Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File:                     Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier:          kx0wQkjPivN5s7py/nE4kwjsv/7y6NAvu/XxHhaaQg4=
Subject key identifier:   F8:8D:69:6B:3A:F6:DF:86:37:26:CB:3F:BA:97:F7:76:24:B8:A4:4D
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer:       /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number:          5B
Signing time:             Sun 01 Mar 2026 09:32:38 +0000
Manifest this update:     Sun 01 Mar 2026 09:32:37 +0000
Manifest next update:     Sun 08 Mar 2026 09:32:37 +0000
Files and hashes:         1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: X+xIpdvD/Pb1rTGEzu4p2q6RuQLweWb1sE1VQwM5pLU=)
                          2: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: C895awW0iPQoVfIXjTm3Yt6AECnG0w/x1R5StsObe2s=)
                          3: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: j+lAAPB9v9s39rB3XeTq/mQabzWIrT+uwwVzKJaE2Fw=)
                          4: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: CNeskz25yAbEaxsLMjegHDJiYGePQTzaDUtY7werUEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
                          rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
        Validity
            Not Before: Mar  1 09:32:37 2026 GMT
            Not After : Mar  8 09:32:37 2026 GMT
        Subject: CN=69a407b6-85fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:fb:04:c3:2c:76:b8:fc:b6:e9:ea:23:20:
                    20:ea:98:1d:14:e2:74:66:fa:a5:51:49:43:d2:66:
                    76:c5:b5:bc:92:e2:68:60:8d:40:a7:b1:ef:02:f3:
                    8c:b4:8f:e4:93:a8:92:7d:a2:3e:5a:dd:de:71:35:
                    ed:27:0b:d6:57:59:be:6e:b3:9c:cd:7a:d4:d2:5a:
                    38:eb:53:bf:cc:0e:8f:5a:ca:c0:34:a7:fa:38:47:
                    9a:86:13:78:ab:b6:28:64:df:a4:e8:90:31:0a:6d:
                    72:65:b8:1f:27:ac:4b:a7:32:d2:1b:76:e4:ab:80:
                    86:c1:63:73:80:24:40:59:0a:a5:50:d1:ee:75:4d:
                    c9:2c:77:5d:c9:1a:84:a9:44:98:17:ad:57:4e:05:
                    e0:68:a6:e6:79:96:5d:a8:53:6b:12:79:00:00:cd:
                    ef:43:97:be:4f:f9:cb:45:81:d9:18:37:6d:d8:76:
                    2c:91:9e:51:c6:07:5d:9c:57:1b:ee:9d:bf:12:6a:
                    da:83:19:1b:e0:2a:28:58:73:e7:bf:2f:eb:23:62:
                    76:83:3a:dc:8b:2d:7a:ec:f0:dc:41:25:62:da:08:
                    d2:8a:d0:00:7f:b8:83:38:19:4a:4c:06:b8:bd:53:
                    bf:84:ae:5e:9f:16:88:20:4d:dd:9b:91:78:91:cf:
                    5f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8D:69:6B:3A:F6:DF:86:37:26:CB:3F:BA:97:F7:76:24:B8:A4:4D
            X509v3 Authority Key Identifier:
                keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:93:6f:e9:94:74:dc:b5:46:c8:09:9d:91:a3:14:ea:8b:
         4e:8f:b6:e9:2d:70:c9:36:fd:90:8d:d1:04:ff:47:8e:01:05:
         a0:6b:64:f7:f2:0c:36:df:cd:ab:cc:37:1f:d9:65:e0:35:52:
         29:b0:fe:e6:95:2d:97:28:55:9c:3a:9b:71:26:39:27:46:18:
         fc:73:e1:91:99:27:39:26:ba:6f:4e:38:59:12:1d:16:97:e0:
         65:08:d7:48:8a:19:65:ee:a4:a3:72:d0:df:1a:f5:1d:9e:1b:
         28:2d:86:af:02:9f:a0:9b:97:6c:ff:ea:cd:5f:91:9f:fc:28:
         b7:ea:27:d3:ff:16:44:90:bb:2e:4f:9f:82:1f:b3:67:99:fa:
         25:ff:3a:db:d8:72:22:21:58:18:07:cd:9f:1f:0f:5f:35:74:
         46:97:7b:57:29:3b:7f:e2:35:7d:5c:5f:4a:ba:df:04:8b:ea:
         ef:c4:6e:13:eb:60:0b:89:25:bf:ce:b8:55:93:06:06:c2:a6:
         ed:bf:d6:78:21:ce:70:d2:5f:d6:7d:fe:7d:9f:d8:ee:ae:8d:
         4e:f2:d4:fc:7a:3f:b9:5c:03:e9:fa:b6:8f:43:54:fb:90:10:
         fe:0a:54:eb:78:43:1f:6d:d8:c8:09:18:7d:45:3d:01:05:2a:
         c9:77:33:6a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QzBDQzExMC8GA1UEBRMoMERDQUZBQzE0NUIyMkYxNTYwNzgwMTY2Q0QxRjE1MTUw
NEVFRjhBMTAeFw0yNjAzMDEwOTMyMzdaFw0yNjAzMDgwOTMyMzdaMBgxFjAUBgNV
BAMTDTY5YTQwN2I2LTg1ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiVPsEwyx2uPy26eojICDqmB0U4nRm+qVRSUPSZnbFtbyS4mhgjUCnse8C84y0
j+STqJJ9oj5a3d5xNe0nC9ZXWb5us5zNetTSWjjrU7/MDo9aysA0p/o4R5qGE3ir
tihk36TokDEKbXJluB8nrEunMtIbduSrgIbBY3OAJEBZCqVQ0e51Tcksd13JGoSp
RJgXrVdOBeBopuZ5ll2oU2sSeQAAze9Dl75P+ctFgdkYN23YdiyRnlHGB12cVxvu
nb8SatqDGRvgKihYc+e/L+sjYnaDOtyLLXrs8NxBJWLaCNKK0AB/uIM4GUpMBri9
U7+Erl6fFoggTd2bkXiRz1/vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+I1pazr2
34Y3Jss/upf3diS4pE0wHwYDVR0jBBgwFoAUDcr6wUWyLxVgeAFmzR8VFQTu+KEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMENDLzhGQ0NDN0Y4OEY1
NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1L
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRGNyNndVV3lMeFZnZUFGbXpSOFZGUVR1LUtFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD
MENDLzhGQ0NDN0Y4OEY1NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhW
Z2VBRm16UjhWRlFUdS1LRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAZ+ZNv6ZR03LVGyAmdkaMU6otOj7bpLXDJNv2QjdEE/0eOAQWga2T38gw2382r
zDcf2WXgNVIpsP7mlS2XKFWcOptxJjknRhj8c+GRmSc5JrpvTjhZEh0Wl+BlCNdI
ihll7qSjctDfGvUdnhsoLYavAp+gm5ds/+rNX5Gf/Ci36ifT/xZEkLsuT5+CH7Nn
mfol/zrb2HIiIVgYB82fHw9fNXRGl3tXKTt/4jV9XF9Kut8Ei+rvxG4T62ALiSW/
zrhVkwYGwqbtv9Z4Ic5w0l/Wff59n9juro1O8tT8ej+5XAPp+raPQ1T7kBD+ClTr
eEMfbdjICRh9RT0BBSrJdzNq
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:19 2026 by rpki-client