48:82:
                    c5:73:2b:9e:38:07:2a:89:6e:37:5a:f4:e8:8f:74:
                    35:b7:54:88:db:46:52:e1:7a:ea:dc:0c:a5:be:41:
                    a3:25:ed:b5:5a:44:b6:ab:12:0e:3c:6b:12:f7:9d:
                    59:fb:f2:48:0e:e6:97:1a:2b:b8:6c:f1:9a:a4:05:
                    0c:bd:f6:16:ec:ea:c0:42:73:f0:06:ab:4e:06:f8:
                    b4:2b:08:8d:c3:c7:7e:c5:f3:3e:aa:94:f6:75:9e:
                    fa:0c:9e:1e:ea:4a:3c:47:2d:ce:82:49:74:8e:85:
                    3d:7e:18:4f:7f:04:1a:c0:5b:23:f1:6e:f3:e5:2c:
                    28:8a:47:37:22:47:90:87:03:58:f3:ff:45:d1:02:
                    bb:b8:5a:28:04:6b:6a:80:5d:54:e0:28:31:d1:f9:
                    7d:e5:0d:64:31:6f:07:f4:5d:3d:19:58:06:fb:7b:
                    86:51:df:ba:27:70:36:1f:7f:b5:f0:73:30:51:4d:
                    d2:55:b9:81:ae:be:41:58:36:d2:8e:d0:41:80:28:
                    b8:2e:e0:89:31:bf:76:22:29:95:57:13:13:05:92:
                    f4:20:67:ec:af:17:f7:2f:5a:cc:2f:d8:a9:e7:7e:
                    d8:f6:b6:3d:d3:cd:66:e9:f7:5a:88:92:99:e0:cf:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A1:91:EE:5F:E6:EE:AF:93:BB:88:DC:5E:9C:F0:2B:12:51:CD:50
            X509v3 Authority Key Identifier:
                keyid:D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0b:73:a2:c3:f1:d8:a4:cc:88:44:5d:74:06:f1:f2:fe:fc:
         74:55:a2:80:82:ef:7b:3a:3c:0a:d1:ba:df:23:30:59:f2:2c:
         56:1a:d6:5e:e3:ed:dc:71:0e:7f:72:2f:6a:8a:b0:29:29:f4:
         4c:35:72:23:2f:e7:03:94:8f:bf:73:7b:bf:b3:55:de:f7:b5:
         8d:56:f0:7c:60:f0:f1:12:e2:35:5e:bb:30:0a:ee:55:e7:a3:
         5c:c1:30:46:e8:ae:ba:4f:26:9b:d7:36:4f:21:c2:ca:6c:02:
         25:7c:13:dd:dc:e7:9e:7f:cb:40:ff:d1:34:e2:ff:75:52:c1:
         e1:31:2a:f6:e9:f7:9d:29:3d:a0:97:7d:12:3f:d3:87:f7:56:
         aa:7d:6d:69:9a:e3:e3:a1:c5:e8:86:ee:67:a1:3c:cc:67:9e:
         78:74:27:98:1c:99:cc:4f:da:5b:10:ba:26:9b:39:16:b7:44:
         a1:87:6f:80:9c:50:21:67:59:8f:bb:bc:64:4e:8b:54:a3:68:
         fb:ff:9c:55:7b:b1:60:13:6e:16:ce:c0:16:9a:a0:f2:37:2c:
         9b:42:58:eb:f1:d7:06:03:b8:73:bc:8b:a6:3a:e7:00:d2:3b:
         4b:29:e6:3a:c5:ea:8f:9b:8a:46:51:69:18:cd:72:5e:76:6d:
         4d:43:36:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc3MjIxMTAvBgNVBAUTKEQ1Mjg5RThCN0RGNUQ5MjAxNkVDNzk4RUVFRkYwNUJD
NzNFODU1ODAwHhcNMjYwMzAxMDYxNjQ1WhcNMjYwMzA4MDYxNjQ1WjAYMRYwFAYD
VQQDEw02OWEzZDljZS1hM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj5tCS+i9HFktvoI2SILFcyueOAcqiW43WvToj3Q1t1SI20ZS4Xrq3AylvkGj
Je21WkS2qxIOPGsS951Z+/JIDuaXGiu4bPGapAUMvfYW7OrAQnPwBqtOBvi0KwiN
w8d+xfM+qpT2dZ76DJ4e6ko8Ry3Ogkl0joU9fhhPfwQawFsj8W7z5Swoikc3IkeQ
hwNY8/9F0QK7uFooBGtqgF1U4Cgx0fl95Q1kMW8H9F09GVgG+3uGUd+6J3A2H3+1
8HMwUU3SVbmBrr5BWDbSjtBBgCi4LuCJMb92IimVVxMTBZL0IGfsrxf3L1rML9ip
537Y9rY9081m6fdaiJKZ4M8BaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmhke5f
5u6vk7uI3F6c8CsSUc1QMB8GA1UdIwQYMBaAFNUonot99dkgFux5ju7/Bbxz6FWA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzcyMi80NkJEREMwMDI4
OEQxMUVGQjE5MDQ3MjFDNEY5QUUwMi8xU2llaTMzMTJTQVc3SG1PN3Y4RnZIUG9W
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFTaWVpMzMxMlNBVzdIbU83djhGdkhQb1ZZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzcyMi80NkJEREMwMDI4OEQxMUVGQjE5MDQ3MjFDNEY5QUUwMi8xU2llaTMzMTJT
QVc3SG1PN3Y4RnZIUG9WWUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgAtzosPx2KTMiERddAbx8v78dFWigILvezo8CtG63yMwWfIsVhrWXuPt3HEO
f3IvaoqwKSn0TDVyIy/nA5SPv3N7v7NV3ve1jVbwfGDw8RLiNV67MAruVeejXMEw
Ruiuuk8mm9c2TyHCymwCJXwT3dznnn/LQP/RNOL/dVLB4TEq9un3nSk9oJd9Ej/T
h/dWqn1taZrj46HF6IbuZ6E8zGeeeHQnmByZzE/aWxC6Jps5FrdEoYdvgJxQIWdZ
j7u8ZE6LVKNo+/+cVXuxYBNuFs7AFpqg8jcsm0JY6/HXBgO4c7yLpjrnANI7Synm
OsXqj5uKRlFpGM1yXnZtTUM2pQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:12 2026 by rpki-client