Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
File:                     P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json)
Hash identifier:          IQZmKZH4SLSirCwla+l1UJh4ec6TXpjdm2dZoL54Tfk=
Subject key identifier:   C3:E2:68:EB:67:09:D1:B5:CE:98:47:3E:AD:FB:08:8C:9D:8C:6D:92
Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
Certificate issuer:       /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
Manifest number:          01E8
Signing time:             Sun 01 Mar 2026 04:08:39 +0000
Manifest this update:     Sun 01 Mar 2026 04:08:39 +0000
Manifest next update:     Sun 08 Mar 2026 04:08:39 +0000
Files and hashes:         1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: CWJSIh+UB9HcmMb8z6FSOByIbOY5nwGnJ7rk9QpHrRM=)
                          2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: Q3p56EBz1xC365ZPw62kRQzqXww33xOtvu79Twkm2RE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
                          rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
        Validity
            Not Before: Mar  1 04:08:39 2026 GMT
            Not After : Mar  8 04:08:39 2026 GMT
        Subject: CN=69a3bbc7-2321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:99:44:93:30:ae:f8:b4:12:f9:8c:c1:30:
                    f0:e9:31:25:4c:ff:91:0e:e4:84:8f:d0:bc:d1:e4:
                    17:e3:b2:c6:04:8e:93:e4:75:4b:6e:fe:35:87:a8:
                    ea:7b:28:73:09:9f:fd:30:17:1c:96:ed:70:88:65:
                    1a:6e:b6:ea:f3:f4:31:99:4a:aa:b0:95:28:05:ec:
                    7d:2c:ae:bb:c1:7a:78:3b:82:d7:50:43:b0:75:fa:
                    5c:23:72:cc:51:28:40:26:01:cf:75:12:46:3b:c8:
                    19:2a:93:b1:d5:a0:59:f8:62:f3:6b:b4:cc:39:2e:
                    14:22:ea:48:11:b0:5d:2e:57:ad:7a:04:fb:a8:ab:
                    26:40:3a:73:b8:62:47:c8:b4:a8:32:ea:94:af:2d:
                    45:34:6a:71:1f:8c:b2:ff:61:c5:75:09:f4:6f:2b:
                    51:4a:d6:4b:54:1a:ff:8f:41:10:50:d3:32:40:49:
                    8c:b5:7d:a7:73:37:51:6f:f3:e7:6d:0c:33:9f:ce:
                    07:53:93:42:8c:3e:bc:f3:08:a2:db:b1:e3:42:12:
                    f9:57:5e:fe:1a:c4:2a:e0:19:ee:6d:48:99:ed:5b:
                    41:75:fe:b5:95:05:6f:f4:5d:a7:19:23:2e:96:6e:
                    83:62:ce:3b:8e:2d:8f:ee:13:71:22:44:78:b1:72:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E2:68:EB:67:09:D1:B5:CE:98:47:3E:AD:FB:08:8C:9D:8C:6D:92
            X509v3 Authority Key Identifier:
                keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d5:ed:35:9e:5e:e9:52:3e:0b:cb:62:ae:6b:c5:1b:7c:da:
         68:0b:56:a0:f0:3d:fe:a3:33:be:3f:3b:ba:1a:b3:57:a2:2b:
         bb:93:28:2d:9b:e7:05:ad:d0:77:8b:06:52:11:95:33:78:6e:
         cf:75:8a:2d:be:3e:84:87:6c:76:0b:be:fd:3c:13:de:25:b5:
         c8:1d:f0:52:ba:79:43:27:c2:4a:4a:13:5d:92:33:1d:3a:30:
         d5:03:cd:f4:63:e6:72:25:a6:8c:be:1e:51:23:82:8a:85:0b:
         3f:9d:61:cb:32:07:88:a2:f5:00:c8:25:c6:fc:68:82:6a:b6:
         28:fb:7f:a7:b0:e1:4b:3b:63:6a:17:a0:fe:bc:ac:06:e8:c3:
         23:0c:19:eb:cb:13:a7:35:22:a4:bb:5e:16:c2:ae:c7:e2:c6:
         02:b5:f6:a9:4f:3e:49:ae:76:aa:ee:a6:7a:da:7c:e2:d4:3e:
         ac:7a:1b:fa:14:de:b7:77:95:82:3f:cc:06:17:b1:e6:3e:0e:
         8e:4e:c3:81:5b:34:16:44:60:a6:8b:07:4a:2f:90:a4:d1:03:
         a8:4f:ae:c2:15:c3:4b:a0:e5:9c:e7:bf:d8:e1:b4:7c:50:0b:
         3f:fb:31:f3:43:a6:4e:30:8e:17:25:a0:f3:60:30:65:18:3a:
         b4:85:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:03 2026 by rpki-client