Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
File:                     1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json)
Hash identifier:          48dk0ZxsKtQxmLWFNWKVlrO8AeVqWLgUukLCEcgqQEA=
Subject key identifier:   CB:F0:28:61:BF:57:44:77:9D:5B:DB:82:3D:AA:46:4E:25:B2:D7:E1
Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22
Certificate issuer:       /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22
Certificate serial:       052B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
Manifest number:          0523
Signing time:             Mon 02 Mar 2026 00:43:30 +0000
Manifest this update:     Mon 02 Mar 2026 00:43:28 +0000
Manifest next update:     Mon 09 Mar 2026 00:43:28 +0000
Files and hashes:         1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: 0XBr8okShpZufVP+fKQukmplwaDUH4IB7ka5/pFXjpU=)
                          2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: b7CwC2fe96z3x+Fvfv4++7k3I2tqTbNxtFKEdcFxbNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl
                          rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D65, serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22
        Validity
            Not Before: Mar  2 00:43:28 2026 GMT
            Not After : Mar  9 00:43:28 2026 GMT
        Subject: CN=69a4dd32-a392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:19:01:f4:78:e3:65:77:b6:60:e2:bf:4f:d1:
                    13:4b:73:3d:7d:d5:25:81:5f:26:b9:81:d0:74:51:
                    8f:84:b6:cc:36:74:07:0d:ae:ed:e3:c8:e3:bd:cd:
                    e9:96:fe:61:c1:59:34:73:b5:bc:47:a0:ad:d1:cb:
                    93:52:cf:4e:ec:1d:1c:48:d3:e3:29:5b:76:ec:52:
                    2d:59:52:bf:3d:b1:bf:e1:2a:e1:ef:cb:39:e1:ee:
                    d9:9d:e7:11:34:fe:d6:82:e0:d2:99:0d:5a:fb:f5:
                    16:99:6a:ff:a4:0a:b9:f0:47:08:a8:bb:7d:cb:23:
                    d2:45:6a:19:2b:bd:e8:8f:70:0f:f3:e9:26:63:be:
                    ec:ec:df:12:2f:d8:4a:3d:e6:40:42:80:4f:8a:63:
                    4a:6a:a6:c2:25:4b:20:a5:5b:08:a4:24:ef:01:77:
                    bb:a9:b7:a1:06:81:e6:af:e4:ed:b6:07:d4:a1:72:
                    0a:cb:1b:a4:23:4b:4d:20:be:4a:72:3a:45:24:1e:
                    3c:8d:2d:1b:64:47:4f:3b:53:32:4f:cf:48:3a:b0:
                    b8:31:21:95:87:67:e1:68:a1:c9:dd:6f:ee:02:d8:
                    fa:c2:2f:af:1d:82:4b:73:9b:bc:42:f9:94:38:7a:
                    9a:04:af:f0:19:11:2e:53:5b:8f:bd:22:cb:39:7c:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F0:28:61:BF:57:44:77:9D:5B:DB:82:3D:AA:46:4E:25:B2:D7:E1
            X509v3 Authority Key Identifier:
                keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:56:1f:33:99:72:0b:52:15:28:4d:7d:55:92:97:61:ca:1f:
         66:ed:6a:6d:6d:bf:53:ac:52:b1:b0:27:62:e5:1b:73:29:2c:
         f9:33:d8:6c:9d:b0:fc:34:4b:4e:63:76:62:77:f6:46:3d:58:
         b5:3c:5e:df:f7:43:2b:c2:51:ed:9a:69:64:e7:17:d9:97:cf:
         6e:0a:d1:74:8f:1d:8b:8f:42:46:75:55:16:57:2e:cf:f2:af:
         da:5b:af:cf:7a:45:48:89:3b:06:dd:4b:83:8a:27:3c:1e:7f:
         a9:bd:d5:e1:51:95:db:4f:eb:28:a2:65:85:5b:50:d8:15:c8:
         1e:f8:4f:de:5e:32:a6:8e:4d:8d:58:e4:af:07:73:4c:f8:07:
         86:4e:b5:f5:2d:ec:02:a4:2c:9d:e4:fe:e8:c7:47:ed:6d:e4:
         86:dc:a2:5f:69:f7:ac:8e:95:74:24:4a:89:33:e5:56:2b:5e:
         86:92:e5:7c:00:a1:88:fb:6b:90:88:9f:ad:00:e3:1f:93:3a:
         3a:4d:90:4a:03:7a:4a:c8:c6:28:1a:f5:9a:03:f8:b4:13:36:
         0c:b1:f0:2a:47:c4:d4:f1:97:71:c0:89:ac:79:33:aa:66:a2:
         ef:d0:06:fd:df:ff:93:24:67:df:b2:ab:b4:41:24:03:40:31:
         a0:ea:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:52 2026 by rpki-client