Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
File:                     o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json)
Hash identifier:          FaysSSJQJvN9xnneINpbtLSRwzG/NALZdEsAYDbyxMI=
Subject key identifier:   1F:5F:F1:41:57:AF:E6:B0:11:36:D6:AB:2D:D9:06:B7:EB:81:77:66
Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
Certificate issuer:       /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
Manifest number:          0102
Signing time:             Mon 02 Mar 2026 01:00:28 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:26 +0000
Manifest next update:     Mon 09 Mar 2026 01:00:26 +0000
Files and hashes:         1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: 8doSfW/wn6uSWxWY/J7QzmFhh3mCYdkNzO7gjWaJubI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
        Validity
            Not Before: Mar  2 01:00:26 2026 GMT
            Not After : Mar  9 01:00:26 2026 GMT
        Subject: CN=69a4e12b-3933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:f7:bb:1e:a1:1d:c4:00:86:d8:c9:e1:48:
                    84:71:24:af:ba:07:18:5f:fe:b0:e3:8c:52:ce:14:
                    78:5c:58:34:a6:7e:ba:ad:e8:b4:3c:70:ce:7c:b5:
                    9f:d2:95:42:f7:2e:d5:af:29:55:d0:7d:b3:ef:8b:
                    9b:d2:bc:02:01:0c:1c:89:6d:72:8c:b1:95:0b:b2:
                    6d:0f:1b:47:29:c9:53:a4:a3:ef:f8:08:39:8f:c5:
                    c4:eb:67:e6:c4:03:cd:c4:e5:3f:7d:19:f7:84:f1:
                    5d:ae:cd:28:43:88:f6:c4:0b:5f:c5:43:ff:2a:f1:
                    d7:98:17:47:af:40:1a:4e:9d:8d:7d:73:ae:22:a0:
                    8e:99:6e:ee:f7:b6:00:fe:b0:05:d3:88:a5:16:15:
                    5c:77:c8:b6:72:f5:88:ba:69:87:7e:61:ee:b1:5b:
                    2e:6a:54:73:6b:39:59:f0:cd:b1:11:56:fe:5d:7a:
                    ff:04:a3:d6:20:2d:8a:8e:97:6f:8a:88:14:5f:07:
                    e4:d6:0d:5f:0d:67:00:60:a6:e3:6a:f7:e5:0f:5d:
                    48:19:42:f1:50:4f:65:9e:2e:75:47:c1:cc:99:3f:
                    66:ef:c4:6c:f3:7b:fa:36:29:17:c4:3f:14:3b:53:
                    87:42:45:bd:d5:ce:82:11:d7:0f:04:05:b5:6e:f9:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5F:F1:41:57:AF:E6:B0:11:36:D6:AB:2D:D9:06:B7:EB:81:77:66
            X509v3 Authority Key Identifier:
                keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:35:f2:ee:06:f3:a4:cb:0f:6b:aa:1f:03:43:d0:82:5a:0c:
         97:a0:dd:71:5c:c6:b3:b6:ef:01:31:e9:c7:c7:2b:d0:29:47:
         58:3b:b9:8e:e3:8d:2b:38:1a:3a:9a:dc:07:c0:82:6c:6b:f8:
         6b:30:50:94:98:2a:6b:61:7d:0d:3b:91:33:e7:ce:6c:aa:83:
         f1:ad:0a:e7:8b:88:52:e2:fd:bc:f0:29:f5:40:68:2c:59:85:
         26:48:97:02:82:e8:d3:c3:c9:de:1f:eb:f4:1f:9e:c9:17:cc:
         b7:6b:bc:a2:89:b0:73:47:e5:de:26:c1:9e:15:ad:ce:6f:3e:
         68:83:d2:c4:a8:ac:96:a8:ee:f6:40:b5:15:ef:47:2a:ee:8c:
         e0:6d:6d:ae:9d:7e:f3:d2:29:d7:81:05:28:f3:9c:c0:3e:7a:
         13:23:65:ec:71:06:e5:d7:7f:d4:e1:b1:35:76:e8:58:10:9b:
         9f:96:ff:65:9a:e5:2b:8a:97:a5:cc:90:bd:b6:d8:17:80:44:
         c2:9c:9a:5a:66:b3:b1:a2:98:2c:84:21:05:92:a5:e9:f3:3e:
         78:28:05:92:5f:2a:a1:f1:68:47:b6:e5:b1:41:ae:7e:f7:c1:
         2b:e4:b6:31:44:41:d7:8d:a1:50:df:57:79:21:0e:72:ff:b9:
         e7:30:02:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI3QzUxMTAvBgNVBAUTKEEzOTg3MTQ2MjZGODdBQ0VCRTVGNkZEMDFFNTA3MDE5
MTVBQTdEMTUwHhcNMjYwMzAyMDEwMDI2WhcNMjYwMzA5MDEwMDI2WjAYMRYwFAYD
VQQDEw02OWE0ZTEyYi0zOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApAf3ux6hHcQAhtjJ4UiEcSSvugcYX/6w44xSzhR4XFg0pn66rei0PHDOfLWf
0pVC9y7VrylV0H2z74ub0rwCAQwciW1yjLGVC7JtDxtHKclTpKPv+Ag5j8XE62fm
xAPNxOU/fRn3hPFdrs0oQ4j2xAtfxUP/KvHXmBdHr0AaTp2NfXOuIqCOmW7u97YA
/rAF04ilFhVcd8i2cvWIummHfmHusVsualRzazlZ8M2xEVb+XXr/BKPWIC2Kjpdv
iogUXwfk1g1fDWcAYKbjavflD11IGULxUE9lni51R8HMmT9m78Rs83v6NikXxD8U
O1OHQkW91c6CEdcPBAW1bvlwWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9f8UFX
r+awETbWqy3ZBrfrgXdmMB8GA1UdIwQYMBaAFKOYcUYm+HrOvl9v0B5QcBkVqn0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EOUFBQjgyQzhB
RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVzNi1YMl9RSGxCd0dSV3Fm
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL281aHhSaWI0ZXM2LVgyX1FIbEJ3R1JXcWZSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjdDNS9EOUFBQjgyQzhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVz
Ni1YMl9RSGxCd0dSV3FmUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVjXy7gbzpMsPa6ofA0PQgloMl6DdcVzGs7bvATHpx8cr0ClHWDu5juONKzga
OprcB8CCbGv4azBQlJgqa2F9DTuRM+fObKqD8a0K54uIUuL9vPAp9UBoLFmFJkiX
AoLo08PJ3h/r9B+eyRfMt2u8oomwc0fl3ibBnhWtzm8+aIPSxKislqju9kC1Fe9H
Ku6M4G1trp1+89Ip14EFKPOcwD56EyNl7HEG5dd/1OGxNXboWBCbn5b/ZZrlK4qX
pcyQvbbYF4BEwpyaWmazsaKYLIQhBZKl6fM+eCgFkl8qofFoR7blsUGufvfBK+S2
MURB142hUN9XeSEOcv+55zACHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:00 2026 by rpki-client