Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File:                     5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier:          QlNfso3Ufh18fB19Wrtb3D6nmnUxqViUS+EiqmtFuXo=
Subject key identifier:   AB:3C:DF:38:51:77:17:90:D4:FD:FE:9B:57:20:37:BB:41:1D:F9:04
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer:       /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial:       0D10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number:          0CFC
Signing time:             Sun 01 Mar 2026 23:45:59 +0000
Manifest this update:     Sun 01 Mar 2026 23:45:58 +0000
Manifest next update:     Sun 08 Mar 2026 23:45:58 +0000
Files and hashes:         1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: WOBI1Lg6GH7nWgTQrGMDI9hFJIdjdIJGphBMq0ltaSg=)
                          2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: ywPnX5HWIz7gB+GZOiMioEbYiFIq0HckI3yhWxQCoN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
                          rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3344 (0xd10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
        Validity
            Not Before: Mar  1 23:45:58 2026 GMT
            Not After : Mar  8 23:45:58 2026 GMT
        Subject: CN=69a4cfb7-96c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:93:3c:8e:58:b3:90:88:a8:1f:a8:f1:75:
                    d2:35:e2:d2:73:1a:ff:31:20:4e:bd:16:8d:64:81:
                    af:3c:ed:93:72:cd:36:4e:9a:87:6a:9d:d5:ab:65:
                    a3:3b:35:c0:32:c6:12:da:0b:56:8f:43:d3:08:a8:
                    e8:f0:42:25:c8:19:f9:9b:64:e0:c9:22:cb:7f:3b:
                    53:70:0c:82:3f:13:9b:bd:a7:e4:72:c6:3b:53:34:
                    aa:e4:f6:7b:e8:79:8e:c3:bf:db:48:e4:9d:26:c8:
                    9e:a5:f7:b2:cf:97:8c:3a:15:73:63:10:d6:19:73:
                    9c:50:d6:e0:e6:8f:ef:73:e9:ba:ae:f5:01:a8:de:
                    d6:f4:8b:58:5c:69:f5:4c:2b:6e:37:0c:31:cf:a0:
                    da:20:ee:7b:15:19:f0:0f:6e:37:91:15:4f:02:44:
                    24:d0:cb:2e:4e:4a:24:9d:d5:67:38:35:3b:76:97:
                    99:51:8c:dc:08:05:d3:52:40:1c:57:6d:17:34:58:
                    fe:95:f7:bb:54:62:c6:f7:6a:b3:fc:ae:14:c3:60:
                    a6:44:01:cc:23:3a:c5:be:f9:ff:98:ba:c8:ed:e8:
                    c8:3a:7b:5e:1a:9b:ba:4e:8b:fb:22:25:95:ff:1e:
                    03:3b:1c:93:90:62:d5:6d:3a:b3:1c:73:45:04:f7:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3C:DF:38:51:77:17:90:D4:FD:FE:9B:57:20:37:BB:41:1D:F9:04
            X509v3 Authority Key Identifier:
                keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:08:c7:d7:bf:3a:f3:84:0a:86:4a:5d:99:0d:d5:5f:35:a1:
         84:06:a0:1d:ee:e1:6d:3f:f5:4d:54:15:a8:2a:73:9b:b2:39:
         97:98:c0:9a:d6:f0:3e:c5:b1:a3:e2:82:71:b2:1f:34:0b:a8:
         e6:ae:34:80:45:70:87:10:9a:20:96:01:c6:da:06:d9:39:08:
         b1:f0:49:f8:38:b6:25:6a:83:79:6e:9f:52:9b:ab:cf:d1:c9:
         56:b1:55:58:ba:61:20:57:f0:b3:9f:5a:db:15:dc:4f:28:ef:
         53:59:84:4c:e7:3d:16:a0:82:85:80:ca:23:24:0b:c0:2d:4d:
         21:18:4b:4a:0d:76:45:ff:a8:0a:a2:fa:91:40:2d:c3:c3:37:
         4b:5c:79:81:21:9a:71:99:de:16:90:3e:aa:c3:73:49:6d:00:
         60:aa:10:59:9b:ab:de:e1:59:f2:3a:1c:c2:89:59:cb:0c:25:
         09:fe:33:cc:76:05:ee:80:f0:ae:94:2c:c3:c7:d8:2c:59:81:
         74:f4:52:56:4f:6b:b5:04:c2:e8:50:47:c8:74:8b:02:3e:f3:
         2e:f8:a5:5b:a8:16:a9:03:f1:cc:32:eb:38:a2:54:9d:c1:93:
         d7:08:61:f1:92:94:74:15:7d:73:29:f0:fa:a2:43:2e:ca:d9:
         80:98:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:45:25 2026 by rpki-client