Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File:                     M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier:          SJ9eTgI0GKcgFbcVkmwh5ogzXg371rI5gL9y+o9DLOQ=
Subject key identifier:   52:4A:43:A9:1F:8D:02:49:AC:46:33:A5:13:D4:53:4B:4D:BE:98:3F
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number:          013C
Signing time:             Sun 01 Mar 2026 06:20:24 +0000
Manifest this update:     Sun 01 Mar 2026 06:20:23 +0000
Manifest next update:     Sun 08 Mar 2026 06:20:23 +0000
Files and hashes:         1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: 8DVG+Njr/EM1/5/CfHekcAZUI5Id+LqiqZplQR+gfdY=)
                          2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: 4w86q6EWxPppGmN3WAH7cTrMdPvhFQ2gE3GzQQWS4ck=)
                          3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: wTzR2Kl8HLux7RLKUCKwWDVl26livIquwtiZpHpO5LA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Mar  1 06:20:23 2026 GMT
            Not After : Mar  8 06:20:23 2026 GMT
        Subject: CN=69a3daa8-d537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:f1:45:10:92:52:d8:71:b0:d1:f0:39:f6:
                    ad:bd:66:2c:e6:67:ad:48:4f:6f:af:01:88:b3:68:
                    88:96:59:2a:c8:0a:9a:a5:d7:09:ff:1a:65:11:02:
                    84:69:f7:e6:40:e3:d2:c0:20:ce:62:30:18:be:97:
                    41:9d:a6:87:5f:d8:79:d7:5f:c5:df:e9:0b:15:62:
                    c9:7e:23:5b:1d:b1:2a:5b:c4:79:b9:24:f5:02:d2:
                    ee:4d:a5:7b:0b:cb:2d:cf:84:1f:fd:8e:b6:b7:cd:
                    7f:5c:37:8b:f7:05:15:94:03:4a:b3:69:93:b7:4c:
                    33:03:ea:be:89:92:78:18:14:3f:f8:12:ab:bc:5b:
                    31:9c:94:7b:e2:51:9a:a0:3c:e0:27:49:e9:60:e2:
                    39:ff:21:1f:e0:ea:81:fe:09:50:47:2d:fb:09:a8:
                    9c:a1:ba:c1:22:23:9d:a0:10:9f:03:6d:55:0d:70:
                    fd:fb:bc:fa:b5:c7:a5:aa:d7:57:da:53:21:4c:7e:
                    59:f2:a2:b4:25:78:fa:f3:b1:df:28:9d:4a:16:d9:
                    fb:3f:ce:84:e8:d3:5a:e7:8b:26:e4:f9:7c:9c:6d:
                    a4:a0:5b:1f:3b:14:57:e8:8b:88:e7:fc:f7:b8:a3:
                    f3:f4:1c:22:7e:d6:e6:84:37:c3:fa:ac:dd:6f:c7:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4A:43:A9:1F:8D:02:49:AC:46:33:A5:13:D4:53:4B:4D:BE:98:3F
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:e9:e2:7f:28:ab:96:82:b1:cb:15:63:ac:d7:64:4f:47:
         6c:f2:f7:1c:40:76:cc:f6:10:c8:99:7e:a0:21:72:f1:38:e8:
         a2:bd:33:d9:8b:90:c5:12:1d:3e:aa:1c:c6:45:9d:d9:92:b2:
         cd:77:0c:cf:4f:70:41:40:cd:b3:0d:2b:18:6f:f8:7e:3e:34:
         e3:15:a5:f8:fd:b1:c9:61:82:88:72:8d:d4:76:d9:b9:c8:46:
         ae:bd:3a:f8:3e:a9:bb:cc:cf:15:ec:d6:8b:97:5c:28:1b:ab:
         79:48:1a:9e:cf:8f:0b:97:7c:8c:c5:cd:35:94:d5:07:45:30:
         82:fc:72:7a:d8:b5:9e:80:47:54:2a:f8:3f:fd:65:7c:7c:1c:
         04:84:2e:9b:a9:fe:58:7c:46:cf:a6:5e:13:fb:5a:9a:92:d1:
         d2:65:0b:4d:4c:ac:53:f8:71:77:da:60:f6:8c:44:81:25:d0:
         32:df:ea:a3:1c:ae:d1:0f:29:11:de:7c:c8:0c:4e:50:ac:cf:
         4b:dd:f1:0c:06:58:41:0a:f9:e1:fa:44:19:42:e1:52:bd:82:
         05:29:ba:07:47:e1:86:07:71:88:0c:b7:f5:6e:92:fd:ff:76:
         9f:3a:e0:9d:d9:2b:9f:6d:11:f8:15:a9:af:18:07:0f:b3:04:
         58:1c:b7:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRCNzIxMTAvBgNVBAUTKDMzOTNGOUQwNzBCMkU3MDk0OUFDQTJBQUNDOEU2NUU4
OTBFNzQwOTkwHhcNMjYwMzAxMDYyMDIzWhcNMjYwMzA4MDYyMDIzWjAYMRYwFAYD
VQQDEw02OWEzZGFhOC1kNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQfxRRCSUthxsNHwOfatvWYs5metSE9vrwGIs2iIllkqyAqapdcJ/xplEQKE
affmQOPSwCDOYjAYvpdBnaaHX9h511/F3+kLFWLJfiNbHbEqW8R5uST1AtLuTaV7
C8stz4Qf/Y62t81/XDeL9wUVlANKs2mTt0wzA+q+iZJ4GBQ/+BKrvFsxnJR74lGa
oDzgJ0npYOI5/yEf4OqB/glQRy37CaicobrBIiOdoBCfA21VDXD9+7z6tcelqtdX
2lMhTH5Z8qK0JXj687HfKJ1KFtn7P86E6NNa54sm5Pl8nG2koFsfOxRX6IuI5/z3
uKPz9BwiftbmhDfD+qzdb8eeQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJKQ6kf
jQJJrEYzpRPUU0tNvpg/MB8GA1UdIwQYMBaAFDOT+dBwsucJSayiqsyOZeiQ50CZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi84NjExRTYyRTMx
RjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3bEpyS0txekk1bDZKRG5R
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REI3Mi84NjExRTYyRTMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3
bEpyS0txekk1bDZKRG5RSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb3Hp4n8oq5aCscsVY6zXZE9HbPL3HEB2zPYQyJl+oCFy8Tjoor0z2YuQxRId
PqocxkWd2ZKyzXcMz09wQUDNsw0rGG/4fj404xWl+P2xyWGCiHKN1HbZuchGrr06
+D6pu8zPFezWi5dcKBureUgans+PC5d8jMXNNZTVB0Uwgvxyeti1noBHVCr4P/1l
fHwcBIQum6n+WHxGz6ZeE/tampLR0mULTUysU/hxd9pg9oxEgSXQMt/qoxyu0Q8p
Ed58yAxOUKzPS93xDAZYQQr54fpEGULhUr2CBSm6B0fhhgdxiAy39W6S/f92nzrg
ndkrn20R+BWprxgHD7MEWBy3NQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:27 2026 by rpki-client