Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
File:                     pBhnIpZRYlTNTMrUSSUeGdG26V0.mft (raw, json)
Hash identifier:          JVw2tIHJdNyOXdD7Xsz7IOI2D74a9kpULGQ4UwjrLAs=
Subject key identifier:   29:23:92:9A:55:B1:D0:9C:EA:F7:71:14:7A:02:DC:38:A8:D5:58:F9
Authority key identifier: A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D
Certificate issuer:       /CN=A913FE3D/serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
Certificate serial:       05FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
Manifest number:          05F3
Signing time:             Mon 02 Mar 2026 02:12:16 +0000
Manifest this update:     Mon 02 Mar 2026 02:12:14 +0000
Manifest next update:     Mon 09 Mar 2026 02:12:14 +0000
Files and hashes:         1: pBhnIpZRYlTNTMrUSSUeGdG26V0.crl (hash: vf0jaTvRlO4zaPTmmL+pumxVnDygGZU8ICXuuN1Slso=)
                          2: 679A6FA4E53A11EB8197AD70C4F9AE02.roa (hash: XbMe+8/7/MISes36gY29YrhvwO4Rdf5bho+pNI/z93c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl
                          rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1530 (0x5fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE3D, serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
        Validity
            Not Before: Mar  2 02:12:14 2026 GMT
            Not After : Mar  9 02:12:14 2026 GMT
        Subject: CN=69a4f1ff-44be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:f1:8f:cc:f3:70:cc:84:a4:7d:93:2d:bd:
                    9a:d6:f1:f0:36:16:bf:df:5a:0e:50:50:53:9f:7d:
                    0b:9c:a1:68:3b:4c:fc:dc:ea:a9:71:ff:d0:55:ff:
                    7a:a0:77:83:a2:16:eb:31:a1:42:1d:a0:65:3b:35:
                    ab:7d:c1:33:31:0b:ec:83:99:12:40:08:e3:63:71:
                    1e:71:97:26:cb:2d:17:64:84:c7:74:97:32:d1:19:
                    10:c7:32:1a:3c:9c:c4:27:f7:c8:47:53:c7:4e:14:
                    54:45:ac:52:73:76:2d:ee:0b:e9:02:09:82:49:e7:
                    49:38:a5:8a:f0:35:0d:3d:82:21:5a:09:c0:10:99:
                    ab:84:ca:5d:58:ba:6f:f4:c7:a1:0f:10:59:f7:64:
                    15:91:aa:57:6b:cb:ea:37:7c:b4:54:97:b6:f1:b9:
                    c8:99:40:9e:df:d5:dd:1d:55:88:98:3c:49:05:4c:
                    55:22:a5:26:97:81:10:db:22:8c:6a:7d:2c:a9:e7:
                    21:7b:f3:9d:d4:54:8b:1c:e0:df:70:88:a5:19:b8:
                    60:71:28:ae:6b:59:f3:3d:91:dd:8e:ca:e3:cc:f9:
                    11:02:5a:4a:90:4b:d5:85:5d:ec:8d:56:47:f8:74:
                    97:ca:c2:7a:a7:ff:f6:62:39:be:3d:80:a7:bb:e9:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:23:92:9A:55:B1:D0:9C:EA:F7:71:14:7A:02:DC:38:A8:D5:58:F9
            X509v3 Authority Key Identifier:
                keyid:A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:43:ab:d9:3b:85:b9:07:0e:82:fd:4b:19:06:75:4a:61:bb:
         af:93:7a:b2:51:8d:f8:3d:02:09:06:df:47:42:9f:47:f2:20:
         58:14:f7:c3:91:28:3d:66:be:20:b1:93:9f:6a:fe:9a:33:f3:
         33:f4:fc:c0:64:73:cd:e2:0f:cf:70:73:ce:43:9f:d4:34:40:
         18:bd:af:8e:30:83:fc:e6:87:ec:23:88:ae:d4:b4:2a:38:bf:
         c6:46:53:e7:6c:77:3b:00:e8:06:0a:a1:06:80:1c:97:41:9f:
         ea:f6:20:3e:ca:f6:88:52:26:ec:a4:ce:82:05:e5:87:cd:24:
         d2:9a:fa:ed:c7:2a:2f:4c:03:81:2a:aa:0b:ef:39:41:0d:39:
         f4:1a:31:c3:1f:31:12:e7:d4:ed:8e:58:63:e3:c5:94:c8:31:
         75:7c:11:13:9e:d4:8a:d9:10:51:bc:92:54:3b:20:0e:89:73:
         27:ae:79:53:a9:9f:b6:2d:28:05:c5:b4:75:0f:d0:e4:dc:f5:
         d4:83:a6:cc:c7:e9:7b:0c:15:cf:eb:90:92:e8:f0:a3:d1:53:
         a6:b6:91:59:e1:72:8c:2d:2c:aa:c5:b8:e6:ef:78:19:f2:71:
         82:d6:30:1f:da:fc:0f:84:26:1a:41:10:b0:16:d9:d4:b9:da:
         1b:1e:8a:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZFM0QxMTAvBgNVBAUTKEE0MTg2NzIyOTY1MTYyNTRDRDRDQ0FENDQ5MjUxRTE5
RDFCNkU5NUQwHhcNMjYwMzAyMDIxMjE0WhcNMjYwMzA5MDIxMjE0WjAYMRYwFAYD
VQQDEw02OWE0ZjFmZi00NGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArP/xj8zzcMyEpH2TLb2a1vHwNha/31oOUFBTn30LnKFoO0z83Oqpcf/QVf96
oHeDohbrMaFCHaBlOzWrfcEzMQvsg5kSQAjjY3EecZcmyy0XZITHdJcy0RkQxzIa
PJzEJ/fIR1PHThRURaxSc3Yt7gvpAgmCSedJOKWK8DUNPYIhWgnAEJmrhMpdWLpv
9MehDxBZ92QVkapXa8vqN3y0VJe28bnImUCe39XdHVWImDxJBUxVIqUml4EQ2yKM
an0sqeche/Od1FSLHODfcIilGbhgcSiua1nzPZHdjsrjzPkRAlpKkEvVhV3sjVZH
+HSXysJ6p//2Yjm+PYCnu+ky3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkjkppV
sdCc6vdxFHoC3Dio1Vj5MB8GA1UdIwQYMBaAFKQYZyKWUWJUzUzK1EklHhnRtuld
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkUzRC84MUU2NTRCQ0U1
MzYxMUVCQjk4MDMyNkFDNEY5QUUwMi9wQmhuSXBaUllsVE5UTXJVU1NVZUdkRzI2
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BCaG5JcFpSWWxUTlRNclVTU1VlR2RHMjZWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkUzRC84MUU2NTRCQ0U1MzYxMUVCQjk4MDMyNkFDNEY5QUUwMi9wQmhuSXBaUlls
VE5UTXJVU1NVZUdkRzI2VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYkOr2TuFuQcOgv1LGQZ1SmG7r5N6slGN+D0CCQbfR0KfR/IgWBT3w5EoPWa+
ILGTn2r+mjPzM/T8wGRzzeIPz3BzzkOf1DRAGL2vjjCD/OaH7COIrtS0Kji/xkZT
52x3OwDoBgqhBoAcl0Gf6vYgPsr2iFIm7KTOggXlh80k0pr67ccqL0wDgSqqC+85
QQ059Boxwx8xEufU7Y5YY+PFlMgxdXwRE57UitkQUbySVDsgDolzJ655U6mfti0o
BcW0dQ/Q5Nz11IOmzMfpewwVz+uQkujwo9FTpraRWeFyjC0sqsW45u94GfJxgtYw
H9r8D4QmGkEQsBbZ1LnaGx6K9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:35 2026 by rpki-client