Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
File:                     R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json)
Hash identifier:          zNxQyYiRrXrdxTKqj+Q6tpeRWQZPs6t5xr8YgJ6xKSM=
Subject key identifier:   DB:1F:32:21:EE:D3:4A:D3:83:3F:43:76:FA:BE:38:73:95:93:A2:06
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Certificate issuer:       /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
Manifest number:          0230
Signing time:             Mon 02 Mar 2026 00:21:17 +0000
Manifest this update:     Mon 02 Mar 2026 00:21:15 +0000
Manifest next update:     Mon 09 Mar 2026 00:21:15 +0000
Files and hashes:         1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: 30stOoinxukZCDgXxZLfoNf9R4WVPOj3BBWW8TgyeEA=)
                          2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: P3ej5XFQlJcMQQxLttfvW/K/Ryt5xBSLQ4egcs4pQwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
                          rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
        Validity
            Not Before: Mar  2 00:21:15 2026 GMT
            Not After : Mar  9 00:21:15 2026 GMT
        Subject: CN=69a4d7fd-5268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:d0:43:41:c2:35:ac:d1:be:17:22:44:a2:
                    ae:ab:2f:f2:6a:7c:01:2a:c8:ad:4d:69:b1:89:a5:
                    5d:db:22:84:f4:3d:45:04:a1:dd:9a:f7:9c:c2:a2:
                    2b:fe:f0:c4:19:29:76:25:56:65:d0:a8:73:c8:5a:
                    ad:2a:2a:f5:68:8e:ba:ce:35:30:d0:28:e6:37:c3:
                    f8:3f:dd:e2:b8:4e:76:61:e6:62:07:3d:62:d7:7a:
                    6b:04:dd:f7:f6:0c:21:6b:64:f2:7c:87:95:aa:bd:
                    89:d6:20:ae:fb:66:dc:19:0b:1f:79:72:61:1d:d4:
                    41:15:c1:fc:04:59:7f:33:2d:9f:f8:58:92:1f:90:
                    6b:b3:6f:18:86:95:95:2e:d4:07:fe:89:44:fa:00:
                    3b:43:9c:74:c6:47:2d:e1:d7:73:85:ca:c6:98:8d:
                    13:b9:96:f0:c9:f9:b1:66:77:49:78:b7:b5:10:de:
                    b6:cb:14:e5:91:3f:a6:a4:2e:ad:3c:2f:52:5d:15:
                    b5:fe:a0:10:d3:c7:83:bc:ee:52:2e:28:e5:49:fa:
                    8d:c3:37:21:c9:ae:7f:d0:4d:d9:19:2e:4c:36:b2:
                    e9:95:01:c8:a2:c7:d6:bb:44:e4:51:8c:ed:cf:da:
                    dd:04:22:af:f5:37:01:d8:06:0c:08:c3:b0:90:5b:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1F:32:21:EE:D3:4A:D3:83:3F:43:76:FA:BE:38:73:95:93:A2:06
            X509v3 Authority Key Identifier:
                keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:28:fd:97:3f:02:dd:22:de:40:44:9b:99:1e:b6:e3:d0:ea:
         b9:26:a8:69:c9:73:1e:eb:11:71:dc:1b:45:eb:19:c2:49:15:
         9e:87:e7:d0:5a:93:1d:ed:fc:0e:d3:59:24:ec:20:a5:cb:b6:
         19:78:55:43:d7:49:67:5e:0d:e6:de:67:02:bc:e0:a1:51:7f:
         87:40:d8:a2:ad:84:d1:68:f2:98:04:f6:9d:87:9b:32:45:37:
         81:5a:4f:34:88:23:87:1a:ef:75:d4:ee:00:24:00:bb:9c:ce:
         3c:19:ab:1b:3c:2c:51:69:c4:d2:bb:a4:b3:90:80:10:0d:3d:
         ee:24:5f:b0:e3:7e:89:cc:d8:2b:f2:90:74:fa:f2:c0:23:48:
         30:0a:b2:36:4b:0d:07:d2:8c:aa:e7:2a:0b:f2:3a:4b:cd:9e:
         14:a2:3c:07:59:1b:29:46:a6:2b:16:5e:25:1f:6c:53:e7:9b:
         4c:a7:89:23:8a:f0:b6:06:1c:47:20:36:41:be:35:14:c9:51:
         d2:b1:93:3c:50:67:c5:ec:7b:78:b8:a6:ab:51:59:d0:09:61:
         b4:f2:b9:85:fb:38:0b:84:e0:75:19:68:8c:a8:38:c2:dd:83:
         6c:e7:e8:59:0b:ad:22:21:87:d4:b5:73:98:95:bd:60:b5:80:
         f9:da:1e:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MzNkExMTAvBgNVBAUTKDQ3NTMwMEM5NkVCOUEyNEUzMzFEMEIzOTAwNzBDNDVB
MjlDOTVFNjkwHhcNMjYwMzAyMDAyMTE1WhcNMjYwMzA5MDAyMTE1WjAYMRYwFAYD
VQQDEw02OWE0ZDdmZC01MjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzyDQQ0HCNazRvhciRKKuqy/yanwBKsitTWmxiaVd2yKE9D1FBKHdmvecwqIr
/vDEGSl2JVZl0KhzyFqtKir1aI66zjUw0CjmN8P4P93iuE52YeZiBz1i13prBN33
9gwha2TyfIeVqr2J1iCu+2bcGQsfeXJhHdRBFcH8BFl/My2f+FiSH5Brs28YhpWV
LtQH/olE+gA7Q5x0xkct4ddzhcrGmI0TuZbwyfmxZndJeLe1EN62yxTlkT+mpC6t
PC9SXRW1/qAQ08eDvO5SLijlSfqNwzchya5/0E3ZGS5MNrLplQHIosfWu0TkUYzt
z9rdBCKv9TcB2AYMCMOwkFv4uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsfMiHu
00rTgz9Ddvq+OHOVk6IGMB8GA1UdIwQYMBaAFEdTAMluuaJOMx0LOQBwxFopyV5p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM2QS80MDkzNDI4MEM3
QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9rNHpIUXM1QUhERVdpbkpY
bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IxTUF5VzY1b2s0ekhRczVBSERFV2luSlhtay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzM2QS80MDkzNDI4MEM3QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9r
NHpIUXM1QUhERVdpbkpYbWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqij9lz8C3SLeQESbmR6249DquSaoaclzHusRcdwbResZwkkVnofn0FqTHe38
DtNZJOwgpcu2GXhVQ9dJZ14N5t5nArzgoVF/h0DYoq2E0WjymAT2nYebMkU3gVpP
NIgjhxrvddTuACQAu5zOPBmrGzwsUWnE0ruks5CAEA097iRfsON+iczYK/KQdPry
wCNIMAqyNksNB9KMqucqC/I6S82eFKI8B1kbKUamKxZeJR9sU+ebTKeJI4rwtgYc
RyA2Qb41FMlR0rGTPFBnxex7eLimq1FZ0AlhtPK5hfs4C4TgdRlojKg4wt2DbOfo
WQutIiGH1LVzmJW9YLWA+doe0A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:44 2026 by rpki-client