Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
File:                     rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json)
Hash identifier:          059QfvCP8/w5rmeqQLX/u3YkW7PtJqJOqijQjrhkurE=
Subject key identifier:   9B:29:2D:A8:27:8C:B5:30:84:35:04:7B:22:60:5B:C1:87:31:83:5B
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Certificate issuer:       /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial:       0700
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
Manifest number:          06F5
Signing time:             Thu 16 Apr 2026 22:00:30 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:30 +0000
Manifest next update:     Thu 23 Apr 2026 22:00:30 +0000
Files and hashes:         1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: t7qDyQvnCnk72h9V9ytGadcCUikoOkYkNRX1t6/M1Tk=)
                          2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: 1TSa0PPd+7pwYyolW0O6jfoDGRjZIL5Y7Dutt5Dic1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
                          rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A5E7, serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
        Validity
            Not Before: Apr 16 22:00:30 2026 GMT
            Not After : Apr 23 22:00:30 2026 GMT
        Subject: CN=69e15bfe-225e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:73:e8:87:75:fc:51:84:63:ea:27:b1:37:
                    55:9b:37:2d:7c:48:c4:a0:86:a7:01:9a:b1:f5:b6:
                    62:61:ab:62:68:48:8c:7e:d4:0e:0a:53:0b:45:43:
                    2c:8d:b0:ca:b9:6d:b0:a7:52:e8:44:83:c5:37:0e:
                    54:fd:c2:5e:de:78:89:79:a5:81:c2:82:7b:08:85:
                    95:97:7b:3f:49:ef:fe:b0:ee:90:60:37:45:ef:fc:
                    67:a8:56:c2:b9:65:8f:8f:5d:3c:98:93:60:08:4d:
                    f1:17:57:bd:bc:5e:8f:51:87:ca:5f:2e:6c:5c:b8:
                    de:b9:89:51:8e:d1:a4:9d:9d:b9:b6:a9:a0:55:98:
                    b1:a5:d8:bb:36:20:08:4c:1c:cc:6f:59:ea:08:14:
                    62:59:9b:eb:eb:b4:2b:a9:2b:18:b2:f0:e0:e7:25:
                    a7:ca:09:90:3f:35:00:29:52:da:ff:13:54:bc:38:
                    38:f5:88:50:55:36:b5:f3:da:51:12:04:57:6b:03:
                    fa:32:4e:ca:15:64:ae:84:c5:0a:ed:80:09:1c:42:
                    fb:72:fe:30:84:49:bb:6a:b7:8e:45:ec:ba:a1:fc:
                    a8:a5:7e:57:72:3c:ce:c3:32:50:d8:59:f5:b4:ad:
                    8b:93:5e:c0:64:41:d6:58:c2:cc:db:82:5d:14:90:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:29:2D:A8:27:8C:B5:30:84:35:04:7B:22:60:5B:C1:87:31:83:5B
            X509v3 Authority Key Identifier:
                keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7b:ce:1e:58:02:c0:a8:b1:30:76:14:f3:99:40:0a:fb:83:
         ea:89:23:25:d4:6a:ef:11:f2:09:d1:0b:f7:9d:fe:ff:24:6a:
         4d:ac:e0:70:66:ab:ca:c6:d8:07:c1:5e:8c:21:d7:9a:aa:54:
         8c:6b:d8:69:70:41:c5:90:25:85:f2:b3:60:3a:34:04:62:e0:
         38:71:a6:8c:16:de:45:85:c7:e0:20:e6:50:a1:4c:b2:c5:84:
         36:05:73:29:16:84:fd:9b:77:e5:e9:4b:6c:19:fb:05:84:1f:
         bb:93:9f:a6:3f:8e:2f:92:f6:53:41:0e:6a:c8:78:ab:3a:d1:
         6f:28:c3:66:42:c8:4a:6d:5e:9e:b5:0c:42:02:ae:32:23:24:
         6d:1b:2b:9b:4a:55:f3:35:46:8e:3b:38:31:e8:93:91:c8:ee:
         65:b0:90:60:2a:5c:1a:74:d2:de:5e:fe:ed:f2:9e:c7:95:ed:
         c8:d6:e3:f7:ed:f4:a2:25:7a:9d:f8:ec:15:ff:37:cb:28:94:
         37:0b:50:d2:1e:a3:0e:a8:87:82:26:91:77:f2:5f:6b:ef:6c:
         40:42:3f:d9:26:51:40:db:30:2c:09:99:13:3a:d6:8b:0e:4c:
         f5:4d:1c:6c:c7:90:1d:a2:20:0d:93:04:9b:ce:42:6a:8a:bf:
         ef:c2:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:59 2026 by rpki-client