Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
File:                     DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft (raw, json)
Hash identifier:          S9eE+nPbE+4blRhL8IglStvlYmX66uGy2RQpiJ0KX/M=
Subject key identifier:   69:EE:A0:FE:B3:5C:78:B8:B8:AC:D5:69:AC:67:5E:94:3C:8B:5E:C5
Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
Certificate issuer:       /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
Manifest number:          C3
Signing time:             Sun 01 Mar 2026 08:06:58 +0000
Manifest this update:     Sun 01 Mar 2026 08:06:57 +0000
Manifest next update:     Sun 08 Mar 2026 08:06:57 +0000
Files and hashes:         1: DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl (hash: tHdxcbc53POTb0reL3UD2WYzSr678FFM68Cv7w32ZSE=)
                          2: A7B64E90EA7311EF83DF9312C4F9AE02.roa (hash: iN5ZyS8MFIpsPaY5Ugb/F++1o4RbnoAZ/BgHlSmsAPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
                          rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
        Validity
            Not Before: Mar  1 08:06:57 2026 GMT
            Not After : Mar  8 08:06:57 2026 GMT
        Subject: CN=69a3f3a1-86ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:47:33:89:69:5c:27:8b:18:e2:e8:69:02:d2:
                    b7:dd:8c:1b:1e:bf:88:d4:e2:4e:a7:4e:4f:b1:e3:
                    3e:85:05:af:6d:e0:2a:58:80:50:42:93:7f:6d:ad:
                    0b:0b:e6:eb:1d:0a:99:f2:52:64:b1:1b:90:a8:08:
                    d2:17:44:c5:69:3e:d6:7a:d6:c9:43:d9:72:19:47:
                    ba:19:1c:02:e3:e6:5c:7e:92:87:24:3a:4b:7b:6a:
                    5c:bd:90:bf:a0:a7:41:4b:b5:12:e4:b7:c3:52:f7:
                    67:18:20:ae:5f:a7:02:dc:c2:bc:6e:90:18:8a:df:
                    f3:d6:e8:3c:bf:df:d0:3c:f2:96:6b:54:e6:e9:3e:
                    c4:43:c1:dc:43:9b:55:7f:f2:60:a9:6f:ee:7f:eb:
                    4f:98:b3:41:c9:0e:36:55:a9:b0:f3:9f:31:f2:c2:
                    cd:74:47:bd:51:11:86:91:11:04:75:d3:38:94:9f:
                    46:22:10:b1:81:bf:20:20:09:3a:18:ff:dc:8c:f0:
                    4d:e7:aa:4e:00:ad:18:41:14:1f:2b:18:34:ee:f2:
                    1c:9c:ef:65:38:51:c1:68:4d:b1:ec:79:f8:27:23:
                    da:dd:81:ac:54:d8:54:85:ff:04:0b:2d:45:c6:2c:
                    db:64:bf:ea:fa:38:b4:ab:68:97:1d:56:75:77:f3:
                    94:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EE:A0:FE:B3:5C:78:B8:B8:AC:D5:69:AC:67:5E:94:3C:8B:5E:C5
            X509v3 Authority Key Identifier:
                keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:57:c2:06:f2:2d:2e:b6:62:36:e3:7b:5d:ef:6e:e7:e1:ed:
         9a:76:4d:ee:35:98:7f:6d:be:e2:07:74:44:f1:ce:cb:d3:dd:
         1a:7d:06:56:f4:f1:8d:3e:c9:ef:00:8e:03:fb:3e:2b:a2:59:
         1b:0d:e4:e9:11:30:27:6c:a5:d9:1e:eb:92:7a:d9:4c:43:32:
         eb:88:6c:1c:e4:f3:35:c6:f1:1e:ae:31:e6:3a:43:e7:79:39:
         cc:b8:4c:97:69:59:94:55:63:8e:0f:38:b8:20:1f:ed:0c:ad:
         98:84:19:0b:8b:16:03:d5:35:14:12:8a:63:50:69:55:22:4a:
         ca:29:5a:79:cd:3b:dd:d9:2d:a5:78:ce:26:43:ec:e8:3b:97:
         2b:9b:e3:ca:8b:d9:0c:bc:64:5f:30:3f:1c:0d:06:e7:2c:0e:
         23:8d:bf:1f:99:98:ab:b8:24:94:a3:bb:40:d6:db:72:fe:b1:
         0d:e7:ad:4a:83:d5:3d:54:bd:b0:e0:5e:98:4c:f7:0f:37:42:
         cc:1f:3f:5f:e7:1d:25:a2:b5:ee:f2:bb:f6:a6:2f:8b:97:c6:
         e6:f7:20:52:9c:4f:92:00:7b:c2:1f:72:db:c8:d6:54:8a:b7:
         33:6d:8a:75:27:2c:4e:df:40:b9:79:35:32:95:46:31:cd:eb:
         65:68:41:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:46 2026 by rpki-client